Kali Linux 2.0 Released — Download Most Powerful Penetration Testing Platform

Offensive Security, the creators of Swiss army knife for Security researchers, Penetration testers and Hackers have finally released the much awaited and most powerful version of Kali Linux 2.0. Kali Linux 2.0 Codename ‘Kali Sana’, an open-source penetration testing platform brings hundreds of...

T-Mobile Internet Manager - Contact Name Crash (PoC)

!/usr/bin/python coding: utf-8 + Author: SATHISH ARTHAR + Exploit Title: T-Mobile Internet Manager Memory Corruption PoC + Date: 30-07-2015 + Category: DoS/PoC + Tested on: WinXp/Windows7/windows8 + Vendor: https://www.t-mobile.de/meinhandy/1,25412,19349-,00.html + Download:...

Full Player 8.2.1 - Memory Corruption (PoC)

Full Player 8.2.1 - Memory Corruption PoC !/usr/bin/python + Author: SATHISH ARTHAR + Exploit Title: Full Player 8.2.1 Memory Corruption PoC + Date: 13-07-2015 + Category: DoS/PoC + Tested on: WinXp/Windows 7 + Vendor: http://www.fplayer.net + Download: http://www.fplayer.net/fullplayer.exe +...

HansoPlayer 3.4.0 Memory Corruption Exploit

Exploit for windows platform in category dos / poc !/usr/bin/python + Author: Rajganesh Raj Pandurangan + Exploit Title: HansoPlayer 3.4.0 Memory Corruption PoC + Date: 06-17-2015 + Category: DoS/PoC + Tested on: WinXp/Windows 7 + Vendor: http://www.hansotools.com + Download:...

WinylPlayer 3.0.3 Memory Corruption Exploit

WinylPlayer version 3.0.3 memory corruption proof of concept exploit. !/usr/bin/python + Author: Rajganesh Raj Pandurangan + Exploit Title: WinylPlayer 3.0.3 Memory Corruption PoC + Date: 06-17-2015 + Category: DoS/PoC + Tested on: WinXp/Windows 7 + Vendor: http://vinylsoft.com/ + Download:...

HansoPlayer 3.4.0 Memory Corruption

!/usr/bin/python + Author: Rajganesh Raj Pandurangan + Exploit Title: HansoPlayer 3.4.0 Memory Corruption PoC + Date: 06-17-2015 + Category: DoS/PoC + Tested on: WinXp/Windows 7 + Vendor: http://www.hansotools.com + Download: http://www.hansotools.com/downloads/hanso-player-setup.exe + Sites:...

HansoPlayer 3.4.0 - Memory Corruption (PoC)

HansoPlayer 3.4.0 - Memory Corruption PoC !/usr/bin/python + Author: Rajganesh Raj Pandurangan + Exploit Title: HansoPlayer 3.4.0 Memory Corruption PoC + Date: 06-17-2015 + Category: DoS/PoC + Tested on: WinXp/Windows 7 + Vendor: http://www.hansotools.com + Download:...

FinePlayer 2.20 - .mp4 Crash (PoC)

FinePlayer 2.20 - .mp4 Crash PoC !/usr/bin/python + Author: SATHISH ARTHAR + Exploit Title: FinePlayer - 2.20 Memory Corruption PoC + Date: 16-06-2015 + Category: DoS/PoC + Tested on: WinXp/Windows 7 + Vendor: http://www.gitashare.com + Download: http://www.gitashare.com/downloads/fineplayer220.z...

XtMediaPlayer 0.93 - .wav Crash (PoC)

XtMediaPlayer 0.93 - .wav Crash PoC !/usr/bin/python + Author: SATHISH ARTHAR + Exploit Title: XtMediaPlayer - 0.93 Memory Corruption PoC + Date: 16-06-2015 + Category: DoS/PoC + Tested on: WinXp/Windows 7 + Vendor:...

XtMediaPlayer 0.93 (.wav) - Crash PoC

Exploit for windows platform in category dos / poc !/usr/bin/python + Author: SATHISH ARTHAR + Exploit Title: XtMediaPlayer - 0.93 Memory Corruption PoC + Date: 16-06-2015 + Category: DoS/PoC + Tested on: WinXp/Windows 7 + Vendor:...

