ClsHack:Computer Security Blog    

[How-to]HULK:Web Server DoS Tool

Thursday, May 17th, 2012

HULK , as many other tools to make dos attacks allows to make a web site inaccessible.
HULK è opensource e scritto in python :D

What does HULK ?

HULK, is to generate Unique requests for each and every request generated, thus avoiding/bypassing caching engines and effecting directly on the server’s load itself.

So do we say bypassing the cache commits in the server resource allocation.
(more…)

CVE 2012-1823 && Simple Metaploit = ​​REMOTE CODE EXECUTION

Friday, May 4th, 2012

CVE 2012-1823 came out and has already caused a lot of damage especially to hosting providers.
You can read the original article here:
http://www.clshack.com/cve-2012-1823-php-cgi-remote-information-discloure.html
(more…)

[CVE-2012-1823] PHP-CGI Remote Information disclosure

Thursday, May 3rd, 2012

If you run PHP through CGI or the resourcing mod_cgid (not FastCGI), you can pass a command interpreter php-cgi.

For example, when doing:
(more…)

Maxisploit Scanner : Scanner SQL injection XSS, Admin finder && shared hosting

Saturday, April 28th, 2012

On Windows, one of the best programs is to identify vulnerabilities Acunetix :)
It’ also recently created Maxisploit Scanner a scanner that can identify SQL injection, xss brutaforce of administrative boards and all hosts on the same server.
As you understand Maxisploit Scanner is for windows but it works well with wine.

From the official website we read the following description:
(more…)

[Android]FTP Brute Force + Source

Sunday, April 22nd, 2012

In my free time I wrote this little brute force ftp to Android.

The code is written very badly and seems to programming c XD

However for the ftp access to Android I used the library:
org.apache.commons.net.ftp.FTPClient

(more…)