Multiple Browser Audio Tag Denial Of Service

!/usr/bin/python Multiple Browsers Audio Tag Denial of Service Vulnerability any ogg file can be used for the DoS as long as it is a valid file on the server crash reporter for Mac seems to think this is a EXECBADACCESS This script acts as a web server to DoS connecting clients Exploit Title:...

Generic x86 Tight Loop

Generate a tight loop in the target process This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 2 include Msf::Payload::Single def initializeinfo = supermergeinfoinfo, 'Name' = 'Generi...

Apple Safari <= Tag (heap spray) Remote Buffer Overflow Exploit (osX)

No description provided by source. !/usr/bin/env python Title: Apple Safari = Tag heap spray Remote BOF Exploit osX Author: eidelweiss Special Thanks to: AL-MARHUM - Deal Cyber - all Senior MEDANHACKER Greats: JosS hackown , r0073r & 0x1D inj3ct0r , kuris good job beib LOL Tested on ibook OS X...

Samba 3.0.10 (OSX) - 'lsa_io_trans_names' Heap Overflow (Metasploit)

$Id: lsatransnamesheap.rb 9021 2010-04-05 23:34:10Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framewor...

Apple Safari <= Tag (heap spray) Remote BOF Exploit (osX)

Exploit for macOS platform in category remote exploits ========================================================= Apple Safari firelinking By eidelweiss Copyright C 2009-2010 firelinking by eidelweiss Apple Safari heap spray Remote BOF Exploit for osX Bind Shell Delivered on Port: 4444...

Apple iTunes .pls文件解析缓冲区溢出漏洞

BUGTRAQ ID: 36478 CVECAN ID: CVE-2009-2817 iTunes是用于Mac和PC的一款免费应用程序，可播放音乐和视频内容，以及将内容同步到iPod和Apple TV。 用户受骗使用iTunes加载了畸形的.pls播放列表文件就可以触发缓冲区溢出，导致执行任意代码。 Apple iTunes 9.0.1 厂商补丁： Apple ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.apple.com Exploit Title: iTunes .pls file handling buffer overfl...

Apple iTunes 9.0.1 - .pls Handling Buffer Overflow

Apple iTunes 9.0.1 - .pls Handling Buffer Overflow Exploit Title: iTunes .pls file handling buffer overflow Date: 2009.12.20 Author: S2 Crew Hungary Software Link: - Version: 9.0 Tested on: OSX 10.5.8, Windows XP SP2 /GS flag, DOS CVE: CVE-2009-2817 Code: !/usr/bin/env ruby SETJMP = 0x92F04224...

iTunes 9.0 Buffer Overflow

Exploit Title: iTunes .pls file handling buffer overflow Date: 2009.12.20 Author: S2 Crew Hungary Software Link: - Version: 9.0 Tested on: OSX 10.5.8, Windows XP SP2 /GS flag, DOS CVE: CVE-2009-2817 Code: !/usr/bin/env ruby SETJMP = 0x92F04224 JMPBUF = 0x8fe31290 STRDUP = 0x92EED110 8fe24459 jmp...

Apple iTunes 9.0.1 - '.pls' Handling Buffer Overflow

Exploit Title: iTunes .pls file handling buffer overflow Date: 2009.12.20 Author: S2 Crew Hungary Software Link: - Version: 9.0 Tested on: OSX 10.5.8, Windows XP SP2 /GS flag, DOS CVE: CVE-2009-2817 Code: !/usr/bin/env ruby SETJMP = 0x92F04224 JMPBUF = 0x8fe31290 STRDUP = 0x92EED110 8fe24459 jmp...

[Full-disclosure] Apple Iphone/Ipod - Serversman 3.1.5 HTTP Remote DoS exploit

|------------------------------------------------------------------| | | | / / / / | | / / / / / / / / / / / | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// // //,// // // | | | | http://www.corelan.be:8800 | | [email protected] | | |...

