This
site is by Andrea Micalizzi, 36 years old from
Catania, Italy, also known as rgod, also known
as retrogod, and occasionally from
my friends of 9SG. I am atheist. Communist. Very patient guy. This is
the one and only official site that contains articles, security advisories
and proof of concepts related to my work as independent security researcher.
Exploits on this site are not weaponized and are intended as mere evidence
of vulnerability found by me. I already work as an external consultant
for various companies and I am *NOT* interested in any other job one
can do from an office (place often populated by clowns). I don't teach
hacking. I don't exploit holes in public sites or networks.I
don't need your fifteen grands for a vulnerability in Internet Explorer,
Firefox, Apache web server or PHP because I am already rich (I am very
good at my work). Also, important, I am a very busy person and I respond
only to very smart emails once in a lifetime.
The 'news of my death' was a practical joke organized and perpetrated
by me and my friends to protect me from occasional pests and idiots.
In facts, no death certificate has ever been produced if you had the
smartness to monitor and if you were a real-life phone phreaker, which
you are not. I delivered myself the site credentials to "9 situations
group" to keep the site in months when not practicing my activity
and I was enjoyng life after healing from an heavy infection of the
bone marrow caused in 2008 by a trivial influence. I want to thanks
all the people that are used to copy and paste (bad attitude) while
erecting sites in my honor, but no one ever asked.
This site has never been hacked from 2004 since it started.
an ink sketch I've done after the painting version. Somehow, I prefer this.Click to enlarge:
| L'uomo
dalle ciglia cucite alla fronte ______________ scritto
bolognese, mai corretto. Riscritto trenta volte, difficile lavoro
di sottrazione. Comprendeva chorps trans, diviso in due sezioni. |
| chorps
trans ______________ raccolta di scritti proveniente da Bologna (tre anni fa? poesia narrativa?) |
| advisory______________
|
| advisory______________
|
| advisory______________ Novell
NetIQ Privileged User Manager 2.3.1 auth.dll pa_modify_accounts()
|
| advisory______________ |
| advisory______________ AOL Products downloadUpdater2 Plugin SRC Parameter Remote Code Execution (advisory) AOL
Products downloadUpdater2 Plugin SRC Parameter Remote Code Execution
(poc) |
| advisories______________ Adobe Photoshop CS5.1 U3D.8bi Library Collada Asset Elements Stack Based Buffer Overflow (poc) |
| advisories______________ |
|
advisories______________ |
| advisory______________ |
| advisory______________ |
| advisory______________ |
| advisory______________ |
| advisory______________ |
| advisory______________ Google Talk gtalk:// Deprecated Uri Handler /gaiaserver Parameter Injection Vulnerability |
| various advisories &
exploits ______________ |
| various advisories &
exploits ______________
|
| various advisories &
exploits ______________ |
| various advisories &
exploits ______________
|
| various advisories &
exploits ______________ |
| various advisories &
exploits ______________ |
| various advisories &
exploits ______________
|
| various advisories &
exploits ______________ |
| various advisories &
exploits ______________ Oracle
DataDirect ODBC Drivers HOST Attribute arsqls24.dll Stack Based
Buffer |
| various advisories &
exploits ______________ Oracle AutoVue 20.0.1 AutoVueX ActiveX Control ExportEdaBom Remote Code Execution Vulnerabilty Oracle AutoVue 20.0.1 AutoVueX ActiveX Control Export3DBom Remote Code Execution Vulnerability |
| various advisories &
exploits ______________ |
| various advisories &
exploits ______________ |
| various advisories &
exploits ______________ CA
ARCserve D2D r15 GWT RPC Request Auth Bypass / |
| various advisories &
exploits ______________ |
|
various advisories &
exploits ______________ WebSVN
2.3.2 Unproper Metacharacters Escaping exec() Remote |
| various advisories &
exploits ______________ |
| various advisories &
exploits ______________ |
| various advisories &
exploits ______________ |
| various advisories &
exploits ______________ Chilkat Software FTP2 ActiveX Component (ChilkatFtp2.DLL 2.6.1.1) Remote Code Execution poc |
|
various advisories
