FathFTP 1.7 - ActiveX Buffer Overflow

' Exploit Title: FathFTP 1.7 ActiveX Buffer Overflow ' Date: July 7, 2010 ' Author: Blake ' Software Link: http://www.softpedia.com/get/Programming/Components-Libraries/FathFTP.shtml ' Version: 1.7 ' Tested on: Windows XP SP3 / IE6 ' Note: The GetFromURL member is also vulnerable to a stack...

EvoCam Web Server OSX ROP Remote Exploit (Snow Leopard)

No description provided by source. !/usr/bin/python EvoCam Web Server OSX 3.6.6 and 3.6.7 import socket import struct SHELL = "\xdb\xd2\x29\xc9\xb1\x27\xbf\xb1\xd5\xb6\xd3\xd9\x74\x24" "\xf4\x5a\x83\xea\xfc\x31\x7a\x14\x03\x7a\xa5\x37\x43\xe2"...

HP NNM 7.53 ovwebsnmpsrv.exe Buffer Overflow

Exploit Title: HP NNM 7.53 ovwebsnmpsrv.exe Buffer Overflow SEH Date: 07/06/2010 Author: bitform Software Link: hp.com Version: 7.53 Tested on: Windows XP SP2 CVE: CVE-2010-1964 Exploit: C:\Program Files\HP OpenView\www\bin\ovwebsnmpsrv.exe -dump...

ARM Polymorphic - execve"/bin/sh", "/bin/sh", NULL Shellcode Generator

ARM Polymorphic execve"/bin/sh", "/bin/sh", NULL Shellcode Generator. Shellcode exploit for arm platform / Title: Generator polymorphic shellcode on ARM architecture Date: 2010-07-07 Tested on: ARM926EJ-S rev 5 v5l Author: Jonathan Salwan Web: http://shell-storm.org |...

HP NNM 7.53 ovwebsnmpsrv.exe Buffer Overflow (SEH)

Exploit for windows platform in category local exploits ================================================== HP NNM 7.53 ovwebsnmpsrv.exe Buffer Overflow SEH ================================================== Exploit Title: HP NNM 7.53 ovwebsnmpsrv.exe Buffer Overflow SEH Date: 07/06/2010 Author:...

HP OpenView Network Node Manager (OV NNM) 7.53 - ovwebsnmpsrv.exe Local Buffer Overflow (SEH)

HP OpenView Network Node Manager OV NNM 7.53 - ovwebsnmpsrv.exe Local Buffer Overflow SEH Exploit Title: HP NNM 7.53 ovwebsnmpsrv.exe Buffer Overflow SEH Date: 07/06/2010 Author: bitform Software Link: hp.com Version: 7.53 Tested on: Windows XP SP2 CVE: CVE-2010-1964 Exploit: C:\Program Files\HP...

HP OpenView Network Node Manager (OV NNM) 7.53 - 'ovwebsnmpsrv.exe' Local Buffer Overflow (SEH)

Exploit Title: HP NNM 7.53 ovwebsnmpsrv.exe Buffer Overflow SEH Date: 07/06/2010 Author: bitform Software Link: hp.com Version: 7.53 Tested on: Windows XP SP2 CVE: CVE-2010-1964 Exploit: C:\Program Files\HP OpenView\www\bin\ovwebsnmpsrv.exe -dump...

Apple Mac OSX EvoCam Web Server (Snow Leopard) - ROP Remote Overflow

Apple Mac OSX EvoCam Web Server Snow Leopard - ROP Remote Overflow !/usr/bin/python EvoCam Web Server OSX 3.6.6 and 3.6.7 import socket import struct SHELL = "\xdb\xd2\x29\xc9\xb1\x27\xbf\xb1\xd5\xb6\xd3\xd9\x74\x24" "\xf4\x5a\x83\xea\xfc\x31\x7a\x14\x03\x7a\xa5\x37\x43\xe2"...

