Is there any win32/linux exploit for Apache/1.3.27 ?

yep, here is one:

D:\tools>apache -h
Apache + mod_mylo remote exploit
By Carl Livitt (carllivitt at hush dot com)

Arguments:
-t target Attack 'target' host
-T platform Use parameters for target 'platform'
-h This help.

Available platforms:
0. SuSE 8.1, Apache 1.3.27 (installed from source) (default)
1. RedHat 7.2, Apache 1.3.20 (installed from RPM)
2. RedHat 7.3, Apache 1.3.23 (installed from RPM)
3. FreeBSD 4.8, Apache 1.3.27 (from Ports)

So to use:

C:\apache -t 44.44.44.44 <-- this will exploit SuSE 1.3.27

C:\apache -T1 4.4.4.4 <--- exploit RedHat 7.2

Just use -T# for the type u want to expliot

Simple

Enjoy,
Certox

Thanks alot!
I will try it out

Thanks .. Will check it out too ..

gR33tz Filou

Sorry about the double post

*Jumps off bridge*

it 's a local xploit ?

Certox We need cygwin1.dll too

Looks nice, Cheers for posting it!

has anybody a commendline apache 1.3 scanner?
and not scan100 scan 500 or scan1000 because they put the ip's not realy good out
i had made a Apache Autohacker but i need a good scanner

a Scanner 4 wich OS ?

Linux (or *nix)
or
Win32?

I think you are 1 of 100000 Win32 users so, NO !

i got linux... can you post a decent scanner please?

Is there an exploit for Apache 2.* ?

Exploit: boomerang.pl

Apache win32: 1.3.14 - 1.3.24

IS there a remote exploit on apache 1.3.19 with unix machine ?

thanks

so lets ask all:

IS there a remote exploit on XXX

there is da remote exploit on YOUR BRAIN

try Google or visit some Security Sites or call 0-800-REMOTE-EXPLOIT

many thnx dude for the info , gonna check it out

May i ask u , to send me the source code ?
to compile on linux.....

thnQ

only one little question ... what will happen if the exploit (1.3.27) gets in ?

Will it drop a system shell !? I think so ... right?

hi dude's

first. thangs 4 share

i try its out

but i gonna get

C:\>apache -t 127.0.0.1
[-] Attempting attack [ SuSE 8.1, Apache 1.3.27 (installed from source) (default
) ] ...
[-] Trying 0x08117cdb ...

C:\>apache -t 127.0.0.1
[-] Attempting attack [ SuSE 8.1, Apache 1.3.27 (installed from source) (default
) ] ...
[-] Trying 0x08117d0a ...

so can anyone tell me more of it?


greetz @ll

Err nm

you must admit, the mans got a point there

umm.. dude he is running a version of linux. SuSe is a version of linux, and according to that guys post about this exploit, it is also a valid target.

little old...

LOL the man definatly has a point

Hi all... I'm looking for a working 1.3.29 exploit
I tested this one and it failed.

running

Apache/1.3.29 (Unix) DAV/1.0.3 mod_auth_passthrough/1.8 mod_jk/1.2.0 mod_log_bytes/1.2 mod_bwlimited/1.4 PHP/4.3.4 FrontPage/5.0.2.2634 mod_ssl/2.8.16 OpenSSL/0.9.6b

but how can i use this is exploit

1.3.27 is too old :>

hi all, i was looking for a exploit on apache 1.3 27 from linux and i found this http://lists.netsys.com/pipermail/full-dis...une/005967.html but this is bullshit, isn't it?

try it lol

it crash my linux

it's a hot topic, please continue