exploit the possibilities
Showing 1 - 14 of 14 RSS Feed

Files Date: 2000-03-13

Posted Mar 13, 2000
Authored by Rikhardur Egilsson | Site hack.co.za

DNSKiller - Demonstrates a bug in Microsoft DNS server.

tags | denial of service
MD5 | 3ce7a8e50bc7a8d569b4dee55a7b5c12
Posted Mar 13, 2000
Authored by Kevin Wormington | Site hack.co.za

Sample Windoze NT RAS PPTP exploit - I discovered that NT 4.0 w/SP3 and RAS PPTP is vulnerable to a DOS causing core dump.

tags | denial of service
MD5 | 4dd593847b0c5f3e4271705c1f2096c1
Posted Mar 13, 2000
Authored by Cosa Nostra

x-dumper.sh remote xwin exploit - Will attempt to dump a screen via xwd.

tags | exploit, remote
MD5 | f5ecca2a17d22133021c79520e697743
Posted Mar 13, 2000
Authored by teso, S. Krahmer | Site cs.uni-potsdam.de

TESO Security Advisory - A vulnerability within the wmcdplay CD playing application for the WindowMaker desktop has been discovered. It allows local root compromise through arbitrary code execution.Any system which has wmcdplay installed as setuid root is vulnerable.

tags | arbitrary, local, root, code execution
MD5 | 15def16c5e23da0e4e13393a8f8ffb0f
Posted Mar 13, 2000
Authored by teso, S. Krahmer | Site cs.uni-potsdam.de

TESO Security Advisory - The atsar application contains an exploitable vulnerability. The Halloween 4 Linux distribution, which is based on RedHat 6.1 is shipped with this suid-root program. It might be used to gain superuser privileges. Any system that has atsar-linux-1.4.2 package installed is vulnerable.

tags | root
systems | linux, redhat
MD5 | 11418d3684b96ff6cb2f5295823e04fa
Posted Mar 13, 2000
Authored by Dug Song | Site monkey.org

dsniff is a suite of utilities that are useful for penetration testing. It consists of the following programs: arpredirect intercepts packets from a target host on the LAN intended for another host on the LAN by forging ARP replies. findgw determines the local gateway of an unknown network via passive sniffing. macof floods the local network with random MAC addresses. tcpkill kills specified in-progress TCP connections. dsniff is a simple password sniffer which handles many protocols. mailsnarf outputs all messages sniffed from SMTP traffic in Berkeley mbox format. webspy sends URLs sniffed from a client to your local Netscape browser for display, updated in real-time.

Changes: Added parsing for Napster, AIM, ICQ (v2, v5), and CVS pserver. Now supports more non-glibc Linux systems missing ether_ntoa(). Unique HTTP authentication information by directory is now supported. dsniff now skips IMAP command tag, and doesn't rely on /etc/services.
tags | tool, local, sniffer, tcp, protocol
MD5 | c710c0ce1cc28dce0de6784076d33d11
Posted Mar 13, 2000
Authored by Balazs Scheidler | Site balabit.hu

syslog-ng as the name shows is a syslogd replacement, but with new functionality for the new generation. The original syslogd allows messages only to be sorted based on priority/facility pair, syslog-ng adds the possibility to filter based on message contents using regular expressions. The new configuration scheme is intuitive and powerful.

Changes: Bug fixes.
tags | system logging
systems | unix
MD5 | 89f6c02ebafdfe37eec471b2fdf64692
Posted Mar 13, 2000
Authored by R. Gregory | Site linuxmafia.org

gShield is an aggressive, modular, ipchains-based firewall script. Features include: easy configuration through a BSD-style configuration file, optional IPmasq support, TCP-wrapper-like funtionality for service access, and extremely restrictive defaults. It hopes to make administrating a comprehensive firewall easier, as well as offering robust protection while being easy to setup/maintain.

Changes: Increased MASQ timeout for ICQ. Port-forwarding section can now accomodate not using ipmasqadm. Added DNS entries. Logs directly via logger. Forwarding now seperate from MASQ, Added auto-detection of interface status. BIND/imapd added to port-forwarding services.
tags | tool, tcp, firewall
systems | linux, bsd
MD5 | 4c1394450bd18316ddae5cc7cb1665d6
Posted Mar 13, 2000
Authored by Shane Kerr | Site time-travellers.org

oftpd is designed to be as secure as an anonymous FTP server can possibly be. It runs as non-root for most of the time, and uses the Unix chroot() command to hide most of the systems directories from external users--they cannot change into them even if the server is totally compromised. It also contains its own directory-change and directory-listing code (most FTP servers execute the system "ls" command to list files).