Microsoft Windows 8.08.1 (x64) - TrackPopupMenu Local Privilege Escalation (MS14-058)

Microsoft Windows 8.08.1 x64 - TrackPopupMenu Local Privilege Escalation MS14-058 Windows 8.0 - 8.1 x64 TrackPopupMenu Privilege Escalation MS14-058 CVE-2014-4113 Privilege Escalation http://www.offensive-security.com Thx to Moritz Jodeit for the beautiful writeup...

Microsoft Windows 8.0/8.1 (x64) - 'TrackPopupMenu' Local Privilege Escalation (MS14-058)

Windows 8.0 - 8.1 x64 TrackPopupMenu Privilege Escalation MS14-058 CVE-2014-4113 Privilege Escalation http://www.offensive-security.com Thx to Moritz Jodeit for the beautiful writeup http://www.exploit-db.com/docs/35152.pdf Target OS Windows 8.0 - 8.1 x64 Author: Matteo Memelli ryujin...

Windows-NDPROXY-SYSTEM

Original crash ... null pointer dereference Access violation - code c0000005 !!! second chance !!! 00000038 ?? ??? NDPROXY Local SYSTEM privilege escalation from ctypes import from ctypes.wintypes import import os, sys kernel32 = windll.kernel32 ntdll = windll.ntdll GENERICREAD = 0x80000000...

Symantec Endpoint Protection 11.x, 12.x - Kernel Pool Overflow

No description provided by source. Symantec Endpoint Protection 11.x, 12.x - Kernel Pool Overflow http://www.offensive-security.com Tested on Windows 7 http://www.offensive-security.com/vulndev/symantec-endpoint-protection-0day/ Authors: Matteo 'ryujin' Memelli & Alexandru 'sickness' Uifalvi at...

Symantec Endpoint Protection 11.x/12.x - Kernel Pool Overflow / Local Privilege Escalation

Symantec Endpoint Protection 11.x, 12.x - Kernel Pool Overflow http://www.offensive-security.com Tested on Windows 7 http://www.offensive-security.com/vulndev/symantec-endpoint-protection-0day/ Authors: Matteo 'ryujin' Memelli & Alexandru 'sickness' Uifalvi offensive-security.com from ctypes impo...

Quick TFTP Pro 2.1 - Remote SEH Overflow Exploit (0day)

No description provided by source. !/usr/bin/python Quick TFTP Pro 2.1 SEH Overflow 0day Tested on Windows XP SP2. Coded by Mati Aharoni muts..at..offensive-security.com http://www.offensive-security.com/0day/quick-tftp-poc.py.txt bt quickftp.py Quick TFTP Pro 2.1 SEH Overflow 0day...

eM Client e-mail client 5.0.18025.0 - Stored XSS vulnerability

No description provided by source. !/usr/bin/python ''' Author: loneferret of Offensive Security Date: 22-08-2013 Product: eM Client for Windows Version: 5.0.18025.0 previous versions and other platforms may be vulnerable Vendor Site: http://www.emclient.com/ Software Download:...

Internet Explorer 8 Bypass

function strtointstr return str.charCodeAt10x10000 + str.charCodeAt0; var free = "EEEE"; while free.length 500 free += free; var string1 = "AAAA"; while string1.length 500 string1 += string1; var string2 = "BBBB"; while string2.length 500 string2 += string2; var fr = new Array; var al = new Array...

Wordpress Plugin ThreeWP Email Reflector 1.13 - Stored XSS

No description provided by source. !/usr/bin/python ''' Author: loneferret of Offensive Security Product: ThreeWP Email Reflector Version: 1.13 Plugin Site: http://mindreantre.se/ Software Download: http://wordpress.org/extend/plugins/threewp-email-reflector/installation/ Timeline: 29 May 2012:...

Solarwinds Storage Manager 5.1.0 - Remote SYSTEM SQL Injection Exploit

No description provided by source. !/usr/bin/python Exploit Title: Solarwinds Storage Manager 5.1.0 Remote SYSTEM SQL Injection Exploit Date: May 2nd 2012 Author: muts Version: SolarWinds Storage Manager 5.1.0 Tested on: Windows 2003 Archive Url :...