jetlib.sec » Tags » target-host

Feeds

133445 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

20 items tagged "target host"

Related tags: zero [+], windows [+], udf user [+], target system [+], network node manager [+], microsoft [+], day [+], sql [+], open source command [+], manager. authentication [+], database management system [+], database [+], vulnerability [+], postgresql [+], mysql [+], internet guest [+], initiative [+], dll module [+], user [+], injection [+], webclient service [+], web [+], video [+], van jacobson [+], traceroute [+], tool [+], tavis ormandy [+], tavis [+], start [+], shadows [+], ruben santamarta [+], read [+], pentest [+], penetration testers [+], ormandy [+], operating [+], ntwk [+], msn [+], java [+], hacking [+], dril [+], domain tool [+], domain [+], carlos perez [+], byte packets [+], bing api [+], Tools [+], Pentesting [+]

• April 11, 2011
• 7:52

  SQLMAP - Automatic SQL Injection Tool 0.9

   » ‎ Packet Storm Security Recent Files
  sqlmap is an open source command-line automatic SQL injection tool. Its goal is to detect and take advantage of SQL injection vulnerabilities in web applications. Once it detects one or more SQL injections on the target host, the user can choose among a variety of options to perform an extensive back-end database management system fingerprint, retrieve DBMS session user and database, enumerate users, password hashes, privileges, databases, dump entire or user's specified DBMS tables/columns, run his own SQL statement, read or write either text or binary files on the file system, execute arbitrary commands on the operating system, establish an out-of-band stateful connection between the attacker box and the database server via Metasploit payload stager, database stored procedure buffer overflow exploitation or SMB relay attack and more.

  Tags:  database injection sql open-source-command database-management-system target-host  

• 7:52

  SQLMAP - Automatic SQL Injection Tool 0.9

   » ‎ Packet Storm Security Misc. Files
  sqlmap is an open source command-line automatic SQL injection tool. Its goal is to detect and take advantage of SQL injection vulnerabilities in web applications. Once it detects one or more SQL injections on the target host, the user can choose among a variety of options to perform an extensive back-end database management system fingerprint, retrieve DBMS session user and database, enumerate users, password hashes, privileges, databases, dump entire or user's specified DBMS tables/columns, run his own SQL statement, read or write either text or binary files on the file system, execute arbitrary commands on the operating system, establish an out-of-band stateful connection between the attacker box and the database server via Metasploit payload stager, database stored procedure buffer overflow exploitation or SMB relay attack and more.

  Tags:  database injection sql open-source-command database-management-system target-host  

• April 07, 2011
• 3:40

  DRIL – Domain Reverse IP Lookup Tool

   » ‎ Darknet
  DRIL (Domain Reverse IP Lookup) Tool is a Reverse Domain Tool that will really be useful for penetration testers to find out the domain names which are listed in the the target host, DRIL is a GUI, JAVA based application which uses a Bing API key. DRIL has a simple user friendly interface which will [...]
  
  Read the full post at darknet.org.uk

  
  

  

  Tags:  dril tool domain read bing-api target-host penetration-testers domain-tool hacking Tools  

• March 23, 2011
• 16:59

  PostgreSQL for Microsoft Windows Payload Execution

   » ‎ Packet Storm Security Exploits
  This Metasploit module creates and enables a custom UDF (user defined function) on the target host via the UPDATE pg_largeobject method of binary injection. On default Microsoft Windows installations of PostgreSQL (=

  Tags:  microsoft postgresql windows udf-user target-host target-system  

• 16:59

  PostgreSQL for Microsoft Windows Payload Execution

   » ‎ Packet Storm Security Recent Files
  This Metasploit module creates and enables a custom UDF (user defined function) on the target host via the UPDATE pg_largeobject method of binary injection. On default Microsoft Windows installations of PostgreSQL (=

  Tags:  microsoft postgresql windows udf-user target-host target-system  

• 16:59

  PostgreSQL for Microsoft Windows Payload Execution

   » ‎ Packet Storm Security Misc. Files
  This Metasploit module creates and enables a custom UDF (user defined function) on the target host via the UPDATE pg_largeobject method of binary injection. On default Microsoft Windows installations of PostgreSQL (=

  Tags:  microsoft postgresql windows udf-user target-host target-system  

• March 09, 2011
• 15:30

  Oracle MySQL for Microsoft Windows Payload Execution

   » ‎ Packet Storm Security Exploits
  This Metasploit module creates and enables a custom UDF (user defined function) on the target host via the SELECT ... into DUMPFILE method of binary injection. On default Microsoft Windows installations of MySQL (=

