jetlib.sec » Tags » target-host

Feeds

268044 items (1 unread) in 27 feeds

• 0day.today (was: 1337day, Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines (1 unread)
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

32 items tagged "target host"

Related tags: udf user [+], injection [+], webclient service [+], zero [+], windows [+], target system [+], postgresql [+], network node manager [+], microsoft [+], day [+], sql [+], open source command [+], manager. authentication [+], database management system [+], database [+], windows management instrumentation [+], vulnerability [+], system privileges [+], system [+], soap request [+], shared object [+], service [+], proficy [+], payload [+], o driver [+], mysql [+], linux [+], internet guest [+], instrumentation service [+], initiative [+], execution [+], dll module [+], dll [+], director agent [+], command [+], code [+], user [+], web [+], video [+], van jacobson [+], traceroute [+], tool [+], tavis ormandy [+], tavis [+], start [+], shadows [+], ruben santamarta [+], read [+], pentest [+], penetration testers [+], ormandy [+], operating [+], ntwk [+], msn [+], java [+], hacking [+], dril [+], domain tool [+], domain [+], carlos perez [+], byte packets [+], bing api [+], Tools [+], Pentesting [+]

• December 14, 2012
• 16:40

  PostgreSQL for Linux Payload Execution

   » ‎ Packet Storm Security Exploits
  On some default Linux installations of PostgreSQL, the postgres service account may write to the /tmp directory, and may source UDF Shared Libraries from there as well, allowing execution of arbitrary code. This Metasploit module compiles a Linux shared object file, uploads it to the target host via the UPDATE pg_largeobject method of binary injection, and creates a UDF (user defined function) from that shared object. Because the payload is run as the shared object's constructor, it does not need to conform to specific Postgres API versions.

  Tags:  payload postgresql linux target-host udf-user shared-object  

• 16:40

  PostgreSQL for Linux Payload Execution

   » ‎ Packet Storm Security Recent Files
  On some default Linux installations of PostgreSQL, the postgres service account may write to the /tmp directory, and may source UDF Shared Libraries from there as well, allowing execution of arbitrary code. This Metasploit module compiles a Linux shared object file, uploads it to the target host via the UPDATE pg_largeobject method of binary injection, and creates a UDF (user defined function) from that shared object. Because the payload is run as the shared object's constructor, it does not need to conform to specific Postgres API versions.

  Tags:  payload postgresql linux target-host udf-user shared-object  

• 16:40

  PostgreSQL for Linux Payload Execution

   » ‎ Packet Storm Security Misc. Files
  On some default Linux installations of PostgreSQL, the postgres service account may write to the /tmp directory, and may source UDF Shared Libraries from there as well, allowing execution of arbitrary code. This Metasploit module compiles a Linux shared object file, uploads it to the target host via the UPDATE pg_largeobject method of binary injection, and creates a UDF (user defined function) from that shared object. Because the payload is run as the shared object's constructor, it does not need to conform to specific Postgres API versions.

  Tags:  payload postgresql linux target-host udf-user shared-object  

• December 06, 2012
• 21:21

  IBM System Director Agent DLL Injection

   » ‎ Packet Storm Security Exploits
  This Metasploit module abuses the "wmicimsv" service on IBM System Director Agent 5.20.3 to accomplish arbitrary DLL injection and execute arbitrary code with SYSTEM privileges. In order to accomplish remote DLL injection it uses a WebDAV service as disclosed by kingcope on December 2012. Because of this, the target host must have the WebClient service (WebDAV Mini-Redirector) enabled. It is enabled and automatically started by default on Windows XP SP3, but disabled by default on Windows 2003 SP2.

  Tags:  injection system dll director-agent target-host webclient-service system-privileges  

• 21:21

  IBM System Director Agent DLL Injection

   » ‎ Packet Storm Security Recent Files
  This Metasploit module abuses the "wmicimsv" service on IBM System Director Agent 5.20.3 to accomplish arbitrary DLL injection and execute arbitrary code with SYSTEM privileges. In order to accomplish remote DLL injection it uses a WebDAV service as disclosed by kingcope on December 2012. Because of this, the target host must have the WebClient service (WebDAV Mini-Redirector) enabled. It is enabled and automatically started by default on Windows XP SP3, but disabled by default on Windows 2003 SP2.

