science and technology

proftp_ppc.c

Proftpd (<= pre6) linux ppc remote exploit.




science and technology

connect-core5.c

Linux/ppc shellcode which connects /bin/sh to a host. connect-core5.s is appended.




science and technology

execve-core.c

execve /bin/sh shellcode for Linux PPC. execve-core.s is appended.




science and technology

readnexecppc-core.c

read(0,stack,1028); stack(); shellcode for Linux PPC. readnexecppc-core.s appended.




science and technology

execMacOSX.txt

execve("/bin/sh",{"/bin/sh",NULL},NULL) shellcode for Mac OSX on both the PPC and x86 platforms.




science and technology

Secunia Security Advisory 17850

Secunia Security Advisory - r0t has reported a vulnerability in QualityEBiz Quality PPC (QualityPPC), which can be exploited by malicious people to conduct cross-site scripting attacks.




science and technology

FailureToLaunch-2.pl.txt

Proof of concept exploit for Mac OS X versions 10.4.6 and below which are susceptible to a vulnerability in launchd's syslog() function. PPC version.




science and technology

getpwnedmail-ppc.pl.txt

Exploit for fetchmail on Mac OSX versions 10.4.7 and below on the PPC architecture.




science and technology

envt.c

A simple program to inject linux shellcode into the environment and find its location in memory. It contains 8 shellcodes for x86, sparc, mips, and ppc.




science and technology

VLCMediaSlayer-ppc.pl.txt

Month Of Apple Bugs - A vulnerability in the handling of the udp:// URL handler for the VLC Media Player allows remote arbitrary code execution. This is just a vanilla format string exploit for OSX on ppc.




science and technology

ppc-rfi.txt

ppc engine suffers from a remote file inclusion flaw.




science and technology

Trafscrambler Anti-Sniffer For OS X

Trafscrambler is an anti-sniffer/IDS NKE (Network Kernel Extension) for Mac OS X. This initial release implements SYN-decoy, Pre/Post connections SYN, TCP reset, and zero window attacks. Author tested this on x86 OS X versions 10.5.6 and 10.5.7. It should work on PPC and older releases as well.




science and technology

Trafscrambler Anti-Sniffer For OS X

Trafscrambler is an anti-sniffer/IDS NKE (Network Kernel Extension) for Mac OS X. Author tested this on x86 OS X versions 10.5.6 and 10.5.7. It should work on PPC and older releases as well.




science and technology

Trafscrambler Anti-Sniffer For OS X

Trafscrambler is an anti-sniffer/IDS NKE (Network Kernel Extension) for Mac OS X. Author tested this on x86 OS X versions 10.5.6 and 10.5.7. It should work on PPC and older releases as well.




science and technology

Linux sock_sendpage() NULL Pointer Dereference

Linux 2.4 and 2.6 kernel sock_sendpage() NULL pointer dereference exploit. The third and final version of this exploit. This third version features: Complete support for i386, x86_64, ppc and ppc64; The personality trick published by Tavis Ormandy and Julien Tinnes; The TOC pointer workaround for data items addressing on ppc64 (i.e. functions on exploit code and libc can be referenced); Improved search and transition to SELinux types with mmap_zero permission.




science and technology

Inout PPC Engine Cross Site Request Forgery

Inout PPC Engine suffers from a cross site request forgery vulnerability.




science and technology

Secunia Security Advisory 48336

Secunia Security Advisory - A vulnerability has been reported in Inout PPC Engine, which can be exploited by malicious people to conduct cross-site request forgery attacks.




science and technology

Linux Kernel Sendpage Local Privilege Escalation

The Linux kernel failed to properly initialize some entries the proto_ops struct for several protocols, leading to NULL being derefenced and used as a function pointer. By using mmap(2) to map page 0, an attacker can execute arbitrary code in the context of the kernel. Several public exploits exist for this vulnerability, including spender's wunderbar_emporium and rcvalle's ppc port, sock_sendpage.c. All Linux 2.4/2.6 versions since May 2001 are believed to be affected: 2.4.4 up to and including 2.4.37.4; 2.6.0 up to and including 2.6.30.4




science and technology

Were Oslo's Terror Blasts Caused By Car Bombs?




science and technology

Twin Terror Attacks Shock Norway




science and technology

Police Say Oslo Suspect Admits To 'Facts' In Massacre





science and technology

Norweigian Oil And Defense Industries Are Hit By A Major Cyber Attack




science and technology

Soca Website Attack: Norway Arrests Two Youths






science and technology

KeeWeb 1.14.0 HTML Injection

KeeWeb version 1.14.0 suffers from an html injection vulnerability.