dislocate 1.3 - Local i386

dislocate 1.3 - Local i386 / MasterSecuritY dislocate.c - Local i386 exploit in v1.3 Updated versions of this exploit and the corresponding advisory will be made available at: ftp://maxx.via.ecp.fr/dislocate/ This program is free software; you can redistribute it and/or modify it under the terms ...

dislocate - Local i386 exploit in v1.3

Exploit for linux platform in category local exploits ====================================== dislocate - Local i386 exploit in v1.3 ====================================== / MasterSecuritY dislocate.c - Local i386 exploit in v1.3 Updated versions of this exploit and the corresponding advisory will...

dislocate 1.3 - Local i386

/ MasterSecuritY dislocate.c - Local i386 exploit in v1.3 Updated versions of this exploit and the corresponding advisory will be made available at: ftp://maxx.via.ecp.fr/dislocate/ This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public...

HP-UX FTPD - Remote Buffer Overflow

/ theoretical exploit for hpux ftpd vulnerability / / not tested anywhere, needs tweaking / / c 2000 by babcia padlina ltd. / include include define NOPS 100 define BUFSIZE 1024 char shellcode = / HP-UX shellcode / "\x34\x16\x05\x06\x96\xd6\x05\x34\x20\x20\x08\x01\xe4\x20\xe0\x08\x0b"...

Solaris sadmind Remote Buffer Overflow Exploit

Exploit for solaris platform in category remote exploits ============================================== Solaris sadmind Remote Buffer Overflow Exploit ============================================== /\ Super Solaris sadmin Exploit by optyx based on sadminsparc. and sadminx86.c by Cheez Whiz /...

phf buffer overflow exploit for Linux-x86

Exploit for cgi platform in category web applications ========================================= phf buffer overflow exploit for Linux-x86 ========================================= / | phx.c -- phf buffer overflow exploit for Linux-ix86 | Copyright c 2000 by proton. All rights reserved. | | This...

Solaris sadmind - Remote Buffer Overflow

/\ Super Solaris sadmin Exploit by optyx based on sadminsparc. and sadminx86.c by Cheez Whiz / include include include include include char shellsparc = "\x20\xbf\xff\xff\x20\xbf\xff\xff\x7f\xff\xff\xff" "\x90\x03\xe0\x5c\x92\x22\x20\x10\x94\x1b\xc0\x0f"...

HP-UX FTPD - Remote Buffer Overflow

HP-UX FTPD - Remote Buffer Overflow / theoretical exploit for hpux ftpd vulnerability / / not tested anywhere, needs tweaking / / c 2000 by babcia padlina ltd. / include include define NOPS 100 define BUFSIZE 1024 char shellcode = / HP-UX shellcode /...

INND/NNRP < 1.6.X Remote Root Overflow Exploit

Exploit for linux platform in category remote exploits ============================================== INND/NNRP include include include define DEFAULTOFFSET 792 define BUFFERSIZE 796 define ADDRS 80 define RET 0xefbf95e4 define NOP "\x08\x21\x02\x80" int mainargc, argv int argc; char argv; char...

GLIBC - binsu Local Privilege Escalation

GLIBC - binsu Local Privilege Escalation / Working exploit for glibc executing /bin/su To exploit this i have used a technique that overwrites the .dtors section of /bin/su program with the address of the shellcode, so, the program executes it when main returns or exit is called Thanks a lot to...

GLIBC (via /bin/su) Local Root Exploit

Exploit for linux platform in category local exploits ====================================== GLIBC via /bin/su Local Root Exploit ====================================== / Working exploit for glibc executing /bin/su To exploit this i have used a technique that overwrites the .dtors section of...

INNDNNRP 1.6.x - Remote Overflow

INNDNNRP 1.6.x - Remote Overflow / INND/NNRP remote root overflow / include include include include define DEFAULTOFFSET 792 define BUFFERSIZE 796 define ADDRS 80 define RET 0xefbf95e4 define NOP "\x08\x21\x02\x80" int mainargc, argv int argc; char argv; char buff = NULL, ptr = NULL; ulong addrpt...

BFTPd vsprintf() Format Strings Exploit

Exploit for linux platform in category remote exploits ======================================= BFTPd vsprintf Format Strings Exploit ======================================= Copyright c 2000 - Security.is The following material may be freely redistributed, provided that the code or the disclaimer...

BFTPd - 'vsprintf()' Format Strings

/ Copyright c 2000 - Security.is The following material may be freely redistributed, provided that the code or the disclaimer have not been partly removed, altered or modified in any way. The material is the property of security.is. You are allowed to adopt the represented code in your programs,...

HP-UX 11.0 pppd Stack Buffer Overflow Exploit

Exploit for hp-ux platform in category local exploits ============================================= HP-UX 11.0 pppd Stack Buffer Overflow Exploit ============================================= / Copyright c 2000 ADM / / All Rights Reserved / / THIS IS UNPUBLISHED PROPRIETARY SOURCE CODE OF ADM / /...

Oracle 8.x - cmctl Buffer Overflow

/ source: https://www.securityfocus.com/bid/1968/info cmctl is the Connection Control Manager, part of the Oracle 8i installation. A vulnerability exists that can allow elevation of privileges. The problem occurs in the way cmctl handles the user-supplied command line arguments. The string...

Solaris/SPARC 2.7 / 7 locale - Format String

/ Exploit for the locale format string vulnerability in Solaris/SPARC 2.7 / 7 Based on the exploit by Warning3 For additional information see http://www.phreedom.org/solar/localesol.txt By Solar Eclipse Assistant Editor, Phreedom Magazine http://www.phreedom.org 10 Oct 2000 / include include defi...

HP-UX 11.0 - pppd Local Stack Buffer Overflow

HP-UX 11.0 - pppd Local Stack Buffer Overflow / Copyright c 2000 ADM / / All Rights Reserved / / THIS IS UNPUBLISHED PROPRIETARY SOURCE CODE OF ADM / / The copyright notice above does not evidence any / / actual or intended publication of such source code. / / / / Title: HP-UX pppd / / Tested...

Oracle 8.x - cmctl Buffer Overflow

Oracle 8.x - cmctl Buffer Overflow / source: https://www.securityfocus.com/bid/1968/info cmctl is the Connection Control Manager, part of the Oracle 8i installation. A vulnerability exists that can allow elevation of privileges. The problem occurs in the way cmctl handles the user-supplied comman...

SolarisSPARC 2.7 7 locale - Format String

SolarisSPARC 2.7 7 locale - Format String / Exploit for the locale format string vulnerability in Solaris/SPARC 2.7 / 7 Based on the exploit by Warning3 For additional information see http://www.phreedom.org/solar/localesol.txt By Solar Eclipse Assistant Editor, Phreedom Magazine...