  Tags:  microsoft mysql windows udf-user target-host target-system  

• 15:30

  Oracle MySQL for Microsoft Windows Payload Execution

   » ‎ Packet Storm Security Recent Files
  This Metasploit module creates and enables a custom UDF (user defined function) on the target host via the SELECT ... into DUMPFILE method of binary injection. On default Microsoft Windows installations of MySQL (=

  Tags:  microsoft mysql windows udf-user target-host target-system  

• 15:30

  Oracle MySQL for Microsoft Windows Payload Execution

   » ‎ Packet Storm Security Misc. Files
  This Metasploit module creates and enables a custom UDF (user defined function) on the target host via the SELECT ... into DUMPFILE method of binary injection. On default Microsoft Windows installations of MySQL (=

  Tags:  microsoft mysql windows udf-user target-host target-system  

• January 11, 2011
• 17:36

  Zero Day Initiative Advisory 11-004

   » ‎ Packet Storm Security Advisories
  Zero Day Initiative Advisory 11-04 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett-Packard OpenView Network Node Manager. Authentication is not required to exploit this vulnerability. The exploit would require a crafted HTTP request to the target host. The specific flaw exists within the ovutil.dll module which is loaded by the ovwebsnmpsrv.exe process which in turn can be reached remotely through the jovgraph.exe CGI program. By supplying overly large values to variables passed through an HTTP request a sscanf can be made to overflow a static buffer. An attacker can leverage this to execute arbitrary code under the context of the user running the webserver.

  Tags:  day zero initiative network-node-manager target-host dll-module  

• 17:36

  Zero Day Initiative Advisory 11-004

   » ‎ Packet Storm Security Recent Files
  Zero Day Initiative Advisory 11-04 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett-Packard OpenView Network Node Manager. Authentication is not required to exploit this vulnerability. The exploit would require a crafted HTTP request to the target host. The specific flaw exists within the ovutil.dll module which is loaded by the ovwebsnmpsrv.exe process which in turn can be reached remotely through the jovgraph.exe CGI program. By supplying overly large values to variables passed through an HTTP request a sscanf can be made to overflow a static buffer. An attacker can leverage this to execute arbitrary code under the context of the user running the webserver.

  Tags:  day zero initiative network-node-manager target-host dll-module  

• 17:36

  Zero Day Initiative Advisory 11-004

   » ‎ Packet Storm Security Misc. Files
  Zero Day Initiative Advisory 11-04 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett-Packard OpenView Network Node Manager. Authentication is not required to exploit this vulnerability. The exploit would require a crafted HTTP request to the target host. The specific flaw exists within the ovutil.dll module which is loaded by the ovwebsnmpsrv.exe process which in turn can be reached remotely through the jovgraph.exe CGI program. By supplying overly large values to variables passed through an HTTP request a sscanf can be made to overflow a static buffer. An attacker can leverage this to execute arbitrary code under the context of the user running the webserver.

  Tags:  day zero initiative manager.-authentication network-node-manager target-host dll-module  

• 17:36

  Zero Day Initiative Advisory 11-003

   » ‎ Packet Storm Security Advisories
  Zero Day Initiative Advisory 11-03 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett-Packard OpenView Network Node Manager. Authentication is not required to exploit this vulnerability. The exploit would require a crafted HTTP request to the target host. The specific flaw exists within jovgraph.exe, a Java-based grapher that extends the SNMP Data Presenter to include xnmgraph-like applications created by the application builder. The vulnerability occurs within jovgraph when processing malformed displayWidth option passed from the arg parameter to the CGI program. A remote unauthenticated attacker can send a crafted HTTP request to the target host to exploit this vulnerability. Successful attack could allow for arbitrary code being injected and executed with the privileges of the affected process, normally Internet Guest Account on Windows platforms.

  Tags:  day zero vulnerability manager.-authentication network-node-manager target-host internet-guest  

• 17:36

  Zero Day Initiative Advisory 11-003

   » ‎ Packet Storm Security Recent Files
  Zero Day Initiative Advisory 11-03 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett-Packard OpenView Network Node Manager. Authentication is not required to exploit this vulnerability. The exploit would require a crafted HTTP request to the target host. The specific flaw exists within jovgraph.exe, a Java-based grapher that extends the SNMP Data Presenter to include xnmgraph-like applications created by the application builder. The vulnerability occurs within jovgraph when processing malformed displayWidth option passed from the arg parameter to the CGI program. A remote unauthenticated attacker can send a crafted HTTP request to the target host to exploit this vulnerability. Successful attack could allow for arbitrary code being injected and executed with the privileges of the affected process, normally Internet Guest Account on Windows platforms.

