DocumentsDate added

detectwall.sh (Mac/BSD version!!!)hot!

03.06.2005

This script search for a packet with certain flags, and generates a temporary firewall rulle (ipfw) to block further packets of that type. The firewall rule will stay in place for a certain period of time, and all of this can be configured via command-line parameters. Relies on tcpdump and ipfw. Mac/BSD version!!!

Hits: 2806

• Details
• Download

rs_iis2.c - webdav exploithot!

10.04.2003

This is a modified version of romansoft's IIS WEBDAV exploit. This gives remote SYSTEM privs on Windows 2000 boxes running IIS 5. I added a recursive function to troll through RET values to find the magic number. I also added a magic number of my own. Read the source for more details, especially if you are concerned about knocking down your target. (YOU SHOULD be concerned about this, as this is bad!) My included magic number works against Windows 2000 w/service pack 3 & IIS 5.

Hits: 6470

• Details
• Download
• View

DNS Predict - PERL Versionhot!

09.02.2005

This PERL script, by Jimmy Neutron, is great for determining DNS names with Google. This tool, which is essential for network mapping, accepts two somewhat related words, and a domain name as arguments. The two words are sent through Google sets which expands the words into a list of related words. For example, "earth" and "mars" would expand to Venus, Mercury, Jupiter, Saturn, Neptune, Uranus, Pluto. If fed domain foo.com, dnspredict would then attempt to DNS resolve venus.foo.com, mercury.foo.com, etc. This Perl script should run on Windows, Linux, Mac, requires NET::Dns.

Hits: 6566

• Details
• Download

Unicode Attackerhot!

08.08.2001

This basic perl script does the unicode attack. Very basic, but made unicode easier to visualize. My second perl script ever. I didn't realize perl was so c00l! ;-)

Hits: 6930

• Details
• Download

Win2K LDAP authentication bruteforcerhot!

05.04.2001

This never really got finished... Anyhow, I noticed when playing around with LDAP on Win2k that LDAP authentication requests came back with different response codes when using an existing username vs a non-existing one. Using this technique, you can enumerate usernames on the server. In addition, LDAP authentications don't seem to count as invalid logins as far as the 2k user is concerned. This means you can remotely determine usernames, and attempt passwords to your heart's content without bothering the set lockouts. Nice.

Hits: 8795

• Details
• Download
• View