Savant Web Server 3.1 - GET Universal Remote Overflow

Savant Web Server 3.1 - GET Universal Remote Overflow !/usr/bin/perl -w exploit for Savant webserver 3.1 remote bof shellcode bind 4444 port on target host Jacopo cervini aka [email protected] use IO::Socket; if!$ARGV1 print "Uso: savant-3.1.pl \n\n"; exit; $victim = IO::Socket::INET-newProto='tcp'...

Savant Web Server 3.1 - GET Universal Remote Overflow

!/usr/bin/perl -w exploit for Savant webserver 3.1 remote bof shellcode bind 4444 port on target host Jacopo cervini aka [email protected] use IO::Socket; if!$ARGV1 print "Uso: savant-3.1.pl \n\n"; exit; $victim = IO::Socket::INET-newProto='tcp', PeerAddr=$ARGV0, PeerPort=$ARGV1 or die "can't conne...

vmware-vielib-exec.txt

:. GOODFELLAS Security Research TEAM .: :. http://goodfellas.shellcode.com.ar .: vielib.dll 2.2.5.42958 VmWare Inc version 6.0.0 Remode Code Execution Exploit ============================================================================= Internal ID: VULWAR200707290. ----------- Introduction...

Photoshop CS2/CS3 / Paint Shop Pro 11.20 .PNG File BoF Exploit

No description provided by source. / Photoshop CS2/CS3, Paint Shop Pro 11.20 .PNG File Buffer Overflow Like bitmap files, PNG files can do great things =D. In french: "buffer overflow a gogo!" The generated .PNG file will work for: -Photoshop CS2 -Photoshop CS3 -Photoshop Elements 5.0 -Corel Pain...

abcview-overflow.txt

/ ABC-View Manager 1.42 .PSP File Buffer Overflow ABC-View Manager is vulnerable to an unspecified buffer overflow when processing a crafted .TTF file. This exploit runs calc.exe or binds shell to port 4444. Tested against Win XP SP2 FR. Have Fun! Coded and discovered by Marsu Note: Open that in...

freshview-overflow.txt

/ FreshView 7.15 .PSP File Buffer Overflow FreshView is vulnerable to an unspecified buffer overflow when processing a crafted .PSP file. This exploit runs calc.exe or binds shell to port 4444. Tested against Win XP SP2 FR. Have Fun! Coded and discovered by Marsu Note: Open that in XnView to see...

IrfanView 4.00 - .iff Local Buffer Overflow

IrfanView 4.00 - .iff Local Buffer Overflow / IrfanView / include "stdio.h" include "stdlib.h" / win32exec - EXITFUNC=process CMD=calc.exe Size=138 Encoder=PexFnstenvSub http://metasploit.com / unsigned char CalcShellcode = "\xfc\xe8\x44\x00\x00\x00\x8b\x45\x3c\x8b\x7c\x05\x78\x01\xef\x8b"...

IrfanView <= 4.00 .IFF File Buffer Overflow Exploit

Exploit for unknown platform in category local exploits =================================================== IrfanView / include "stdio.h" include "stdlib.h" / win32exec - EXITFUNC=process CMD=calc.exe Size=138 Encoder=PexFnstenvSub http://metasploit.com / unsig...

Photoshop CS2/CS3 / Paint Shop Pro 11.20 .PNG File BoF Exploit

Exploit for unknown platform in category local exploits ============================================================== Photoshop CS2/CS3 / Paint Shop Pro 11.20 .PNG File BoF Exploit ============================================================== /\ Photoshop CS2/CS3, Paint Shop Pro 11.20 .PNG File...

IrfanView 4.00 - &#039;.iff&#039; Local Buffer Overflow

/ IrfanView / include "stdio.h" include "stdlib.h" / win32exec - EXITFUNC=process CMD=calc.exe Size=138 Encoder=PexFnstenvSub http://metasploit.com / unsigned char CalcShellcode = "\xfc\xe8\x44\x00\x00\x00\x8b\x45\x3c\x8b\x7c\x05\x78\x01\xef\x8b"...

FreshView 7.15 (.PSP File) Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ================================================== FreshView 7.15 .PSP File Buffer Overflow Exploit ================================================== / FreshView 7.15 .PSP File Buffer Overflow FreshView is vulnerable to an unspecified buffe...

Corel Paint Shop Pro Photo 11.20 (.CLP File) Buffer Overflow Exploit

No description provided by source. / Corel Paint Shop Pro Photo v11.20 Unspecified .CLP File Buffer Overflow &n...

XnView 1.90.3 (.XPM File) Local Buffer Overflow Exploit

No description provided by source. / XnView 1.90.3 .XPM File Buffer Overflow ...

Corel Paint Shop Pro Photo 11.20 (.CLP File) Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ==================================================================== Corel Paint Shop Pro Photo 11.20 .CLP File Buffer Overflow Exploit ==================================================================== / Corel Paint Shop Pro Photo v11.20...

Corel Paint Shop Pro Photo 11.20 - &#039;.clp&#039; Local Buffer Overflow

/ Corel Paint Shop Pro Photo v11.20 Unspecified .CLP File Buffer Overflow By opening a specially crafted file, SEH can be overwritten which makes code execution possible. This sploit runs calc.exe or binds to port 4444. Tested against Win XP SP2 FR. Have Fun! Coded and discovered by Marsu / inclu...

ACDSee 9.0 - .xpm Local Buffer Overflow

ACDSee 9.0 - .xpm Local Buffer Overflow / ACDSee v9.0 .XPM File Buffer Overflow ACDSee is vulnerable to an unspecified buffer overflow when processing a crafted .XPM file. This exploit runs calc.exe or binds shell to port 4444, and works against ACDSee and ACDSee Quick View. Tested against Win XP...

ACDSee 9.0 (.XPM File) Local Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ==================================================== ACDSee 9.0 .XPM File Local Buffer Overflow Exploit ==================================================== / ACDSee v9.0 .XPM File Buffer Overflow ACDSee is vulnerable to an unspecified buffe...

mswin-dns-meta.txt

!/usr/bin/python Remote exploit for the 0day Windows DNS RPC service vulnerability as described in http://www.securityfocus.com/bid/23470/info. Tested on Windows 2000 SP4. The exploit if successful binds a shell to TCP port 4444 and then connects to it. Cheers to metasploit for the first exploit...

Microsoft Windows Server 2000 SP4 - DNS RPC Remote Buffer Overflow

Microsoft Windows Server 2000 SP4 - DNS RPC Remote Buffer Overflow !/usr/bin/python Remote exploit for the 0day Windows DNS RPC service vulnerability as described in https://www.securityfocus.com/bid/23470/info. Tested on Windows 2000 SP4. The exploit if successful binds a shell to TCP port 4444...

MS Windows DNS RPC Remote Buffer Overflow Exploit (win2k SP4)

Exploit for unknown platform in category remote exploits ============================================================= MS Windows DNS RPC Remote Buffer Overflow Exploit win2k SP4 ============================================================= !/usr/bin/python Remote exploit for the 0day Windows DNS...