PHP 5.4.0 Built-in Web Server DoS PoC

Written by kaMtiEz on . Posted in ./3xpLo!T Hits : 12,078
Short URL : http://djian.co.uk/-u

# Author: ls (contact@kaankivilcim.com)
# The value of the Content-Length header is passed directly to a pemalloc() call in sapi/cli/php_cli_server.c
# on line 1538. The inline function defined within Zend/zend_alloc.h for malloc() will fail, and will terminate
# the process with the error message “Out of memory”.
#
# 1537 if (!client->request.content) {
# 1538 client->request.content = pemalloc(parser->content_length, 1);
# 1539 client->request.content_len = 0;
# 1540 }
#
# PHP 5.4.0 Development Server started at Tue Mar 13 19:41:45 2012
# Listening on 127.0.0.1:80
# Document root is /tmp
# Press Ctrl-C to quit.
# Out of memory

Continue Reading 1 Comment

HTTP Brute Force [c++]

Written by kaMtiEz on . Posted in ./3xpLo!T Hits : 21,143
Short URL : http://djian.co.uk/xy

This is a small application built to test the performance of a http authentication system using a lot of concurrent connections. It can also be used to try lots of password against a http server. It is capable of using up to 1024 (or more using multiple processes). However with this amount it is capable or reducing internet connections to a crawl and also greatly increasing the load on the server.

Continue Reading No Comments

Linux 2.6.18 udp_sendmsg Local Root

Written by kaMtiEz on . Posted in ./3xpLo!T Hits : 30,040
Short URL : http://djian.co.uk/mo

/****************************************************************************
* .:: Katon ::.
*
* Linux up to 2.6.18 local root exploit
* by teach
*
* VxHell Labs CONFIDENTIAL – SOURCE MATERIALS
*
* This is unpublished proprietary source code of VxHell Labs.
*
* The contents of these coded instructions, statements and computer
* programs may not be disclosed to third parties, copied or duplicated in
* any form, in whole or in part, without the prior written permission of
* his author. This includes especially the
* Bugtraq mailing list, the www.milw0rm.com website and any public exploit
* archive.
*
* (C) COPYRIGHT teach, 09/09
* All Rights Reserved
*
* teach@vxhell.org
*
* For [teh lullz and maybe] educational purposes. Use it at your own risk.
**
Tavis & Julien are indeed el8 :)
******************************************************************************/

Continue Reading No Comments

MySQL Brute Force Tool [ c++ ]

Written by kaMtiEz on . Posted in ./3xpLo!T Hits : 31,329
Short URL : http://djian.co.uk/l5

/*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation; either version 2 of the License, or
* (at your option) any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU Library General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with this program; if not, write to the Free Software
* Foundation, Inc., 59 Temple Place – Suite 330, Boston, MA 02111-1307, USA.
*
* $Id: brute-mysql.c,v 1.1 2012/01/19 22:32:19 james.stevenson Exp $
*
* Author:
* NAME: James Stevenson
* WWW: http://www.stev.org
*
*/

Continue Reading 3 Comments

Stop ACTA