  Tags:  injection system dll director-agent target-host webclient-service system-privileges  

• 21:21

  IBM System Director Agent DLL Injection

   » ‎ Packet Storm Security Misc. Files
  This Metasploit module abuses the "wmicimsv" service on IBM System Director Agent 5.20.3 to accomplish arbitrary DLL injection and execute arbitrary code with SYSTEM privileges. In order to accomplish remote DLL injection it uses a WebDAV service as disclosed by kingcope on December 2012. Because of this, the target host must have the WebClient service (WebDAV Mini-Redirector) enabled. It is enabled and automatically started by default on Windows XP SP3, but disabled by default on Windows 2003 SP2.

  Tags:  injection system dll director-agent target-host webclient-service system-privileges  

• October 10, 2012
• 23:59

  KeyHelp ActiveX LaunchTriPane Remote Code Execution

   » ‎ Packet Storm Security Exploits
  This Metasploit module exploits a code execution vulnerability in the KeyScript ActiveX control from keyhelp.ocx. It is packaged in several products or GE, such as Proficy Historian 4.5, 4.0, 3.5, and 3.1, Proficy HMI/SCADA 5.1 and 5.0, Proficy Pulse 1.0, Proficy Batch Execution 5.6, and SI7 I/O Driver between 7.20 and 7.42. When the control is installed with these products, the function "LaunchTriPane" will use ShellExecute to launch "hh.exe", with user controlled data as parameters. Because of this, the "-decompile" option can be abused to write arbitrary files on the remote system. Code execution can be achieved by first uploading the payload to the remote machine, and then upload another mof file, which enables Windows Management Instrumentation service to execute it. Please note that this module currently only works for Windows before Vista. On the other hand, the target host must have the WebClient service (WebDAV Mini-Redirector) enabled. It is enabled and automatically started by default on Windows XP SP3

  Tags:  code proficy execution o-driver windows-management-instrumentation target-host instrumentation-service  

• 23:59

  KeyHelp ActiveX LaunchTriPane Remote Code Execution

   » ‎ Packet Storm Security Recent Files
  This Metasploit module exploits a code execution vulnerability in the KeyScript ActiveX control from keyhelp.ocx. It is packaged in several products or GE, such as Proficy Historian 4.5, 4.0, 3.5, and 3.1, Proficy HMI/SCADA 5.1 and 5.0, Proficy Pulse 1.0, Proficy Batch Execution 5.6, and SI7 I/O Driver between 7.20 and 7.42. When the control is installed with these products, the function "LaunchTriPane" will use ShellExecute to launch "hh.exe", with user controlled data as parameters. Because of this, the "-decompile" option can be abused to write arbitrary files on the remote system. Code execution can be achieved by first uploading the payload to the remote machine, and then upload another mof file, which enables Windows Management Instrumentation service to execute it. Please note that this module currently only works for Windows before Vista. On the other hand, the target host must have the WebClient service (WebDAV Mini-Redirector) enabled. It is enabled and automatically started by default on Windows XP SP3

  Tags:  code proficy execution o-driver windows-management-instrumentation target-host instrumentation-service  

• 23:59

  KeyHelp ActiveX LaunchTriPane Remote Code Execution

   » ‎ Packet Storm Security Misc. Files
  This Metasploit module exploits a code execution vulnerability in the KeyScript ActiveX control from keyhelp.ocx. It is packaged in several products or GE, such as Proficy Historian 4.5, 4.0, 3.5, and 3.1, Proficy HMI/SCADA 5.1 and 5.0, Proficy Pulse 1.0, Proficy Batch Execution 5.6, and SI7 I/O Driver between 7.20 and 7.42. When the control is installed with these products, the function "LaunchTriPane" will use ShellExecute to launch "hh.exe", with user controlled data as parameters. Because of this, the "-decompile" option can be abused to write arbitrary files on the remote system. Code execution can be achieved by first uploading the payload to the remote machine, and then upload another mof file, which enables Windows Management Instrumentation service to execute it. Please note that this module currently only works for Windows before Vista. On the other hand, the target host must have the WebClient service (WebDAV Mini-Redirector) enabled. It is enabled and automatically started by default on Windows XP SP3