Changes: A solaris port, minor code enhancments and bugfixes.
tags | root
systems | unix
MD5 | 73c18620990e9430f0a8d305c72b77fd
Posted Mar 13, 2000
Authored by Narrow | Site legion2000.cc

Narrow Security Scanner 2000 searches for 365 remote vulnerabilities. Written in perl, tested on Redhat, FreeBSD, and OpenBSD, Slackware, and SuSE.

Changes: Removed plugins: SSH & Linuxconf and Fixed Windows Scan.
tags | tool, remote, scanner, perl, vulnerability
systems | linux, redhat, unix, freebsd, suse, slackware, openbsd
MD5 | 8004903f8487c901717c3d0964b64463
Posted Mar 13, 2000
Authored by Fflewddur

BsdScan is a light-weight port-scanner designed for the BSD operating system. It currently supports scanning single hosts, subnets, logging results, scanning ports in a random order, specifying a port range, and a speed option to only scan commonly used ports.

Changes: Fixes for some errors in the argument-parsing code, and -l, -p, and -i options should work properly now.
tags | tool, scanner
systems | unix, bsd
MD5 | fb1fad9e5108d904fa13fb289744c9f3
Posted Mar 13, 2000
Authored by Advanced Research Corporation | Site www-arc.com

Security Auditor's Research Assistant (SARA) is a security analysis tool based on the SATAN model. It is updated frequently to address the latest threats. Checks for common old holes, backdoors, trust relationships, default cgi, common logins.

Changes: Added yet more http vulernability testing incl infosrch, Fixed Netscape buffer overflow detection, Fixed some of the GUI interfaces, Adding SARA Search capability, and Added Napster detection.
tags | tool, cgi, scanner
systems | unix
MD5 | 0c7c601ca45fb8404f0a0bb4c8cf02cf
Posted Mar 13, 2000
Authored by Marcin Marszalek

pgp4pine is a script that automatically encrypts and decrypts mail under Pine using PGP. The user is not separated from things that PGP does. The program is compatible with PGP versions 2.6.3, 5.0, 6.5.1 and GNUPG 1.0, has support for an aliases file and signature-rotating programs, and can remember your passphrase for a session if you need.

Changes: Support for cleartext cache, which stores decoded messages in a cache file in your home directory for a couple of days.
tags | encryption
MD5 | 9f044176ff5ef58ed94c8edd94cac99e
Posted Mar 13, 2000
Authored by Lez

Wingatelnet automatically routes your connection through a list of wingate servers, dramatically increasing your anonimity.

tags | tool, scanner
MD5 | 91f101e9052cf75d8cb4ea8268f21558
Page 1 of 1

File Archive:

November 2020

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Nov 1st
    2 Files
  • 2
    Nov 2nd
    9 Files
  • 3
    Nov 3rd
    15 Files
  • 4
    Nov 4th
    90 Files
  • 5
    Nov 5th
    22 Files
  • 6
    Nov 6th
    16 Files
  • 7
    Nov 7th
    1 Files
  • 8
    Nov 8th
    1 Files
  • 9
    Nov 9th
    40 Files
  • 10
    Nov 10th
    27 Files
  • 11
    Nov 11th
    28 Files
  • 12
    Nov 12th
    13 Files
  • 13
    Nov 13th
    18 Files
  • 14
    Nov 14th
    2 Files
  • 15
    Nov 15th
    2 Files
  • 16
    Nov 16th
    29 Files
  • 17
    Nov 17th
    15 Files
  • 18
    Nov 18th
    15 Files
  • 19
    Nov 19th
    21 Files
  • 20
    Nov 20th
    16 Files
  • 21
    Nov 21st
    1 Files
  • 22
    Nov 22nd
    0 Files
  • 23
    Nov 23rd
    19 Files
  • 24
    Nov 24th
    0 Files
  • 25
    Nov 25th
    0 Files
  • 26
    Nov 26th
    0 Files
  • 27
    Nov 27th
    0 Files
  • 28
    Nov 28th
    0 Files
  • 29
    Nov 29th
    0 Files
  • 30
    Nov 30th
    0 Files

Top Authors In Last 30 Days

File Tags


packet storm

© 2020 Packet Storm. All rights reserved.

Security Services
Hosting By