  Tags:  day zero vulnerability manager.-authentication network-node-manager target-host internet-guest  

• 17:36

  Zero Day Initiative Advisory 11-003

   » ‎ Packet Storm Security Misc. Files
  Zero Day Initiative Advisory 11-03 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett-Packard OpenView Network Node Manager. Authentication is not required to exploit this vulnerability. The exploit would require a crafted HTTP request to the target host. The specific flaw exists within jovgraph.exe, a Java-based grapher that extends the SNMP Data Presenter to include xnmgraph-like applications created by the application builder. The vulnerability occurs within jovgraph when processing malformed displayWidth option passed from the arg parameter to the CGI program. A remote unauthenticated attacker can send a crafted HTTP request to the target host to exploit this vulnerability. Successful attack could allow for arbitrary code being injected and executed with the privileges of the affected process, normally Internet Guest Account on Windows platforms.

  Tags:  day zero vulnerability manager.-authentication network-node-manager target-host internet-guest  

• November 09, 2010
• 12:24

  [Video] Operating in the Shadows

   » ‎ SecDocs
  Authors: Carlos Perez
  Tags: penetration testing Metasploit
  Event: Hack3rCon 2010
  Abstract: Operating in the Shadows: The presentation covers what are the most common artifacts that are left during a pentest, how to reduce this number and operate in a way to make it harder to detect the presence of the pentester and reduce the amount of information left on the target host by using Meterpreter and it's capabilities.

  Tags:  video shadows operating carlos-perez target-host pentest  

• May 06, 2010
• 20:22

  Layer Four Traceroute

   » ‎ Carnal0wnage
  Layer Four Traceroute (lft) http://pwhois.org/lft
  
  If you are using the one bundled with your distro you are probably missing out some of the more interesting and new features.
  
  From the site:
  
  "LFT, short for Layer Four Traceroute, is a sort of 'traceroute' that often works much faster (than the commonly-used Van Jacobson method) and goes through many configurations of packet-filters (firewalls). More importantly, LFT implements numerous other features including AS number lookups through several reliable sources, loose source routing, netblock name lookups, et al. What makes LFT unique? LFT is the all-in-one traceroute tool because it can launch a variety of different probes using ICMP, UDP, and TCP protocols, or the RFC1393 trace method."
  
  Its been useful for me to locate more systems between me and the target host as well as identifying gateways/web firewalls that organization's send all (or some)web traffic through.
  
  It also handy that you can throw it some switches to show the AS and network routes with the scan as well.
  
  Old Traceroute:
  
  cg@meh:~/evil/lft-3.1$ traceroute www.microsoft.com
  traceroute to www.microsoft.com (65.55.21.250), 30 hops max, 60 byte packets
  1 192.168.1.1 (192.168.1.1) 4.681 ms 5.794 ms 14.193 ms
  2-8 Local Stuff
  9 pos-0-0-0-0-pe01.ashburn.va.ibone.comcast.net (68.86.86.26) 35.743 ms 36.391 ms 37.102 ms
  10 as8075-1.ashburn.va.ibone.comcast.net (75.149.230.42) 173.747 ms 174.136 ms 175.054 ms
  11 209.240.199.162 (209.240.199.162) 32.762 ms 33.703 ms 37.096 ms
  12 ge-6-1-0-0.bl2-64c-1a.ntwk.msn.net (207.46.43.5) 17.652 ms 28.151 ms 24.033 ms
  13 ge-0-0-0-0.bl2-64c-1b.ntwk.msn.net (207.46.43.85) 24.864 ms 25.951 ms 26.485 ms
  14 ge-3-1-0-0.co2-64c-1a.ntwk.msn.net (207.46.43.101) 109.384 ms 109.615 ms 110.180 ms
  15 ge-7-0-0-0.co2-64c-1b.ntwk.msn.net (207.46.43.197) 106.607 ms 107.401 ms 110.382 ms
  16 207.46.46.92 (207.46.46.92) 112.458 ms 118.682 ms 106.207 ms
  17 10.22.8.14 (10.22.8.14) 107.323 ms 107.552 ms 107.789 ms
  18 * * *
  19 * * *
  20 * * *
  21 * * *
  22 * * *
  23 * * *
  24 * * *
  25 * * *
  26 * * *
  27 * * *
  28 * * *
  29 * * *
  30 * * *
  
