UFO: Alien Invasion v2.2.1 BoF Exploit (Win7 ASLR and DEP Bypass)

Exploit for windows platform in category remote exploits ================================================================= UFO: Alien Invasion v2.2.1 BoF Exploit Win7 ASLR and DEP Bypass ================================================================= !/usr/bin/python Exploit Title: UFO: Alien...

UFO: Alien Invasion 2.2.1 (Windows 7) - Remote Buffer Overflow (ASLR + DEP Bypass)

!/usr/bin/python Exploit Title: UFO: Alien Invasion v2.2.1 BoF Exploit Win7 ASLR and DEP Bypass Date: July 5, 2010 Author: Node Software Link: http://sourceforge.net/projects/ufoai/files/UFOAI%202.x/2.2.1/ufoai-2.2.1-win32.exe/download Version: "UFO: Alien Invasion 2.2.1 x86 Apr 28 2008 Win32...

linux/ARM - Polymorphic execve("/bin/sh", ["/bin/sh"], NULL); 78 bytes

Exploit for linux/x86 platform in category shellcode ========================================================================================= linux/ARM - Polymorphic execve"/bin/sh", "/bin/sh", NULL; - XOR 88 encoded - 78 bytes...

SasCam WebCam Server v2.6.5 ActiveX SEH Overwrite

Exploit for windows platform in category remote exploits ================================================= SasCam WebCam Server v2.6.5 ActiveX SEH Overwrite ================================================= 'SEH Overwrite exploited by Blake 'Original EIP method by callAX 'Tested on XP SP3/IE7 in...

ASX To MP3 Converter 3.1.2.1 Buffer Overflow

Exploit Title: ASX to MP3 Converter Version 3.1.2.1 2010-03-30 Local Buffer Overflow SEH Date: nhar essabt 3-7-10 Author: MadjiX Software Link: http://www.mini-stream.net/downloads/ASXtoMP3Converter.exe Version: 3.1.2.1 ‎2010-03-30 Tested on: xp sp3 my $shellcode=...

SasCam WebCam Server 2.6.5 - ActiveX Overwrite (SEH)

SasCam WebCam Server 2.6.5 - ActiveX Overwrite SEH 'SEH Overwrite exploited by Blake 'Original EIP method by callAX 'Tested on XP SP3/IE7 in virtualbox '$ nc 192.168.1.155 4444 'Microsoft Windows XP Version 5.1.2600 'C Copyright 1985-2001 Microsoft Corp. ' 'C:\Documents and Settings\blake\Desktop...

Sun Java System Web Server Stack Overflow

/ Sun Java Web Server Exploit Tested on: Sun Java Web Server 7.0 update 7 - XP SP3 Ref: CVE-2010-0361 This vulnerability was identified by Evgeny Legerov Author: Dominic Chell Date: 23/01/2010 / include "stdafx.h" include include include include include "winsock2.h" pragma commentlib, "ws232"...

Mediacoder 0.7.3.4682 - Universal Buffer Overflow (SEH)

Mediacoder 0.7.3.4682 - Universal Buffer Overflow SEH Exploit Title : Mediacoder v0.7.3.4682 universal buffer overflow SEH tested on windows xp SP 3 FR download : http://www.dodownload.com/video+multimedia/play+video/mediacoder.html Author: MadjiX Dz8 HotmaiL cOm Greets:Bibi-info , His0k4 where a...

Mini-stream RM-MP3 Converter 3.1.2.1 - .m3u Local Buffer Overflow

Mini-stream RM-MP3 Converter 3.1.2.1 - .m3u Local Buffer Overflow By Madjix Dz8athotmaildotcom Greets: myself for find the bug : Exploit-DB Notes: 000DBF98 41414141 AAAA 000DBF9C 41414141 AAAA 000DBFA0 41414141 AAAA 000DBFA4 41414141 AAAA Pointer to next SEH record 000DBFA8 41414141 AAAA SE handl...

Serenity Audio Player 3.2.3 (SEH) Buffer Overflow

Exploit for windows platform in category local exploits ================================================= Serenity Audio Player 3.2.3 SEH Buffer Overflow ================================================= Serenity Audio Player 3.2.3 SEH Buffer Overflow Download :...