  Tags:  code proficy execution o-driver windows-management-instrumentation target-host instrumentation-service  

• August 29, 2012
• 20:20

  AP NetWeaver HostControl Command Injection

   » ‎ Packet Storm Security Exploits
  This Metasploit module exploits a command injection vulnerability in the SAPHostControl Service, by sending a specially crafted SOAP request to the management console. In order to deal with the spaces and length limitations, a WebDAV service is created to run an arbitrary payload when accessed as a UNC path. Because of this, the target host must have the WebClient service (WebDAV Mini-Redirector) enabled. It is enabled and automatically started by default on Windows XP SP3, but disabled by default on Windows 2003 SP2.

  Tags:  injection service command target-host webclient-service soap-request  

• 20:20

  AP NetWeaver HostControl Command Injection

   » ‎ Packet Storm Security Recent Files
  This Metasploit module exploits a command injection vulnerability in the SAPHostControl Service, by sending a specially crafted SOAP request to the management console. In order to deal with the spaces and length limitations, a WebDAV service is created to run an arbitrary payload when accessed as a UNC path. Because of this, the target host must have the WebClient service (WebDAV Mini-Redirector) enabled. It is enabled and automatically started by default on Windows XP SP3, but disabled by default on Windows 2003 SP2.

  Tags:  injection service command target-host webclient-service soap-request  

• 20:20

  AP NetWeaver HostControl Command Injection

   » ‎ Packet Storm Security Misc. Files
  This Metasploit module exploits a command injection vulnerability in the SAPHostControl Service, by sending a specially crafted SOAP request to the management console. In order to deal with the spaces and length limitations, a WebDAV service is created to run an arbitrary payload when accessed as a UNC path. Because of this, the target host must have the WebClient service (WebDAV Mini-Redirector) enabled. It is enabled and automatically started by default on Windows XP SP3, but disabled by default on Windows 2003 SP2.

  Tags:  injection service command target-host webclient-service soap-request  

• April 11, 2011
• 7:52

  SQLMAP - Automatic SQL Injection Tool 0.9

   » ‎ Packet Storm Security Recent Files
  sqlmap is an open source command-line automatic SQL injection tool. Its goal is to detect and take advantage of SQL injection vulnerabilities in web applications. Once it detects one or more SQL injections on the target host, the user can choose among a variety of options to perform an extensive back-end database management system fingerprint, retrieve DBMS session user and database, enumerate users, password hashes, privileges, databases, dump entire or user's specified DBMS tables/columns, run his own SQL statement, read or write either text or binary files on the file system, execute arbitrary commands on the operating system, establish an out-of-band stateful connection between the attacker box and the database server via Metasploit payload stager, database stored procedure buffer overflow exploitation or SMB relay attack and more.

  Tags:  database injection sql open-source-command database-management-system target-host  

• 7:52

  SQLMAP - Automatic SQL Injection Tool 0.9

   » ‎ Packet Storm Security Misc. Files
  sqlmap is an open source command-line automatic SQL injection tool. Its goal is to detect and take advantage of SQL injection vulnerabilities in web applications. Once it detects one or more SQL injections on the target host, the user can choose among a variety of options to perform an extensive back-end database management system fingerprint, retrieve DBMS session user and database, enumerate users, password hashes, privileges, databases, dump entire or user's specified DBMS tables/columns, run his own SQL statement, read or write either text or binary files on the file system, execute arbitrary commands on the operating system, establish an out-of-band stateful connection between the attacker box and the database server via Metasploit payload stager, database stored procedure buffer overflow exploitation or SMB relay attack and more.