Apple Mac OSX EvoCam Web Server (Snow Leopard) - ROP Remote Overflow

!/usr/bin/python EvoCam Web Server OSX 3.6.6 and 3.6.7 import socket import struct SHELL = "\xdb\xd2\x29\xc9\xb1\x27\xbf\xb1\xd5\xb6\xd3\xd9\x74\x24" "\xf4\x5a\x83\xea\xfc\x31\x7a\x14\x03\x7a\xa5\x37\x43\xe2" "\x05\x2e\xfc\x45\xd5\x11\xad\x17\x65\xf0\x80\x18\x8a\x71"...

nc -lp 31337 -e /bin//sh polymorphic linux shellcode 91 bytes

91 bytes nc -lp 31337 -e /bin//sh polymorphic linux shellcode .. Shellcode exploit for linux platform / Title : nc -lp 31337 -e /bin//sh polymorphic linux shellcode . Name : 91 bytes nc -lp 31337 -e /bin//sh polymorphic linux shellcode . Date : Mon Jul 5 16:58:50 WIT 2010 Author : gunslinger Web ...

linux/x86 bind port to 6678 XOR encoded polymorphic shellcode 125 bytes

Exploit for linux/x86 platform in category shellcode ======================================================================= linux/x86 bind port to 6678 XOR encoded polymorphic shellcode 125 bytes ======================================================================= /...

linux/x86 setreuid(0,0) execve("/bin/sh",NULL,NULL) encoded 62 bytes

Exploit for linux/x86 platform in category shellcode ======================================================================== linux/x86 setreuid0,0 execve"/bin/sh",NULL,NULL XOR encoded 62 bytes ======================================================================== /...

Drop suid shell root in /tmp/.hiddenshell Linux Polymorphic Shellcode 161 bytes

161 bytes Drop suid shell root in /tmp/.hiddenshell Linux Polymorphic Shellcode. Shellcode exploit for linux platform / Author : gunslinger Web : http://devilzc0de.org blog : http://gunslingerc0de.wordpress.com tested on : linux debian special thanks to : r0073r inj3ct0r.com, d3hydr8 darkc0de.com...

linux/x86 nc -lp 31337 -e /bin/sh polymorphic shellcode 91 bytes

Exploit for linux/x86 platform in category shellcode ================================================================ linux/x86 nc -lp 31337 -e /bin/sh polymorphic shellcode 91 bytes ================================================================ /...

setreuid0,0 execve"/bin/sh",NULL,NULL XOR Encoded Linux Shellcode 62 bytes

62 bytes setreuid0,0 execve"/bin/sh",NULL,NULL XOR Encoded Linux Shellcode. Shellcode exploit for linux platform / Author : gunslinger Web : http://devilzc0de.org blog : http://gunslingerc0de.wordpress.com tested on : linux debian special thanks to : r0073r inj3ct0r.com, d3hydr8 darkc0de.com, ty...

linux/x86 polymorphic Drop suid shell root /tmp/.hiddenshell 161 bytes

Exploit for linux/x86 platform in category shellcode ====================================================================== linux/x86 polymorphic Drop suid shell root /tmp/.hiddenshell 161 bytes ====================================================================== /...

linux/x86 lynx polymorphic shellcode 84 bytes

Exploit for linux/x86 platform in category shellcode ============================================= linux/x86 lynx polymorphic shellcode 84 bytes ============================================= / 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, ...

125 bind port to 6778 XOR encoded polymorphic linux shellcode

125 bind port to 6778 XOR encoded polymorphic linux shellcode .. Shellcode exploit for linux platform / Title : bind port to 6678 XOR encoded polymorphic linux shellcode . Name : 125 bind port to 6678 XOR encoded polymorphic linux shellcode . Date : Tue Jul 6 01:52:33 WIT 2010 Author : gunslinger...

EasyFTP Server LIST Command Stack Buffer Overflow

This module exploits a stack-based buffer overflow in EasyFTP Server 1.7.0.11. credit goes to Karn Ganeshan. NOTE: Although, this is likely to exploit the same vulnerability as the 'easyftpcwdfixret' exploit, it uses a slightly different vector. Module Options msf use...

linux/x86 bind [email protected] 97 bytes

Exploit for linux/x86 platform in category shellcode ================================ linux/x86 bind email protected 97 bytes ================================ include include / 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ ...