1366 matches found
Gumblar: The malware that is sweeping the nation
The latest large-scale malware outbreak to hit the Web, known variously as Gumblar and Geno and Martuz, is a multi-stage attack that not only infects compromised machines with a number of separate pieces of malware but also has the ability to steal credentials and block the victim from taking...
Mac OS X Inject Mach-O Bundle, Reverse TCP Stager
Inject a custom Mach-O bundle into the exploited process. Connect, read length, read buffer, execute This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework ReverseTcp ------- Mac OS X x86 Reverse TCP stager. module...
Linux/x86 - Socket-proxy Shellcode (372 bytes) (Generator)
Linux/x86 - Socket-proxy Shellcode 372 bytes Generator. Shellcode exploit for Generator platform /--------------------------------------------------------------------------- 372 byte socket-proxy shellcode by Russell Sanford - [email protected]...
Oracle Database Local Untrusted Library Path Vulnerability
Oracle Database Local Untrusted Library Path Vulnerability ---------------------------------------------------------- The Oracle July 2008 Critical Patch Update fixes a vulnerability which allows a user in the OINSTALL/DBA group to scalate privileges to root. Scalating Privileges from "oracle" to...
OS X Write and Execute Binary, Bind TCP Stager
Spawn a command shell staged. Listen for a connection This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework BindTcp ------- OSX bind TCP stager. module MetasploitModule CachedSize = 248 include Msf::Payload::Stager def...
security flaw
Mozilla Firefox before 2.0.0.5 does not prevent use of document.write to replace an IFRAME 1 during the load stage or 2 in the case of an about:blank frame, which allows remote attackers to display arbitrary HTML or execute certain JavaScript code, as demonstrated by code that intercepts keystrok...
PPPoE authentication and use-vulnerability and early warning-the black bar safety net
This article is based on the Black anti-2 0 0 5, No. 8, issue of the PPPoE authentication risks with the use of the original author: the knife）rewritten, or republished, column reader Mo laugh to. One, Foreword In recent years, Internet data traffic has developed rapidly, broadband users showed...
apache mod rewrite exploit (win32)
No description provided by source. / apache mod rewrite exploit win32 By: fabio/b0x oc-192, old CoTS member Vuln details: http://www.securityfocus.com/archive/1/archive/1/443870/100/0/threaded Code: bind shell on port 4445, tested on apache 2.0.58 with modrewrite windows 2003...
apache2058-rewrite.txt
/ apache mod rewrite exploit win32 By: fabio/b0x oc-192, old CoTS member Vuln details: http://www.securityfocus.com/archive/1/archive/1/443870/100/0/threaded Code: bind shell on port 4445, tested on apache 2.0.58 with modrewrite windows 2003 original exploit http://milw0rm.com/exploits/3680 only...
Mercur Messaging 2005 (Windows 2000 SP4) - IMAP 'Subscribe' Remote Overflow
!/usr/bin/python Remote exploit for the stack overflow vulnerability in Mercur Messaging 2005 SP3 IMAP service. The exploit was tested on windows 2000 server SP4 in a Vmware environment. At the time of overflow EBX points to our shellcode. However this buffer into which EBX points will give a...
Microsoft Word Document Code Execution Proof of Concept
No description provided by source. ===== The file I have attached is a very basic two stage bug. stage 1 the first mod forces the code down a wrong path. the second mod by itsself is harmless, however when used with the first it will be the first and part of the second overwrite. I have use...
Microsoft Word Document - Malformed Pointer (PoC)
===== The file I have attached is a very basic two stage bug. stage 1 the first mod forces the code down a wrong path. the second mod by itsself is harmless, however when used with the first it will be the first and part of the second overwrite. I have use 41414141 as a marker to make it easier f...
IRIX (5.3/6.2/6.3/6.4/6.5/6.5.11) /usr/lib/print/netprint Local Exploit
No description provided by source. !/bin/sh copyright LAST STAGE OF DELIRIUM jul 2000 poland ://lsd-pl.net/ /usr/lib/print/netprint This code gets released due to another post to the Bugtraq mailing list. For IRIX 6.3 and above this privilage escalation attack can be conducted by local lp users...
IRIX Multiple Buffer Overflow Exploits (LsD)
No description provided by source. / copyright by / / Last Stage of Delirium, Dec 1996, Poland/ include stdio.h include stdlib.h include fcntl.h define BUFSIZE 2068 define OFFS 800 define ADDRS 3 define ALIGN 0 define ALIGN2 4 char...
linux/x86 socket-proxy shellcode 372 bytes
No description provided by source. /--------------------------------------------------------------------------- 372 byte socket-proxy shellcode by Russell Sanford - [email protected] --------------------------------------------------------------------------- filename: x86-linux-bounce-proxy.c date:...
linux/x86 socket-proxy shellcode 372 bytes
Exploit for linux/x86 platform in category shellcode ========================================== linux/x86 socket-proxy shellcode 372 bytes ========================================== /--------------------------------------------------------------------------- 372 byte socket-proxy shellcode by...
linux/x86 socket-proxy shellcode 372 bytes
linux/x86 socket-proxy shellcode 372 bytes. Shellcode exploit for linx86 platform /--------------------------------------------------------------------------- 372 byte socket-proxy shellcode by Russell Sanford - [email protected]...
Eudora Qualcomm WorldMail 3.0 (IMAPd) Remote Overflow Exploit
No description provided by source. !/usr/bin/python PRE AUTHENTICATION Eudora Qualcomm WorldMail 3.0 IMAPd Service 6.1.19.0 Overflow. Discovered by Tim Shelton - [email protected] Coded by [email protected] Details: SEH gets overwritten at 970 bytes in the LIST command. No space...
MailEnable Enterprise Edition 1.1 (EXAMINE) Buffer Overflow Exploit
Exploit for unknown platform in category remote exploits =================================================================== MailEnable Enterprise Edition 1.1 EXAMINE Buffer Overflow Exploit =================================================================== !/usr/bin/python Remote Mailenable...
linux/x86 dup20,0; dup20,1; dup20,2; 15 bytes
linux/x86 dup20,0; dup20,1; dup20,2; 15 bytes. Shellcode exploit for linx86 platform / dup2loop-core.c by Charles Stevenson I made this as a chunk you can paste in to make modular remote exploits. I usually combine this with an execve as the second stage of a read jmp %esp / char hellcode = /...