  Tags:  database injection sql open-source-command database-management-system target-host  

• April 07, 2011
• 3:40

  DRIL – Domain Reverse IP Lookup Tool

   » ‎ Darknet
  DRIL (Domain Reverse IP Lookup) Tool is a Reverse Domain Tool that will really be useful for penetration testers to find out the domain names which are listed in the the target host, DRIL is a GUI, JAVA based application which uses a Bing API key. DRIL has a simple user friendly interface which will [...]
  
  Read the full post at darknet.org.uk

  
  

  

  Tags:  dril tool domain read bing-api target-host penetration-testers domain-tool hacking Tools  

• March 23, 2011
• 16:59

  PostgreSQL for Microsoft Windows Payload Execution

   » ‎ Packet Storm Security Exploits
  This Metasploit module creates and enables a custom UDF (user defined function) on the target host via the UPDATE pg_largeobject method of binary injection. On default Microsoft Windows installations of PostgreSQL (=

  Tags:  microsoft postgresql windows udf-user target-host target-system  

• 16:59

  PostgreSQL for Microsoft Windows Payload Execution

   » ‎ Packet Storm Security Recent Files
  This Metasploit module creates and enables a custom UDF (user defined function) on the target host via the UPDATE pg_largeobject method of binary injection. On default Microsoft Windows installations of PostgreSQL (=

  Tags:  microsoft postgresql windows udf-user target-host target-system  

• 16:59

  PostgreSQL for Microsoft Windows Payload Execution

   » ‎ Packet Storm Security Misc. Files
  This Metasploit module creates and enables a custom UDF (user defined function) on the target host via the UPDATE pg_largeobject method of binary injection. On default Microsoft Windows installations of PostgreSQL (=

  Tags:  microsoft postgresql windows udf-user target-host target-system  

• March 09, 2011
• 15:30

  Oracle MySQL for Microsoft Windows Payload Execution

   » ‎ Packet Storm Security Exploits
  This Metasploit module creates and enables a custom UDF (user defined function) on the target host via the SELECT ... into DUMPFILE method of binary injection. On default Microsoft Windows installations of MySQL (=

  Tags:  microsoft mysql windows udf-user target-host target-system  

• 15:30

  Oracle MySQL for Microsoft Windows Payload Execution

   » ‎ Packet Storm Security Recent Files
  This Metasploit module creates and enables a custom UDF (user defined function) on the target host via the SELECT ... into DUMPFILE method of binary injection. On default Microsoft Windows installations of MySQL (=

  Tags:  microsoft mysql windows udf-user target-host target-system  

• 15:30

  Oracle MySQL for Microsoft Windows Payload Execution

   » ‎ Packet Storm Security Misc. Files
  This Metasploit module creates and enables a custom UDF (user defined function) on the target host via the SELECT ... into DUMPFILE method of binary injection. On default Microsoft Windows installations of MySQL (=

  Tags:  microsoft mysql windows udf-user target-host target-system  

• January 11, 2011
• 17:36

  Zero Day Initiative Advisory 11-004

   » ‎ Packet Storm Security Advisories
  Zero Day Initiative Advisory 11-04 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett-Packard OpenView Network Node Manager. Authentication is not required to exploit this vulnerability. The exploit would require a crafted HTTP request to the target host. The specific flaw exists within the ovutil.dll module which is loaded by the ovwebsnmpsrv.exe process which in turn can be reached remotely through the jovgraph.exe CGI program. By supplying overly large values to variables passed through an HTTP request a sscanf can be made to overflow a static buffer. An attacker can leverage this to execute arbitrary code under the context of the user running the webserver.

