Quake 3 Engine Client CS_ITEMS Remote Overflow Exploit (Win32)

Exploit for unknown platform in category dos / poc ============================================================== Quake 3 Engine Client CSITEMS Remote Overflow Exploit Win32 ============================================================== / Quake 3 Engine Client CSITEMS Remote Stack Overflow Exploi...

Reflective DLL Injection, Reverse Ordinal TCP Stager (No NX or Win7)

Inject a DLL via a reflective loader. Connect back to the attacker This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 93 include Msf::Payload::Stager include Msf::Payload::Windows def...

CVE-2003-0641

WatchGuard ServerLock for Windows 2000 before SL 2.0.3 allows local users to load arbitrary modules via the OpenProcess function, as demonstrated using 1 a DLL injection attack, 2 ZwSetSystemInformation, and 3 API hooking in OpenProcess...

CVE-2003-0641

WatchGuard ServerLock for Windows 2000 before SL 2.0.3 allows local users to load arbitrary modules via the OpenProcess function, as demonstrated using 1 a DLL injection attack, 2 ZwSetSystemInformation, and 3 API hooking in OpenProcess...

CVE-2003-0641

CVE-2003-0641 concerns WatchGuard ServerLock for Windows 2000 prior to SL 2.0.3. The issue allows local users to load arbitrary modules by abusing OpenProcess, demonstrated through three techniques: (1) DLL injection, (2) ZwSetSystemInformation, and (3) API hooking in OpenProcess. The affected co...

Watchguard ServerLock protection bypass

With DLL injection technique and symlinks to /DEVICE it's possible to bypass kernel drive loading protection...

Bypassing ServerLock protection on Windows 2000

Bypassing ServerLock protection on Windows 2000 Jan K. Rutkowski [email protected] 1. Background ServerLock for Windows 2000 is product of Watch Guard company. The purpose of this tool is to protect integrity of the operating system by ensuring that nobody can modify certain files like...

Microsoft VM 20003000310031883200330038023805 series - JDBC Class Code Execution

Microsoft VM 20003000310031883200330038023805 series - JDBC Class Code Execution source: https://www.securityfocus.com/bid/5751/info Java Database Connectivity JDBC classes are used by the Virtual Machine to provide connectivity to various data sources. It is possible to spoof a JDBC class reques...