0day.today - наибольшая база данных эксплоитов в мире.
Некоторые вещи, о которых стоит знать:
Мы используем один основной домен 0day.today
Если Вы желаете приобрести эксплоит или заплатить за услуги - Вам необходимо приобрести Золото (Gold). Мы не хотим чтобы Вы использовали наш сайт как инструмент для взломов, поэтому любые действия, которые могут незаконно влиять на других пользователей или на сайты, к которым у Вас нет прав доступа будут запрещены и Ваш профиль со всей вложенной информацией будет уничтожен.
Администрация сайта использует официальные контакты. Опасайтесь обманщиков!
Мы используем один основной домен 0day.today
Если Вы желаете приобрести эксплоит или заплатить за услуги - Вам необходимо приобрести Золото (Gold). Мы не хотим чтобы Вы использовали наш сайт как инструмент для взломов, поэтому любые действия, которые могут незаконно влиять на других пользователей или на сайты, к которым у Вас нет прав доступа будут запрещены и Ваш профиль со всей вложенной информацией будет уничтожен.
Администрация сайта использует официальные контакты. Опасайтесь обманщиков!
We DO NOT use Telegram or any messengers / social networks!
Please, beware of scammers!
Please, beware of scammers!
- Прочитайте [ соглашение ]
- Прочитайте [ Отправить ] правила
- Посетите страницу [ faq ] page
- [ Зарегистрируйте ] профиль
- Получите [ Gold ]
- Если Вы хотите [ продать ]
- Если Вы хотите [ купить ]
- Если Вы потеряли [ Счет ]
- Любые вопросы [ [email protected] ]
- Страница авторизации
- Страница регистрации
- Страница восстановления
- Страница FAQ
- Страница контактов
- Правила публикации
- Страница с соглашением
Mail:
Facebook:
Twitter:
Telegram:
We DO NOT use Telegram or any messengers / social networks!
Вы можете связаться с нами по:
Mail:
Facebook:
Twitter:
Telegram:
We DO NOT use Telegram or any messengers / social networks!
[ remote exploits ]
Remote exploits and vulnerabilities category
A "remote exploit" works over a network and exploits the security vulnerability without any prior access to the vulnerable system.
-::DATE
-::DESCRIPTION
-::TYPE
-::HITS
-::RISK
-::GOLD
-::AUTHOR
3 558
Security Risk Critical
D
Download
-
Verified by
free
You can open this exploit for free
Paul Purcell
Эксплоиты:
3
BusinessLevel:
4
[ local exploits ]
Local exploits and vulnerabilities category
A "local exploit" requires prior access to the vulnerable system and usually increases the privileges of the person running the exploit past those granted by the system administrator. Exploits against client applications also exist, usually consisting of modified servers that send an exploit if accessed with client application.
-::DATE
-::DESCRIPTION
-::TYPE
-::HITS
-::RISK
-::GOLD
-::AUTHOR
Microsoft Windows 8.1 / 10 (x86) - Secondary Logon Standard Handles Missing Sanitization Privilege E
Комметариев:
0
3 559
Security Risk High
D
Download
C
CVE-2016-0099
Verified by
free
You can open this exploit for free
Google Security Research
Эксплоиты:
1019
BusinessLevel:
56
3 676
Security Risk High
D
Download
-
Verified by
free
You can open this exploit for free
Rakan Alotaibi
Эксплоиты:
1
BusinessLevel:
4
[ web applications ]
Webapplication (webapps) exploits and vulnerabilities category
This category is full with vulnerabilities, which was found in web projects and web applications.