  Tags:  day zero initiative network-node-manager target-host dll-module  

• 17:36

  Zero Day Initiative Advisory 11-004

   » ‎ Packet Storm Security Recent Files
  Zero Day Initiative Advisory 11-04 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett-Packard OpenView Network Node Manager. Authentication is not required to exploit this vulnerability. The exploit would require a crafted HTTP request to the target host. The specific flaw exists within the ovutil.dll module which is loaded by the ovwebsnmpsrv.exe process which in turn can be reached remotely through the jovgraph.exe CGI program. By supplying overly large values to variables passed through an HTTP request a sscanf can be made to overflow a static buffer. An attacker can leverage this to execute arbitrary code under the context of the user running the webserver.

  Tags:  day zero initiative network-node-manager target-host dll-module  

• 17:36

  Zero Day Initiative Advisory 11-004

   » ‎ Packet Storm Security Misc. Files
  Zero Day Initiative Advisory 11-04 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett-Packard OpenView Network Node Manager. Authentication is not required to exploit this vulnerability. The exploit would require a crafted HTTP request to the target host. The specific flaw exists within the ovutil.dll module which is loaded by the ovwebsnmpsrv.exe process which in turn can be reached remotely through the jovgraph.exe CGI program. By supplying overly large values to variables passed through an HTTP request a sscanf can be made to overflow a static buffer. An attacker can leverage this to execute arbitrary code under the context of the user running the webserver.

  Tags:  day zero initiative manager.-authentication network-node-manager target-host dll-module  

• 17:36

  Zero Day Initiative Advisory 11-003

   » ‎ Packet Storm Security Advisories
  Zero Day Initiative Advisory 11-03 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett-Packard OpenView Network Node Manager. Authentication is not required to exploit this vulnerability. The exploit would require a crafted HTTP request to the target host. The specific flaw exists within jovgraph.exe, a Java-based grapher that extends the SNMP Data Presenter to include xnmgraph-like applications created by the application builder. The vulnerability occurs within jovgraph when processing malformed displayWidth option passed from the arg parameter to the CGI program. A remote unauthenticated attacker can send a crafted HTTP request to the target host to exploit this vulnerability. Successful attack could allow for arbitrary code being injected and executed with the privileges of the affected process, normally Internet Guest Account on Windows platforms.

  Tags:  day zero vulnerability manager.-authentication network-node-manager target-host internet-guest  

• 17:36

  Zero Day Initiative Advisory 11-003

   » ‎ Packet Storm Security Recent Files
  Zero Day Initiative Advisory 11-03 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett-Packard OpenView Network Node Manager. Authentication is not required to exploit this vulnerability. The exploit would require a crafted HTTP request to the target host. The specific flaw exists within jovgraph.exe, a Java-based grapher that extends the SNMP Data Presenter to include xnmgraph-like applications created by the application builder. The vulnerability occurs within jovgraph when processing malformed displayWidth option passed from the arg parameter to the CGI program. A remote unauthenticated attacker can send a crafted HTTP request to the target host to exploit this vulnerability. Successful attack could allow for arbitrary code being injected and executed with the privileges of the affected process, normally Internet Guest Account on Windows platforms.

  Tags:  day zero vulnerability manager.-authentication network-node-manager target-host internet-guest  

• 17:36

  Zero Day Initiative Advisory 11-003

   » ‎ Packet Storm Security Misc. Files
  Zero Day Initiative Advisory 11-03 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett-Packard OpenView Network Node Manager. Authentication is not required to exploit this vulnerability. The exploit would require a crafted HTTP request to the target host. The specific flaw exists within jovgraph.exe, a Java-based grapher that extends the SNMP Data Presenter to include xnmgraph-like applications created by the application builder. The vulnerability occurs within jovgraph when processing malformed displayWidth option passed from the arg parameter to the CGI program. A remote unauthenticated attacker can send a crafted HTTP request to the target host to exploit this vulnerability. Successful attack could allow for arbitrary code being injected and executed with the privileges of the affected process, normally Internet Guest Account on Windows platforms.