  Layer Four Traceroute
  
  cg@meh:~/evil/lft-3.1$ sudo lft -rNS www.microsoft.com -d 80
  TTL LFT trace to 65.55.21.250:80/tcp
  1 [33657] [CMCS] 192.168.1.1 2.3/1.5ms ** [neglected] no reply packets received from TTLs
  2 through -8 local stuff
  9 [7922] [COMCAST-7922] pos-0-0-0-0-pe01.ashburn.va.ibone.comcast.net (68.86.86.26) 27.2/26.6ms
  10 [8075] [MICROSOFT-CORP---MSN-AS-BLOCK] as8075-1.ashburn.va.ibone.comcast.net (75.149.230.42) 25.9/24.3ms
  11 [8075] [MICROSOFT-CORP---MSN-AS-BLOCK] 209.240.199.162 15.8/24.3ms
  12 [8075] [MICROSOFT-CORP---MSN-AS-BLOCK] ge-6-1-0-0.bl2-64c-1a.ntwk.msn.net (207.46.43.5) 34.1/14.8ms
  13 [8075] [MICROSOFT-CORP---MSN-AS-BLOCK] ge-0-0-0-0.bl2-64c-1b.ntwk.msn.net (207.46.43.85) 16.0/15.9ms
  14 [8075] [MICROSOFT-CORP---MSN-AS-BLOCK] ge-3-1-0-0.co2-64c-1a.ntwk.msn.net (207.46.43.101) 121.3/98.2ms
  15 [8075] [MICROSOFT-CORP---MSN-AS-BLOCK] ge-7-0-0-0.co2-64c-1b.ntwk.msn.net (207.46.43.197) 114.1/97.3ms
  16 [6067] [ONYX] 207.46.46.92 101.6/99.9ms
  17 [8075] [MICROSOFT-CORP---MSN-AS-BLOCK] 10.22.8.14 99.5/109.5ms
  18 [AS?] [Net?] [target open] 65.55.21.250:80 98.5/109.4ms

  Tags:  traceroute ntwk msn van-jacobson target-host byte-packets Pentesting  

• April 19, 2010
• 17:00

  java_ws_arginject_altjvm.rb.txt

   » ‎ Packet Storm Security Exploits
  This Metasploit module exploits a flaw in the Web Start plugin component of Sun Java Web Start. The arguments passed to Java Web Start are not properly validated. By passing the lesser known -J option, an attacker can pass arbitrary options directly to the Java runtime. By utilizing the -XXaltjvm option, as discussed by Ruben Santamarta, an attacker can execute arbitrary code in the context of an unsuspecting browser user. This vulnerability was originally discovered independently by both Ruben Santamarta and Tavis Ormandy. Tavis reported that all versions since version 6 Update 10 are believed to be affected by this vulnerability. In order for this module to work, it must be ran as root on a server that does not serve SMB. Additionally, the target host must have the WebClient service (WebDAV Mini-Redirector) enabled.

  Tags:  java web start tavis tavis-ormandy ruben-santamarta target-host webclient-service ormandy  

• March 15, 2010
• 21:00

  sqlmap-0.8.tar.gz

   » ‎ Packet Storm Security Tools
  sqlmap is an open source command-line automatic SQL injection tool. Its goal is to detect and take advantage of SQL injection vulnerabilities in web applications. Once it detects one or more SQL injections on the target host, the user can choose among a variety of options to perform an extensive back-end database management system fingerprint, retrieve DBMS session user and database, enumerate users, password hashes, privileges, databases, dump entire or user's specified DBMS tables/columns, run his own SQL statement, read or write either text or binary files on the file system, execute arbitrary commands on the operating system, establish an out-of-band stateful connection between the attacker box and the database server via Metasploit payload stager, database stored procedure buffer overflow exploitation or SMB relay attack and more.

  Tags:  database user sql open-source-command database-management-system target-host  

• 21:00

  sqlmap-0.8.tar.gz

   » ‎ Packet Storm Security Recent Files
  sqlmap is an open source command-line automatic SQL injection tool. Its goal is to detect and take advantage of SQL injection vulnerabilities in web applications. Once it detects one or more SQL injections on the target host, the user can choose among a variety of options to perform an extensive back-end database management system fingerprint, retrieve DBMS session user and database, enumerate users, password hashes, privileges, databases, dump entire or user's specified DBMS tables/columns, run his own SQL statement, read or write either text or binary files on the file system, execute arbitrary commands on the operating system, establish an out-of-band stateful connection between the attacker box and the database server via Metasploit payload stager, database stored procedure buffer overflow exploitation or SMB relay attack and more.

  Tags:  database user sql open-source-command database-management-system target-host