ClsHack:Computer Security Blog    

Archive for the ‘Programming’ Category

[How-to]HULK:Web Server DoS Tool

Thursday, May 17th, 2012

HULK , as many other tools to make dos attacks allows to make a web site inaccessible.
HULK è opensource e scritto in python :D

What does HULK ?

HULK, is to generate Unique requests for each and every request generated, thus avoiding/bypassing caching engines and effecting directly on the server’s load itself.

So do we say bypassing the cache commits in the server resource allocation.
(more…)

[PHP] Simple method for bypass stupid “antivirus”

Friday, May 11th, 2012

All antivirus, so if you want to call them, At least that many times small script written in php that scan your files for viruses on the site are very easy to bypass and therefore stupid.
(more…)

CVE 2012-1823 && Simple Metaploit = ​​REMOTE CODE EXECUTION

Friday, May 4th, 2012

CVE 2012-1823 came out and has already caused a lot of damage especially to hosting providers.
You can read the original article here:
http://www.clshack.com/cve-2012-1823-php-cgi-remote-information-discloure.html
(more…)

[CVE-2012-1823] PHP-CGI Remote Information disclosure

Thursday, May 3rd, 2012

If you run PHP through CGI or the resourcing mod_cgid (not FastCGI), you can pass a command interpreter php-cgi.

For example, when doing:
(more…)

[XSS] Take a ScreenShots :D

Thursday, April 19th, 2012

With the development of browser you can do more things such as, create a screenshots of a web page.
The normal use of a xss Phishing is to do or steal identities.
(more…)