Apple Mac OSX xnu 1228.0 - 'super_blob' Local kernel Denial of Service (PoC)

/ xnu-superblob-dos.c Copyright c 2007 by Apple MACOS X xnu include include include include include include include define MAXPATHLEN 128 / change this value if no panic / define CSLOTSDIFF 0x69696969 define CSSLOTCODEDIRECTORY 0x0 define CSMAGICCODEDIRECTORY 0xfade0c02 / CodeDirectory blob /...

Apple Mac OSX xnu 1228.0 - 'mach-o' Local Kernel Denial of Service (PoC)

/ xnu-macho-dos.c Copyright c 2007 by Apple MACOS X xnu include include include include include include define MAXPATHLEN 128 define LCUNIXTHREAD 0x05 define x86THREADSTATE32 0x01 / osfmk/mach-o/loader.h / struct threadcommand unsigned long cmd; / LCTHREAD or LCUNIXTHREAD / unsigned long cmdsize;...

Apple Mac OSX 10.5.0 (Leopard) - vpnd Remote Denial of Service (PoC)

/ vpnd-leopard-lb-dos.c Copyright c 2007 by Apple MACOS X 10.5.0 leopard vpnd remote DoS POC by mu-b - Fri 9 Nov 2007 - Tested on: Apple MACOS X 10.5.0 leopard vpnd Program received signal EXCARITHMETIC, Arithmetic exception. 0x00004828 in acceptconnections - Private Source Code -DO NOT DISTRIBUT...

Apple QuickTime 7.2/7.3 RSTP Response Universal Exploit (win/osx)

No description provided by source. Copyright C 2007 Subreption LLC. All rights reserved. Visit http://blog.subreption.com for exploit development notes. References: http://www.milw0rm.com/exploits/4648 original Microsoft Windows code...

Apple QuickTime 7.2/7.3 (OSX/Windows) - RSTP Response Universal

Copyright C 2007 Subreption LLC. All rights reserved. Visit http://blog.subreption.com for exploit development notes. References: http://www.milw0rm.com/exploits/4648 original Microsoft Windows code http://www.milw0rm.com/exploits/4651 recent Microsoft Windows exploit From Metasploit:...

Apple QuickTime 7.2/7.3 RSTP Response Universal Exploit (win/osx)

Exploit for multiple platform in category remote exploits ================================================================= Apple QuickTime 7.2/7.3 RSTP Response Universal Exploit win/osx ================================================================= Copyright C 2007 Subreption LLC. All rights...

Apple Mac OSX 10.5.x - Mail Arbitrary Code Execution

Apple Mac OSX 10.5.x - Mail Arbitrary Code Execution source: https://www.securityfocus.com/bid/26510/info Apple Mac OS X is prone to a vulnerability that can allow arbitrary code to run. This issue affects the Mail application when handling email attachments. Attackers can exploit this issue to...

Apple Mac OSX 10.4.x Kernel - 'i386_set_ldt()' Integer Overflow (PoC)

include include include include include include include int mainvoid union ldtentry descs; char buf; ulong pgsz = sysconfSCPAGESIZE; if buf = char mallocpgsz 4 == -1 perror"malloc"; exitEXITFAILURE; memsetbuf, 0x41, pgsz 4; buf = char ulongbuf & pgsz + pgsz; if mprotectchar ulongbuf + pgsz 2,...

Apple Mac OSX 10.4.x Kernel - i386_set_ldt() Integer Overflow (PoC)

Apple Mac OSX 10.4.x Kernel - i386setldt Integer Overflow PoC include include include include include include include int mainvoid union ldtentry descs; char buf; ulong pgsz = sysconfSCPAGESIZE; if buf = char mallocpgsz 4 == -1 perror"malloc"; exitEXITFAILURE; memsetbuf, 0x41, pgsz 4; buf = char...

Mac OSX平台下Opera浏览器的Adobe Flash Player存在未明漏洞

Adobe Flash Player是一款FLASH播放器。 Mac OSX平台下Opera浏览器的Adobe Flash Player存在未明安全问题，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 目前没有详细漏洞细节提供。 Adobe Flash Player 9.0.47.0 Adobe Flash Player 9.0.45.0 Adobe Flash Player 9.0.31.0 Adobe Flash Player 9.0.28.0 Adobe Flash Player 8.0.34.0 Adobe Flash Player 7.0.69.0...

vibrate.rb.txt

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/projects/Framework/ require 'msf/core' module Msf module...

safari_libtiff.rb.txt

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/projects/Framework/ require 'msf/core' module Msf class...

OS X Write and Execute Binary, Bind TCP Stager

Spawn a command shell staged. Listen for a connection This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework BindTcp ------- OSX bind TCP stager. module MetasploitModule CachedSize = 248 include Msf::Payload::Stager def...

Apple iOS Command Shell, Reverse TCP Inline

Connect back to attacker and spawn a command shell This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 152 include Msf::Payload::Single include Msf::Payload::Osx include...

lsa_transnames_heap-osx.rb.txt

$Id: lsatransnamesheap.rb 5059 2007-07-24 23:44:44Z ramon $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Musoo 0.21 - Remote File Inclusion

Musoo 0.21GLOBALSiniarrayEXTLIBPATHRemote File Include D.Script: http://osx.freshmeat.net/redir/musoo/65735/urltgz/musoo-0.21.tar.gz V.Code : requireonce $GLOBALS"iniarray""EXTLIBPATH".'/ In : /msDb.php /modules/MusooTemplateLite.php /modules/SoundImporter.php Exploits:...

Apple Mac OSX 2007-005 - vpnd Local Privilege Escalation

Apple Mac OSX 2007-005 - vpnd Local Privilege Escalation Copyright c 2007 Kevin Finisterre CVE-ID: CVE-2007-0753 - http://docs.info.apple.com/article.html?artnum=305530 https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/4013.tar.gz 05302007-vpenis.tar.gz milw0rm.co...

Apple Mac OSX < 2007-005 - 'vpnd' Local Privilege Escalation

Copyright c 2007 Kevin Finisterre CVE-ID: CVE-2007-0753 - http://docs.info.apple.com/article.html?artnum=305530 https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/4013.tar.gz 05302007-vpenis.tar.gz milw0rm.com 2007-05-30...

Apple Mac OSX 10.4.9 - VPND Local Format String

source: https://www.securityfocus.com/bid/24208/info Apple Mac OS X's VPN service daemon is prone to a format-string vulnerability because it fails to properly sanitize user-supplied input before passing it as the format specifier to a formatted-printing function. Attackers may exploit this issue...

Apple Mac OSX 10.4.8 - pppd Plugin Loading Privilege Escalation

Apple Mac OSX 10.4.8 - pppd Plugin Loading Privilege Escalation Mac OS X = 10.4.8 pppd Plugin Loading Privilege Escalation Exploit https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/3985.tar 05252007-osxpppd.tar milw0rm.com 2007-05-25...