The exploit tag has no wiki summary.
0
votes
0answers
29 views
Can't establish Reverse tcp connection while launching exploit
I'm running a pen testing with two machines: BT5 and Win 7. Both of the machines are sitting behind a NAT (192.168.1.x) and can ping eachother. Each time I tried to exploit the Win 7 with Client side ...
1
vote
2answers
180 views
Need to figure out a way for RDP to call back to a local listener on a specified Ephemeral port though a Reverse SSH Tunnel
This relates to a previous question that was getting entirely too long and confusing due to my constant updates and edits and I was told to re ask it. So I am cleaning it up and asking a more direct ...
1
vote
0answers
24 views
Can a mounted encfs provide information enabling future access?
If someone has access to a system with an encfs mounted, can he extract information that enables him to decrypt the encfs content some time later?
0
votes
1answer
67 views
PHP Zend Hash Vulnerability Exploitation Vector [duplicate]
Possible Duplicate:
CVE-2007-5416 PHP Zend Hash Vulnerability Exploitation Vector (Drupal)
According to exploit-db, http://www.exploit-db.com/exploits/4510/, it says the following:
...
1
vote
1answer
78 views
Can a java exploit circumvent browser plug in permission?
Since Java 7 is vulnerable i am asking myself if the vulnerability is circumventing the plug in permission of any given browser.
For example: http://www.youtube.com/watch?v=pn1Rbnidhl8 here you see ...
1
vote
4answers
155 views
if an outdated, vulnerable but clean Windows machine is connected to network behind router, can it be detected and attacked?
suppose the machine is clean of all malware but not in any sense updated, patched, secured etc. Suppose I connect it to the internet from behind wireless router with the intent of using it only on a ...
2
votes
2answers
443 views
How can I automatically pass the password to 'su'?
I am working on an exploit for a security course. The object is to obtain a root shell in a linux virtual machine. So far, I can write to /etc/passwd and change root's password to an arbitrary string. ...
0
votes
0answers
29 views
Number of malicious attacks defended/done on the average user daily [closed]
As a web hoster, it is very easy to notice the large amounts of exploit/abuse attempts done on my servers. Out of curiosity, how often are these attempts done on the average user? I'm assuming ...
0
votes
0answers
1k views
Metasploit cannot detect language pack on Windows 7
I use Metasploit (I have Backtrack 5 installed on VirtualBox) to attack my Windows 7 64-bit laptop. Every time I use exploit ms08-067-netapi I get this message:
[*] Started bind handler
[*] ...
1
vote
0answers
217 views
Is it possible to by pass auto run restrictions on windows 7?
I'm trying to create a startup on a windows 7 for the machine and current user (its a workstation meaning all user data is saved on a server).
What i mean whit a startup is to have a program run at ...
2
votes
1answer
82 views
Is an unpatched Adobe Flash player still a security threat if I don't use a browser?
The Windows XP PC in question has the usual anti-virus and firewall precautions.
It has the most recent Windows Updates and anti-virus updates installed.
Flash is used only to play videos (located on ...
0
votes
2answers
344 views
Is Firefox less vulnerable to exploit when running NoScript?
The article titled "iPhone, IE, Firefox, Safari get stomped at hacker contest" at The Register website discusses that Firefox can be exploited.
I wonder if NoScript protects against the kind of ...
4
votes
3answers
548 views
Where can I learn various hacking techniques on the web? [closed]
I would like to try my hand at hacking -- that is, exploiting various website vulnerabilities. Not for any illegal purpose mind you, but so I can have a better understanding and appreciation of these ...
2
votes
4answers
200 views
What browser feature is this exploiting and how to stop it?
http://raffa991[dot]ra[dot]funpic[dot]de/lol/
Warning: It is some kind of an annoying "you are an idiot" sign combined with a lot of popup message boxes. Open with care!
In any case, it crashed my ...
7
votes
8answers
267 views
Why do browsers have so many possible exploits?
When browsing I am ocassionally given warnings about pages that host malware "that could damage my computer". I am seriously perplexed as to why, in 2010, browsers still have possible exploits and can ...
-1
votes
2answers
219 views
Virus on site but can't find where
There appears to be a virus on my site. It's been there for some time and I've had no problems as yet. AVG picks it up, but McAfee does not.
I run a website (sortitoutsi.net) Ages ago I got a virus ...
4
votes
1answer
320 views
Is vimperator safe?
I recently discovered Vimperator, which is just awesome. However, it concerns me that I can execute shell commands from the browser.. is this exploitable? I'd really hate to get "sudo rm -r /*"'d. I ...