ServersMan 3.1.5 Denial Of Service

|------------------------------------------------------------------| | | | / / / / | | / / / / / / / \ / / / / \ | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// // //,// // // | | | | http://www.corelan.be:8800 | | [email protected] | | |...

Multiple Media Player HTTP DataHandler Overflow (iTunes, Quicktime, etc)

Exploit for unknown platform in category dos / poc ======================================================================== Multiple Media Player HTTP DataHandler Overflow iTunes, Quicktime, etc ======================================================================== ScaryMovie Exploit Study By:...

Multiple Media Players ((iTunes / QuickTime) - HTTP DataHandler Overflow

ScaryMovie Exploit Study By: DrIDE October, 2009 There is a widespread failure in the way that .MOV files are handled by the Quicktime Library. I have attempted to compound my findings on this issue. Nearly every .MOV enabled application that I tested fell victim to this exploit. This is a local...

VLC Media Player &lt;= 1.0.3 RTSP Buffer Overflow PoC (OSX/Linux)

No description provided by source. !/usr/bin/env python VLC Media Player = 1.0.3 RTSP Buffer Overflow PoC OSX/Linux Found By: DrIDE Tested On: OSX 10.6.2 v1.0.3 Tested On: Ubuntu 9 2.6.28-15-generic v0.9.9a Tested On: No Go on Windows header1 = "?xml version="1.0" encoding="UTF-8"?\n" header1...

VLC Media Player <= 1.0.3 RTSP Buffer Overflow PoC (OSX/Linux)

Exploit for unknown platform in category dos / poc ============================================================== VLC Media Player \n" header1 += "\n" header1 += "\tPlaylist\n" header1 += "\t\n" header1 += "\t\t\n" header1 += "\t\t\trtsp://localhosemail protected/foo/" payload = "\x41" 2 + "\x42"...

VideoLAN VLC Media Player 1.0.3 (OSXLinux) - RTSP Buffer Overflow (PoC)

VideoLAN VLC Media Player 1.0.3 OSXLinux - RTSP Buffer Overflow PoC !/usr/bin/env python VLC Media Player \n" header1 += "\n" header1 += "\tPlaylist\n" header1 += "\t\n" header1 += "\t\t\n" header1 += "\t\t\trtsp://localhost@localhost/foo/" payload = "\x41" 2 + "\x42" 4 + "\x43" 10000 header2 =...

VideoLAN VLC Media Player 1.0.3 (OSX/Linux) - RTSP Buffer Overflow (PoC)

!/usr/bin/env python VLC Media Player \n" header1 += "\n" header1 += "\tPlaylist\n" header1 += "\t\n" header1 += "\t\t\n" header1 += "\t\t\trtsp://localhost@localhost/foo/" payload = "\x41" 2 + "\x42" 4 + "\x43" 10000 header2 = "\n"; header2 += "\t\t\t\n"; header2 += "\t\t\t\t0\n"; header2 +=...

Apple Mac OSX 10.5.6/10.5.7 - ptrace mutex Denial of Service

/ Mac OS X 10.5.6-10.6.1 ptrace mutex handling DoS ================================================== This code should be run in a loop and due to problems with mutex handling in ptrace a DoS can occur when a destroyed mutex is attempted to be interlocked by OSX kernel giving rise to a race...

OSX 10.5.6-10.5.7 ptrace mutex DoS

Exploit for unknown platform in category local exploits ================================== OSX 10.5.6-10.5.7 ptrace mutex DoS ================================== Title: OSX 10.5.6-10.5.7 ptrace mutex DoS CVE-ID: OSVDB-ID: Author: prdelka Published: 2009-11-05 Verified: yes view source print? / Mac...

Apple Mac OSX 10.5.610.5.7 - ptrace mutex Denial of Service

Apple Mac OSX 10.5.610.5.7 - ptrace mutex Denial of Service / Mac OS X 10.5.6-10.6.1 ptrace mutex handling DoS ================================================== This code should be run in a loop and due to problems with mutex handling in ptrace a DoS can occur when a destroyed mutex is attempted...