HHCTRLLib (hhctrl.ocx) Remote BOF Exploit (heap spray)

Exploit for windows platform in category remote exploits ====================================================== HHCTRLLib hhctrl.ocx Remote BOF Exploit heap spray ====================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 ...

Advanced File Vault Active-X Heap Spray

// Exploit Title: Advanced File VaulteSellerateControl350.dll Activex Heap Spray 0-day // Date: 08-08-2010 // Author: ThE g0bL!N // Version: 0-day // Tested on: xp sp2 var sCode = unescape"%uE860%u0000%u0000%u815D%u06ED%u0000%u8A00%u1285%u0001%u0800" +...

Advanced File Vault(eSellerateControl350.dll) Activex Heap Spray 0-day

No description provided by source. // Exploit Title: Advanced File VaulteSellerateControl350.dll Activex Heap Spray 0-day // Date: 08-08-2010 // Author: ThE g0bL!N // Version: 0-day // Tested on: xp sp2 html script language="JavaScript" defer var sCode =...

AoA Audio Extractor - Remote ActiveX SEH JIT Spray (ASLR + DEP Bypass)

AoA Audio Extractor - Remote ActiveX SEH JIT Spray ASLR + DEP Bypass Tested on my XPSP3+IE7+/nx=AlwaysOn, should work on Windows 7 with the proper return value. https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/14599.rar DrIDE-AoA-JIT.rar...

RSP MP3 Player OCX ActiveX Buffer Overflow (heap spray)

Exploit for windows platform in category remote exploits ======================================================= RSP MP3 Player OCX ActiveX Buffer Overflow heap spray ======================================================= . . . \ / |/| . | | | ||/ \ .| RSP MP3 Player OCX ActiveX Buffer Overflow...

AoA Audio Extractor - Remote ActiveX SEH JIT Spray (ASLR + DEP Bypass)

Tested on my XPSP3+IE7+/nx=AlwaysOn, should work on Windows 7 with the proper return value. https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/14599.rar DrIDE-AoA-JIT.rar...

Advanced File Vault - 'eSellerateControl350.dll' ActiveX HeapSpray

// Exploit Title: Advanced File VaulteSellerateControl350.dll Activex Heap Spray 0-day // Date: 08-08-2010 // Author: ThE g0bL!N // Version: 0-day // Tested on: xp sp2 var sCode = unescape"%uE860%u0000%u0000%u815D%u06ED%u0000%u8A00%u1285%u0001%u0800" +...

Advanced File Vault(eSellerateControl350.dll) Activex Heap Spray

Exploit for windows platform in category remote exploits ================================================================ Advanced File VaulteSellerateControl350.dll Activex Heap Spray ================================================================ // Exploit Title: Advanced File...

Barcodewiz 3.29 Barcode Active-X Control Heap Spray

// Payload is win32exec - calc.exe shellcode = unescape'%uc931%ue983%ud9de%ud9ee%u2474%u5bf4%u7381%u3d13%u5e46%u8395'+ '%ufceb%uf4e2%uaec1%u951a%u463d%ud0d5%ucd01%u9022%u4745%u1eb1'+ '%u5e72%ucad5%u471d%udcb5%u72b6%u94d5%u77d3%u0c9e%uc291%ue19e'+...

SigPlus Pro 3.74 Buffer Overflow

!-- =================================================================================================== SigPlus Pro v3.74 ActiveX Signature Capture LCDWriteString Remote BoF JIT Spray - aslr/dep bypass Author: mrme - @StevenSeeley Download:...

SigPlus Pro v3.74 ActiveX LCDWriteString() BoF JIT Spray aslr/dep bypass

Exploit for windows platform in category remote exploits ======================================================================== SigPlus Pro v3.74 ActiveX LCDWriteString BoF JIT Spray aslr/dep bypass ======================================================================== !--...

SigPlus Pro 3.74 - ActiveX LCDWriteString() Remote Buffer Overflow JIT Spray (ASLR + DEP Bypass)

SigPlus Pro 3.74 - ActiveX LCDWriteString Remote Buffer Overflow JIT Spray ASLR + DEP Bypass !-- =================================================================================================== SigPlus Pro v3.74 ActiveX Signature Capture LCDWriteString Remote BoF JIT Spray - aslr/dep bypass...

SigPlus Pro 3.74 - ActiveX 'LCDWriteString()' Remote Buffer Overflow JIT Spray (ASLR + DEP Bypass)

!-- =================================================================================================== SigPlus Pro v3.74 ActiveX Signature Capture LCDWriteString Remote BoF JIT Spray - aslr/dep bypass Author: mrme - @StevenSeeley Download:...

Barcodewiz Barcode ActiveX Control 3.29 - Remote HeapSpray (Internet Explorer 6/7)

// Payload is win32exec - calc.exe shellcode = unescape'%uc931%ue983%ud9de%ud9ee%u2474%u5bf4%u7381%u3d13%u5e46%u8395'+ '%ufceb%uf4e2%uaec1%u951a%u463d%ud0d5%ucd01%u9022%u4745%u1eb1'+ '%u5e72%ucad5%u471d%udcb5%u72b6%u94d5%u77d3%u0c9e%uc291%ue19e'+...

Microsoft Internet Explorer - Style getElementsByTagName Memory Corruption (MS09-072) (Metasploit)

$Id: ms09072styleobject.rb 9787 2010-07-12 02:51:50Z egypt $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Safari JS JITed shellcode - exec calc ASLR/DEP bypass

Safari JS JITed shellcode - exec calc ASLR/DEP bypass. Shellcode exploit for windows platform var SPRAY=""; var JIT=" "+ "var y="+ "0x22222222^"+ / START OF OFFSET / "0x22222222^"+ "0x22222222^"+ "0x22222222^"+ "0x22222222^"+ /we don't wanna NULLS in pointer/ "0x22222222^"+ "0x22222222^"+...

Adobe - JBIG2Decode Memory Corruption (Metasploit) (1)

$Id: adobejbig2decode.rb 9525 2010-06-15 07:18:08Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Adobe Flash Player newfucntion Invalid Pointer Use

$Id: adobeflashplayernewfunction.rb 9477 2010-06-10 20:55:17Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Anatomy of the New Adobe Flash Exploit

The exploit that is being used in the attacks against the latest zero-day vulnerability in Adobe Flash is a modified version of a harmless SWF file that is only one byte different from the original file. Researchers have seen the exploit being used in active attacks against the vulnerability in...

Adobe Flash Player "newfunction" Invalid Pointer Use

This module exploits a vulnerability in the DoABC tag handling within versions 9.x and 10.0 of Adobe Flash Player. Adobe Reader and Acrobat are also vulnerable, as are any other applications that may embed Flash player. Arbitrary code execution is achieved by embedding a specially crafted Flash...