  Tags:  day zero vulnerability manager.-authentication network-node-manager target-host internet-guest  

• November 09, 2010
• 12:24

  [Video] Operating in the Shadows

   » ‎ SecDocs
  Authors: Carlos Perez
  Tags: penetration testing Metasploit
  Event: Hack3rCon 2010
  Abstract: Operating in the Shadows: The presentation covers what are the most common artifacts that are left during a pentest, how to reduce this number and operate in a way to make it harder to detect the presence of the pentester and reduce the amount of information left on the target host by using Meterpreter and it's capabilities.

  Tags:  video shadows operating carlos-perez target-host pentest  

• May 06, 2010
• 20:22

  Layer Four Traceroute

   » ‎ Carnal0wnage
  Layer Four Traceroute (lft) http://pwhois.org/lft
  
  If you are using the one bundled with your distro you are probably missing out some of the more interesting and new features.
  
  From the site:
  
  "LFT, short for Layer Four Traceroute, is a sort of 'traceroute' that often works much faster (than the commonly-used Van Jacobson method) and goes through many configurations of packet-filters (firewalls). More importantly, LFT implements numerous other features including AS number lookups through several reliable sources, loose source routing, netblock name lookups, et al. What makes LFT unique? LFT is the all-in-one traceroute tool because it can launch a variety of different probes using ICMP, UDP, and TCP protocols, or the RFC1393 trace method."
  
  Its been useful for me to locate more systems between me and the target host as well as identifying gateways/web firewalls that organization's send all (or some)web traffic through.
  
  It also handy that you can throw it some switches to show the AS and network routes with the scan as well.
  
  Old Traceroute:
  
  cg@meh:~/evil/lft-3.1$ traceroute www.microsoft.com
  traceroute to www.microsoft.com (65.55.21.250), 30 hops max, 60 byte packets
  1 192.168.1.1 (192.168.1.1) 4.681 ms 5.794 ms 14.193 ms
  2-8 Local Stuff
  9 pos-0-0-0-0-pe01.ashburn.va.ibone.comcast.net (68.86.86.26) 35.743 ms 36.391 ms 37.102 ms
  10 as8075-1.ashburn.va.ibone.comcast.net (75.149.230.42) 173.747 ms 174.136 ms 175.054 ms
  11 209.240.199.162 (209.240.199.162) 32.762 ms 33.703 ms 37.096 ms
  12 ge-6-1-0-0.bl2-64c-1a.ntwk.msn.net (207.46.43.5) 17.652 ms 28.151 ms 24.033 ms
  13 ge-0-0-0-0.bl2-64c-1b.ntwk.msn.net (207.46.43.85) 24.864 ms 25.951 ms 26.485 ms
  14 ge-3-1-0-0.co2-64c-1a.ntwk.msn.net (207.46.43.101) 109.384 ms 109.615 ms 110.180 ms
  15 ge-7-0-0-0.co2-64c-1b.ntwk.msn.net (207.46.43.197) 106.607 ms 107.401 ms 110.382 ms
  16 207.46.46.92 (207.46.46.92) 112.458 ms 118.682 ms 106.207 ms
  17 10.22.8.14 (10.22.8.14) 107.323 ms 107.552 ms 107.789 ms
  18 * * *
  19 * * *
  20 * * *
  21 * * *
  22 * * *
  23 * * *
  24 * * *
  25 * * *
  26 * * *
  27 * * *
  28 * * *
  29 * * *
  30 * * *
  