-::DATE
-::DESCRIPTION
-::TYPE
-::HITS
-::RISK
-::GOLD
-::AUTHOR
WordPress eBook Download 1.1 Plugin - Directory Traversal
Комметариев:
0
3 330
Security Risk Medium
D
Download
-
Verified by
free
You can open this exploit for free
Wadeek
Эксплоиты:
21
BusinessLevel:
5
WordPress Import CSV 1.0 Plugin - Directory Traversal
Комметариев:
0
2 779
Security Risk Medium
D
Download
-
Verified by
free
You can open this exploit for free
Wadeek
Эксплоиты:
21
BusinessLevel:
5
WordPress Abtest Plugin- Local File Inclusion
Комметариев:
0
2 821
Security Risk Medium
D
Download
-
Verified by
free
You can open this exploit for free
CrashBandicot
Эксплоиты:
9
BusinessLevel:
6
Disc ORGanizer - DORG - Multiple Vulnerabilities
Комметариев:
0
2 882
Security Risk High
D
Download
-
Verified by
free
You can open this exploit for free
SECUPENT
Эксплоиты:
2
BusinessLevel:
5
D-Link DWR-932 Firmware 4.00 - Authentication Bypass
Комметариев:
0
2 987
Security Risk High
D
Download
-
Verified by
free
You can open this exploit for free
Saeed reza Zamanian
Эксплоиты:
12
BusinessLevel:
4
3 182
Security Risk Low
D
Download
-
Verified by
free
You can open this exploit for free
hyp3rlinx
Эксплоиты:
253
BusinessLevel:
17
Xoops 2.5.7.2 - Directory Traversal Bypass
Комметариев:
0
3 152
Security Risk Medium
D
Download
-
Verified by
free
You can open this exploit for free
hyp3rlinx
Эксплоиты:
253
BusinessLevel:
17
3 147
Security Risk High
D
Download
-
Verified by
free
You can open this exploit for free
AMAR^SHG
Эксплоиты:
3
BusinessLevel:
4
Dating Pro Genie 2015.7 - Cross-Site Request Forgery
Комметариев:
0
2 980
Security Risk Low
D
Download
-
Verified by
free
You can open this exploit for free
High-Tech Bridge
Эксплоиты:
241
BusinessLevel:
19
iTop 2.2.1 - Cross-Site Request Forgery
Комметариев:
0
2 867
Security Risk Low
D
Download
-
Verified by
free
You can open this exploit for free
High-Tech Bridge
Эксплоиты:
241
BusinessLevel:
19
[ shellcode ]
Shellcode category
In computer security, a shellcode is a small piece of code used as the payload in the exploitation of a software vulnerability. It is called "shellcode" because it typically starts a command shell from which the attacker can control the compromised machine, but any piece of code that performs a similar task can be called shellcode. Because the function of a payload is not limited to merely spawning a shell, some have suggested that the name shellcode is insufficient. Shellcode is commonly written in machine code.
Classification:
There are several methods of classifying exploits. The most common is by how the exploit contacts the vulnerable software. A remote exploit works over a network and exploits the security vulnerability without any prior access to the vulnerable system. A local exploit requires prior access to the vulnerable system and usually increases the privileges of the person running the exploit past those granted by the system administrator. Exploits against client applications also exist, usually consisting of modified servers that send an exploit if accessed with a client application. Exploits against client applications may also require some interaction with the user and thus may be used in combination with the social engineering method. Another classification is by the action against the vulnerable system; unauthorized data access, arbitrary code execution, and denial of service are examples. Many exploits are designed to provide superuser-level access to a computer system. However, it is also possible to use several exploits, first to gain low-level access, then to escalate privileges repeatedly until one reaches root. Normally a single exploit can only take advantage of a specific software vulnerability. Often, when an exploit is published, the vulnerability is fixed through a patch and the exploit becomes obsolete until newer versions of the software become available Shellcodes any types.
-::DATE
-::DESCRIPTION
-::TYPE
-::HITS
-::RISK
-::GOLD
-::AUTHOR
Linux/x86-64 - Reverse Shell Shellcode
Комметариев:
0
10 234
Security Risk Medium
D
Download
-
Verified by
free
You can open this exploit for free
Sudhanshu Chauhan
Эксплоиты:
3
BusinessLevel:
5