Mediacoder v0.7.3.4682 Universal Buffer Overflow (SEH)

Exploit for windows platform in category local exploits ====================================================== Mediacoder v0.7.3.4682 Universal Buffer Overflow SEH ====================================================== Exploit Title : Mediacoder v0.7.3.4682 universal buffer overflow SEH tested on...

Mini-stream RM-MP3 Converter 3.1.2.1 - '.m3u' Local Buffer Overflow

By Madjix Dz8athotmaildotcom Greets: myself for find the bug : Exploit-DB Notes: 000DBF98 41414141 AAAA 000DBF9C 41414141 AAAA 000DBFA0 41414141 AAAA 000DBFA4 41414141 AAAA Pointer to next SEH record 000DBFA8 41414141 AAAA SE handler 000DBFAC FFFFFFFF ÿÿÿÿ 000DBFB0 7C87F317 ó‡| kernel32.7C87F317...

Mini-Stream RM-MP3 Converter v3.1.2.1 Buffer Overflow Exploit (SEH)

Exploit for windows platform in category local exploits =================================================================== Mini-Stream RM-MP3 Converter v3.1.2.1 Buffer Overflow Exploit SEH ===================================================================...

PDF Files Containing Embedded Adobe Flash Movies (CVE-2010-1297; CVE-2010-2168; CVE-2010-2201)

Multiple vulnerabilities have been reported in Adobe Reader and Acrobat when handling PDF files that contain embedded Adobe Flash movies. A remote attacker could trigger these flaws via a specially crafted PDF file. Successful exploitation will create a denial of service condition, causing the...

Linux/ARM - Disable ASLR Security - 102 bytes

Linux/ARM - Disable ASLR Security - 102 bytes. Shellcode exploit for linux platform / Title: Linux/ARM - Disable ASLR Security - 102 bytes Date: 2010-06-20 Tested: Linux ARM9 2.6.28-6-versatile Author: Jonathan Salwan Web: http://shell-storm.org | http://twitter.com/jonathansalwan ! Database of...

linux/ARM - Disable ASLR Security - 102 bytes

Exploit for linux/x86 platform in category shellcode ============================================= linux/ARM - Disable ASLR Security - 102 bytes ============================================= / Title: Linux/ARM - Disable ASLR Security - 102 bytes Date: 2010-06-20 Tested: Linux ARM9...

Linux/ARM - polymorphic chmod"/etc/shadow", 0777 84 Bytes

Linux/ARM - polymorphic chmod"/etc/shadow", 0777 - 84 Bytes. Shellcode exploit for linux platform / | Title: Linux/ARM - polymorphic chmod"/etc/shadow", 0777 - 84 Bytes | Type: Shellcode | Author: Florian Gaultier | Platform: Linux ARM ARM926EJ-S rev 5 v51 | + http://www.shell-storm.org / include...

UFO - Alien Invasion 2.2.1 Remote Code Execution

!/usr/bin/python UFO: Alien Invasion v2.2.1 IRC Client Remote Code Execution - MacOSX Author: dookie Windows PoC: Jason Geffner http://www.exploit-db.com/exploits/14013 import sys, socket, struct msfpayload osx/x86/vforkshellbindtcp R | msfencode -b '\x00\x0a\x0d' -t c shellcode = "\x90" 16...

Linux/ARM - setuid0 & kill-1, SIGKILL 28 bytes

Linux/ARM - setuid0 & kill-1, SIGKILL - 28 bytes. Shellcode exploit for linux platform / Title: Linux/ARM - setuid0 & kill-1, SIGKILL - 28 bytes Kill all processes Date: 2010-06-29 Tested: ARM926EJ-S rev 5 v5l Author: Jonathan Salwan Web: http://shell-storm.org | http://twitter.com/jonathansalwan...

Sysax Multi Server Add Administrator

Assuming the server is running as admin the overflow can actually be used to execute arbitrary code. In our example we spawn an instance of cmd.exe and create a new admin, Billyboy, with a password of woot. This has been tested with Windows XP SP2. +-------- Start Exploit --------+ import paramik...