MS14-068 privilege escalation PoC
admin 发布于 2014-12-06 10:14
ms14-068.py
#!/usr/bin/python
# MS14-068 Exploit
# Author
# ------
# Sylvain Monne
# Contact : sylvain dot monne at solucom dot fr
# http://twitter.com/bidord
import sys, os
fro...
标签: 提权
tnftp in MacOS X 10.10 & FreeBSD10 Remote Comand Execution Exploit
admin 发布于 2014-12-06 09:07
#!/usr/bin/env python2
#
# Exploit Title: [tnftp BSD exploit]
# Exploit Author: [dash]
# Vendor Homepage: [www.freebsd.org]
# Version: [FreeBSD 8/9/10]
# Tested on: [FreeBSD 9...
WordPress <= v4.0 Denial of Service Exploit
admin 发布于 2014-12-06 08:58
<?php
echo "\nCVE-2014-9034 | WordPress <= v4.0 Denial of Service Vulnerability\n";
echo "Proof-of-Concept developed by john@secureli.com (http://secureli.com)\n\n";
echo "u...
标签: wordpress
PHP Execute Command Bypass Disable_functions
admin 发布于 2014-11-18 14:33
先简单说一下php调用mail()函数的过程。
看到源码ext/mail.c
236行：
char *sendmail_path = INI_STR("sendmail_path");
char *sendmail_cmd = NULL;
从INI中获得sendmail_path变量。我们看看php.ini里...