  Layer Four Traceroute
  
  cg@meh:~/evil/lft-3.1$ sudo lft -rNS www.microsoft.com -d 80
  TTL LFT trace to 65.55.21.250:80/tcp
  1 [33657] [CMCS] 192.168.1.1 2.3/1.5ms ** [neglected] no reply packets received from TTLs
  2 through -8 local stuff
  9 [7922] [COMCAST-7922] pos-0-0-0-0-pe01.ashburn.va.ibone.comcast.net (68.86.86.26) 27.2/26.6ms
  10 [8075] [MICROSOFT-CORP---MSN-AS-BLOCK] as8075-1.ashburn.va.ibone.comcast.net (75.149.230.42) 25.9/24.3ms
  11 [8075] [MICROSOFT-CORP---MSN-AS-BLOCK] 209.240.199.162 15.8/24.3ms
  12 [8075] [MICROSOFT-CORP---MSN-AS-BLOCK] ge-6-1-0-0.bl2-64c-1a.ntwk.msn.net (207.46.43.5) 34.1/14.8ms
  13 [8075] [MICROSOFT-CORP---MSN-AS-BLOCK] ge-0-0-0-0.bl2-64c-1b.ntwk.msn.net (207.46.43.85) 16.0/15.9ms
  14 [8075] [MICROSOFT-CORP---MSN-AS-BLOCK] ge-3-1-0-0.co2-64c-1a.ntwk.msn.net (207.46.43.101) 121.3/98.2ms
  15 [8075] [MICROSOFT-CORP---MSN-AS-BLOCK] ge-7-0-0-0.co2-64c-1b.ntwk.msn.net (207.46.43.197) 114.1/97.3ms
  16 [6067] [ONYX] 207.46.46.92 101.6/99.9ms
  17 [8075] [MICROSOFT-CORP---MSN-AS-BLOCK] 10.22.8.14 99.5/109.5ms
  18 [AS?] [Net?] [target open] 65.55.21.250:80 98.5/109.4ms

  Tags:  traceroute ntwk msn van-jacobson target-host byte-packets Pentesting  

• April 19, 2010
• 17:00

  java_ws_arginject_altjvm.rb.txt

   » ‎ Packet Storm Security Exploits
  This Metasploit module exploits a flaw in the Web Start plugin component of Sun Java Web Start. The arguments passed to Java Web Start are not properly validated. By passing the lesser known -J option, an attacker can pass arbitrary options directly to the Java runtime. By utilizing the -XXaltjvm option, as discussed by Ruben Santamarta, an attacker can execute arbitrary code in the context of an unsuspecting browser user. This vulnerability was originally discovered independently by both Ruben Santamarta and Tavis Ormandy. Tavis reported that all versions since version 6 Update 10 are believed to be affected by this vulnerability. In order for this module to work, it must be ran as root on a server that does not serve SMB. Additionally, the target host must have the WebClient service (WebDAV Mini-Redirector) enabled.

  Tags:  java web start tavis tavis-ormandy ruben-santamarta target-host webclient-service ormandy  

• March 15, 2010
• 21:00

  sqlmap-0.8.tar.gz

   » ‎ Packet Storm Security Tools
  sqlmap is an open source command-line automatic SQL injection tool. Its goal is to detect and take advantage of SQL injection vulnerabilities in web applications. Once it detects one or more SQL injections on the target host, the user can choose among a variety of options to perform an extensive back-end database management system fingerprint, retrieve DBMS session user and database, enumerate users, password hashes, privileges, databases, dump entire or user's specified DBMS tables/columns, run his own SQL statement, read or write either text or binary files on the file system, execute arbitrary commands on the operating system, establish an out-of-band stateful connection between the attacker box and the database server via Metasploit payload stager, database stored procedure buffer overflow exploitation or SMB relay attack and more.

  Tags:  database user sql open-source-command database-management-system target-host  

• 21:00

  sqlmap-0.8.tar.gz

   » ‎ Packet Storm Security Recent Files
  sqlmap is an open source command-line automatic SQL injection tool. Its goal is to detect and take advantage of SQL injection vulnerabilities in web applications. Once it detects one or more SQL injections on the target host, the user can choose among a variety of options to perform an extensive back-end database management system fingerprint, retrieve DBMS session user and database, enumerate users, password hashes, privileges, databases, dump entire or user's specified DBMS tables/columns, run his own SQL statement, read or write either text or binary files on the file system, execute arbitrary commands on the operating system, establish an out-of-band stateful connection between the attacker box and the database server via Metasploit payload stager, database stored procedure buffer overflow exploitation or SMB relay attack and more.

  Tags:  database user sql open-source-command database-management-system target-host