& exploits ______________ Microsoft Windows Fax Services Cover Page Editor (.cov) memory corruption poc |
various advisories & exploits ______________ |
various advisories & exploits ______________ IBM Installation Manager <= 1.3.0 iim:// uri handler remote code execution exploit EMC multiple products KeyWorks KeyHelp Module (keyhelp.o cx 1.2.312) remote buffer overflow exploit Oracle Document Capture BlackIce DEVMODE ActiveX Control remote stack based buffer overflow Oracle Document Capture BlackIce DEVMODE ActiveX Control remote command execution |
various advisories & exploits ______________ glFusion <= 1.1.2 COM_applyFilter()/order SQL Injection Exploit PHPizabi v0.848b C1 HFP1 Remote Privilege Escalation Vulnerability BS.Player <= 2.34 Build 980 (.bsl) Local Buffer Overflow Exploit (SEH) CDex 1.70b2 (.ogg) Local Buffer Overflow Exploit (xp/ sp3) PPLive <= 1.9.21 (/LoadModule) URI Handlers Argument Injection Vuln GeoVision LiveAudio ActiveX Remote Freed-Memory Access Exploit |
various advisories & exploits ______________ SupportSoft DNA Editor Module (dnaedit.dll v6.9.2205) remote code execution exploit
|
various advisories & exploits ______________
|
various advisories & exploits ______________ Megacubo 5.0.7 (mega://) remote eval() injection exploit
|
various advisories & exploits ______________ Google Chrome (ChromeHTML://) Remote Parameter Injection (exploitable through IE) KVIrc 3.4.2 Shiny (uri handler) Remote Command Execution Exploit Exodus 0.10 (uri handler) Arbitrary Parameter Injection Exploit Exodus 0.10 (uri handler) Arbitrary Parameter Injection Vulnerability ooVoo 1.7.1.35 (URL Protocol) Remote Unicode Buffer Overflow PoC hMAilServer 4.4.2 (PHPWebAdmin) File Inclusion Vulnerabilities
|
various advisories & exploits ______________ Microsoft PicturePusher ActiveX (PipPPush.DLL 7.00.0709) remote Cross Site File Upload attack poc Autodesk DWF Viewer Control / LiveUpdate Module remote code execution exploit
|
various advisories & exploits ______________ NuMedia Soft NMS DVD Burning SDK Activex (NMSDVDX.dll) remote exploit Pluck 4.5.3 update.php remote file corruption exploit CMailServer 5.4.6 (CMailCOM.dll) Remote SEH Overwrite Exploit Pivot 1.40.5 Dreamwind load_template() Credentials Disclosure Exploit |
various advisories & exploits ______________ muvee Technologies MPEffects Module (MPEffects.dll 6.0.18.1) divide by zero crash C6 Messenger Installation Url DownloaderActiveX Control Remote Download & Execute Exploit CA Internet Security Suite 2008 (UmxEventCli.dll/SaveToFile()) remote file corruption poc |
various advisories & exploits ______________ |
various
advisories & exploits ______________ iMesh < = 7.1.0.x IMWebControl Class (IMWeb.dll 7.0.0.x) remote heap exploit RaidenHTTPD 2.0.19 ulang cmd exec poc exploit SurgeMail v.38k4 webmail Host header denial of service exploit
|
various
advisories & exploits ______________ GOM Player 2.1.6.3499 (GomWeb3.dll 1.0.0.12) Remote Overflow Exploit CyberLink PowerDVD CreateNewFile Arbitrary Remote Rewrite DoS EasyMail MessagePrinter Object (emprint.DLL 6.0.1.0) BOF Exploit
|
various
advisories & exploits ______________
|
various
advisories & exploits ______________ Hexamail
Server 3.0.0.001 (pop3) pre-auth remote overflow poc |
various
advisories & exploits ______________ Postcast Server Pro 3.0.61 / Quiksoft EasyMail (emsmtp.dll 6.0.1) BoF eCentrex VOIP Client module (uacomx.ocx 2.0.1) Remote BOF Exploit |
various
advisories & exploits ______________ AMX Corp. VNC ActiveX Control (AmxVnc.dll 1.0.13.0) BoF Exploit |
various
advisories & exploits ______________
|
| advisory______________ Microsoft Windows Essentials Improper URI Handling Vulnerability (Beyond Security's SSD)
|
| advisory
______________ [ZDI] IBM Rational ClearQuest CQOle ActiveX Control Remote Code Execution Vulnerability [ZDI] Avaya IP Office Customer Call Reporter ImageUpload Remote Code Execution Vulnerability |
|
advisory
______________ [ZDI] AOL Products dnUpdater ActiveX Uninitialized Pointer Remote Code Execution Vulnerability |
| various advisories &
exploits ______________ [ZDI] Oracle Forms Recognition CroScPlt.dll ActiveX Control Remote Code Execution Vulnerability |
| various advisories &
exploits ______________ [Beyond Security] Symantec Altiris WISE Package Studio Multiple SQL Injections
|