7625 matches found
Melange Chat Server 1.10 Remote Buffer Overflow Exploit
No description provided by source. / Proof of Concept for Melange Chat Server 1.10 a lame remote bof exploit by innerphobia [email protected] 12/24/02 Credits go to: - iDefense Labs for the advisory - blink for discovering the bug - Irian for the shellcode With careful calculation it is possible t...
MS Windows Media Services (nsiislog.dll) Remote Exploit
No description provided by source. include stdio.h include winsock2.h include stdlib.h include errno.h include string.h char hostName = NULL; unsigned char shellcode= "\x90\xeb\x03\x5d\xeb\x05\xe8\xf8\xff\xff\xff\x83\xc5\x15\x90\x90"...
BIND 8.2.x (TSIG) Remote Root Stack Overflow Exploit
No description provided by source. / tsig0wn.c Copyright Field Marshal August Wilhelm Anton Count Neithardt von Gneisenau [email protected] The author is not and will not be held responsible for the action of other people using this code. provided for informational purposes only since a greetz...
BSD (telnetd) Remote Root Exploit
No description provided by source. / 7350854 - x86/bsd telnetd remote root exploit TESO CONFIDENTIAL - SOURCE MATERIALS This is unpublished proprietary source code of TESO Security. The contents of these coded instructions, statements and computer programs may not be disclosed to third parties,...
HP-UX 11i - 'LIBC TZ' Enviroment Variable Privilege Escalation
/ HP-UX libc timezone environment overflow exploit ================================================ HP-UX libc contains an exploitable stack overflow in the handling of "TZ" environment variable. The problem occurs due to insufficient bounds checking in the localtimer and related functions. Any...
HP-UX 11i - 'swmodify' Local Stack Overflow / Local Privilege Escalation
/ HP-UX swmodify buffer overflow exploit ======================================= HP-UX 'swmodify' contains an exploitable stack overflow in the handling of command line arguements. Specifically the problem occurs due to insufficent bounds checking in the "-S" optional arguement. 'swmodify' is...
linux/x86 setuid/portbind shellcode 96 bytes
No description provided by source. / $Id: portbind-linux.c,v 1.4 2004/06/02 12:22:30 raptor Exp $ portbind-linux.c - setuid/portbind shellcode for Linux/x86 Copyright c 2003 Marco Ivaldi [email protected] Simple portbind shellcode that bind's a setuid0 shell on port 31337/tcp based on...
linux/x86 stdin re-open and /bin/sh exec shellcode
No description provided by source. / $Id: gets-linux.c,v 1.3 2004/06/02 12:22:30 raptor Exp $ gets-linux.c - stdin re-open shellcode for Linux/x86 Copyright c 2003 Marco Ivaldi [email protected] Local shellcode for stdin re-open and /bin/sh exec. It closes stdin descriptor and re-opens...
linux/x86 setuid(0) and /bin/sh execve() shellcode 30 bytes
No description provided by source. / $Id: setuid-linux.c,v 1.4 2004/06/02 12:22:30 raptor Exp $ setuid-linux.c - setuid/execve shellcode for Linux/x86 Copyright c 2004 Marco Ivaldi [email protected] Short fully-functional setuid0 and /bin/sh execve shellcode. / / setuid0 8049380: 6a 17 push...
SHTTPD 1.34 (POST) Remote Buffer Overflow Exploit
No description provided by source. !/usr/bin/perl -w SHTTPD Buffer Overflow POST Tested on SHTTPD 1.34 WinXP SP1 Hebrew http://shttpd.sourceforge.net Codded By SkOd, 05/10/2006 ISRAEL details: EAX 00000194 , ECX 009EBCA8 , EDX 00BC488C EBX 00000004 , EIP 41414141 , EBP 41414141 ESI 00BC4358 , EDI...
linux/x86 execve() Diassembly Obfuscation Shellcode 32 bytes
No description provided by source. / execve shellcode with 'fuck up disasm' ability, 32 bytes long by BaCkSpAcE sinisa86atgmaildotcom BitByterz Labs 2006 http://www.bitbyterz.org ; ; shellcode.asm ; fupdisasm: db 0x68 ; opcode for PUSH DW instruction db 0xcd ; crypt+1, opcode for INT instruction ...
linux/x86 portbind (define your own port) 84 bytes
No description provided by source. / Shellcode - portbind 84 bytes Copyright c 2002 Giuseppe Gottardi 'oveRet' [email protected] All rights reserved. Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:...
linux/x86 re-use of /bin/sh string in .rodata shellcode 16 bytes
No description provided by source. / $Id: reusage-linux.c,v 1.3 2004/01/30 20:08:46 raptor Exp $ reusage-linux.c - re-use of "/bin/sh" string in .rodata Copyright c 2003 Marco Ivaldi [email protected] Short local shellcode for /bin/sh execve. It re-uses the "/bin/sh" string stored in the...
linux/x86 HTTP/1.x GET, Downloads and execve 111 bytes+
linux/x86 HTTP/1.x GET, Downloads and execve 111 bytes+. Shellcode exploit for linx86 platform / linux/x86 - HTTP/1.x GET, Downloads and execve - 111 bytes+ This shellcode allows you to download a ELF executable straight off a standard HTTP server and launch it. It will saved locally it into a...
linux/x86 HTTP/1.x GET, Downloads and execve() 111 bytes+
Exploit for linux/x86 platform in category shellcode ========================================================= linux/x86 HTTP/1.x GET, Downloads and execve 111 bytes+ ========================================================= / linux/x86 - HTTP/1.x GET, Downloads and execve - 111 bytes+ This...
Nvidia Graphics Driver 8774 - Local Buffer Overflow
/ Copyright c 2005 Matthieu Herrb Copyright c 2006 Derek Abdine, Marc Bevand Permission to use, copy, modify, and distribute this software for any purpose with or without fee is hereby granted, provided that the above copyright notice and this permission notice appear in all copies. THE SOFTWARE ...
BulletProof FTP Client 2.45 Remote Buffer Overflow Exploit (PoC)
Exploit for unknown platform in category remote exploits ================================================================ BulletProof FTP Client 2.45 Remote Buffer Overflow Exploit PoC ================================================================ !/usr/bin/python BulletProof FTP Client V2.45...
Computer Associates Products Message Engine RPC Server - Multiple Buffer Overflow Vulnerabilities (2)
source: https://www.securityfocus.com/bid/20365/info Multiple Computer Associates products are prone to multiple buffer-overflow vulnerabilities because the applications using an affected library fail to properly bounds-check user-supplied input before copying it to an insufficiently sized memory...
The concept of the rookie version of Virus writing guide there was a sense of-vulnerability warning-the black bar safety net
The first issue: the JMP ESP address the versatility issue. F. EN, in two articles have emphasized the JMP ESP opcode in the memory of the address, it version is dependent, and emphasized one more chance to put on two versions of the return code can be one more chances of success. Start your own...
ie_vml_pl.txt
!/usr/bin/perl Microsoft Internet Explorer VML Remote Buffer Overflow Windows XP SP0-SP1 + Windows 2000 SP4 Author: Trirat Puttaraksa Kira http://sf-freedom.blogspot.com For educational purpose only Note: This exploit is modified from Shirkdog's PoC http://www.milw0rm.com/exploits/2400 I exploit...