Immunity Canvas: MQAC

Name| mqac ---|--- CVE| CVE-2014-4971 Exploit Pack| CANVAS Description| mqac Notes| References: https://www.korelogic.com/Resources/Advisories/KL-001-2014-003.txt CVE Name: CVE-2014-4971 VENDOR: Microsoft Notes: Tested on: Windows XP Professional SP3 English Constraints: In order to work the...

Immunity Canvas: LINUX_PPPOL2TP

Name| linuxpppol2tp ---|--- CVE| CVE-2014-4943 Exploit Pack| CANVAS Description| pppol2tp local root Notes| Repeatability: Single Notes: Exploit for Linux = 3.4.x amd64 and = 3.7.x x86 Tested on + Ubuntu 13.04 / 13.10 / 14.04 x86/amd64 + Fedora 17 amd64 only + Fedora 18/19/20 x86/amd64 Note:...

Immunity Canvas: VBOX_GUEST

Name| vboxguest ---|--- CVE| CVE-2014-2477 Exploit Pack| CANVAS Description| VBoxGuest.sys Privilege Escalation Notes| References: https://www.korelogic.com/Resources/Advisories/KL-001-2014-001.txt CVE Name: CVE-2014-2477 Notes: Exploit has been tested successfully on: - Windows XP Professional...

Immunity Canvas: MS14_040

Name| ms14040 ---|--- CVE| CVE-2014-1767 Exploit Pack| CANVAS Description| AFD.SYS dangling pointer vulnerability Notes| Repeatability: Infinite Notes: This vulnerability affects Microsoft Windows from XP to 8.1, although the exploit is not available for every version. This module automatically...

Immunity Debugger 1.85 - Stack Overflow Vulnerabil?ity (PoC)

No description provided by source. / Filename : CrashPOC.cpp Exploit Title: title Date: 20 March 2014 Exploit Author: Veysel HATAS [email protected] - Web Page : www.binarysniper.net Vendor Homepage: https://www.immunityinc.com/ Software Link: https://www.immunityinc.com/products-immdbg.shtml...

NIPrint LPD Request Overflow

No description provided by source. $Id: niprint.rb 11407 2010-12-25 06:01:12Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Immunity Canvas: LINUX_FUTEX_REQUEUE

Name| linuxfutexrequeue ---|--- CVE| CVE-2014-3153 Exploit Pack| CANVAS Description| Futex Requeue Privilege Escalation Exploit Notes| Repeatability: Multiple times Notes: - Supported 64bit kernels: 3.11.0-13-22-generic - Ubuntu saucy 13.10 3.11.0-13-22-generic - Ubuntu precise 12.04...

Immunity Canvas: MS14_025

Name| ms14025 ---|--- CVE| CVE-2014-1812 Exploit Pack| CANVAS Description| ms14025 Notes| CVE Name: CVE-2014-1812 VENDOR: Microsoft Commandline: runmodule ms14-025 References: https://technet.microsoft.com/library/security/ms14-025 CVE Url:...

Immunity Canvas: LINUX_TTY_RACE

Name| linuxttyrace ---|--- CVE| CVE-2014-0196 Exploit Pack| CANVAS Description| linuxttyrace local root Notes| Repeatability: Multiple Times Notes: Exploit has been tested successfully on: - Ubuntu 13.10 3.14.1-vanilla - Ubuntu 14.04 3.14.1-vanilla - Ubuntu 14.04 3.14.2-vanilla - Fedora 20...

Immunity Debugger Stack Overflow Vulnerability – PoC

Title : Immunity Debugger – Crash POC Name: Immunity Debugger v1.85 SEH Chain Stack Overflow Discoverer: Veysel HATAŞ email protected Vendor: Immunity Inc Systems Affected: Windows Risk: Low Status: Not Fixed Discovered: 05 January 2014 Reported: 06 January 2014 Published: 20 March 2014...

Immunity Debugger 1.85 - Stack Overflow (PoC)

/ Filename : CrashPOC.cpp Exploit Title: title Date: 20 March 2014 Exploit Author: Veysel HATAS [email protected] - Web Page : www.binarysniper.net Vendor Homepage: https://www.immunityinc.com/ Software Link: https://www.immunityinc.com/products-immdbg.shtml Version: 1.85 Tested on: WinXP, Win7 /...

Immunity Debugger 1.85 - Stack Overflow (PoC)

Immunity Debugger 1.85 - Stack Overflow PoC / Filename : CrashPOC.cpp Exploit Title: title Date: 20 March 2014 Exploit Author: Veysel HATAS [email protected] - Web Page : www.binarysniper.net Vendor Homepage: https://www.immunityinc.com/ Software Link:...

Immunity Canvas: IE_CMARKUP

Name| iecmarkup ---|--- CVE| CVE-2014-0322 Exploit Pack| CANVAS Description| iecmarkup Notes| CVE Name: CVE-2014-0322 VENDOR: Microsoft NOTES: - This exploits leaks a vtable pointer of a mshtml object in order to bypass ASLR - We also leak the shellcode's address so there's no need for spraying...

Immunity Canvas: RECVMMSG

Name| recvmmsg ---|--- CVE| CVE-2014-0038 Exploit Pack| CANVAS Description| recvmmsg local root Notes| Repeatability: Infinite Notes: Tested on: - Ubuntu 13.10 x8664 3.11.0-12-generic VENDOR: GNU/Linux CVE Url: https://vulners.com/cve/CVE-2014-0038 CVE Name: CVE-2014-0038...

Immunity Canvas: NDPROXY

Name| ndproxy ---|--- CVE| CVE-2013-5065 Exploit Pack| CANVAS Description| NDProxy Notes| References: https://technet.microsoft.com/en-us/security/advisory/2914486 CVE Name: CVE-2013-5065 VENDOR: Microsoft Date public: 11/28/2013 CVE Url:...

Immunity Canvas: IE_CARDSPACECLAIMCOLLECTION

Name| iecardspaceclaimcollection ---|--- CVE| CVE-2013-3918 Exploit Pack| CANVAS Description| iecardspaceclaimcollection Notes| CVE Name: CVE-2013-3918 VENDOR: Microsoft NOTES: - This exploits leaks a vtable pointer of a CTable object in order to bypass ASLR - We also leak the shellcode's address...

Python tools for Pentesters

If you are involved in vulnerability research, reverse engineering or penetration testing, I suggest to try out the Python programming language. It has a rich set of useful libraries and programs. This page lists some of them. Most of the listed tools are written in Python, others are just Python...

Immunity Canvas: JOOMLA_MM_RCE

Name| joomlammrce ---|--- CVE| CVE-2013-5576 Exploit Pack| CANVAS Description| joomlammrce Notes| Repeatability: Infinite Notes: This module was tested in a Joomla 3.1.4 on Windows 7. Depending on the configuration of the site this module may require valid credentials in order to exploit the file...

Immunity Canvas: IE_CDISPLAYPOINTER

Name| iecdisplaypointer ---|--- CVE| CVE-2013-3897 Exploit Pack| CANVAS Description| iecdisplaypointer Notes| CVE Name: CVE-2013-3897 VENDOR: Microsoft Notes: VersionsAffected: 8 Repeatability: Infinite References:...

Immunity Canvas: CVE_2013_3881

Name| CVE20133881 ---|--- CVE| CVE-2013-3881 Exploit Pack| CANVAS Description| Win32k NULL Page Exploit Notes| Repeatability: Notes: This vulnerability only affects Intel x86 based versions of Windows 7 This module automatically migrates to lsass.exe . Tested on: Windows 7 Ultimate N VENDOR:...