Reflective DLL Injection, Bind TCP Stager (Windows x86)

Inject a DLL via a reflective loader. Listen for a connection Windows x86 This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 298 include Msf::Payload::Stager include...

Chilkat IMAP ActiveX 7.9 - File Execution IE Denial of Service

Chilkat IMAP ActiveX 7.9 - File Execution IE Denial of Service Chilkat IMAP ActiveX File Execution&IE DoS www.chilkasoft.com By: e.wiZz! Info: Bosnian Idiot FTW! Site: infected.blogger.ba Greetz: suN8Hclf,Luigi and peoples from hakin9 forum In the wild... File: ChilkatMailv79.dll ProgID:...

Windows Inject DLL, Reverse TCP Stager (IPv6)

Inject a custom DLL into the exploited process. Connect back to the attacker over IPv6 This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 289 include Msf::Payload::Stager include...

Windows Inject DLL, Bind IPv6 TCP Stager (Windows x86)

Inject a custom DLL into the exploited process. Listen for an IPv6 connection Windows x86 This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 298 include Msf::Payload::Stager include...

Racer v0.5.3 Beta 5 Buffer Overflow

This module exploits the Racer Car and Racing Simulator game versions v0.5.3 beta 5 and earlier. Both the client and server listen on UDP port 26000. By sending an overly long buffer we are able to execute arbitrary code remotely. Module Options msf use exploit/windows/games/racer/503beta5 msf...

IrfanView <= 3.99 IFF File Local Stack Buffer Overflow Exploit

No description provided by source. /Irfan View 3.99 .IFF File Local Stack Buffer Overflow This sploit runs calc.exe tested on Win XP Pro sp3;If you run it on another vs of Win make sure you chance the retaddress,but it works almost all the time so.. . Credits for finding the bug and sploit go to...

irfanviewiff-overflow.txt

/Irfan View 3.99 .IFF File Local Stack Buffer Overflow This sploit runs calc.exe tested on Win XP Pro sp3;If you run it on another vs of Win make sure you chance the retaddress,but it works almost all the time so.. . Credits for finding the bug and sploit go to fl0 fl0w. Gretez to all romanian...

IrfanView 3.99 - .IFF File Local Stack Buffer Overflow

IrfanView 3.99 - .IFF File Local Stack Buffer Overflow /Irfan View 3.99 .IFF File Local Stack Buffer Overflow This sploit runs calc.exe tested on Win XP Pro sp3;If you run it on another vs of Win make sure you chance the retaddress,but it works almost all the time so.. . Credits for finding the b...

IrfanView 3.99 - '.IFF' File Local Stack Buffer Overflow

/Irfan View 3.99 .IFF File Local Stack Buffer Overflow This sploit runs calc.exe tested on Win XP Pro sp3;If you run it on another vs of Win make sure you chance the retaddress,but it works almost all the time so.. . Credits for finding the bug and sploit go to fl0 fl0w. Gretez to all romanian...

BlazeVideo HDTV Player PLF文件堆栈缓冲区溢出漏洞

BUGTRAQ ID: 30442 CNCAN ID：CNCAN-2008073108 BlazeVideo HDTV Player是一款支持HDTV播放的媒体播放程序。 BlazeVideo HDTV Player处理播放列表文件存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 构建恶意的PLF文件，诱使用户使用BlazeVideo HDTV Player处理，可触发此漏洞。 BlazeVideo HDTV Player 3.5 目前没有解决方案提供： http://www.blazevideo.com/ /Blaze Video HDTV Player V 3.5...

WinZIP <= 8.1 Command Line Local Buffer Overflow Exploit

No description provided by source. / WinZip Command Line Local Buffer Overflow http://securitytracker.com/alerts/2004/Sep/1011132.html http://www.winzip.com/wz90sr1.htm Exploit coded By ATmaCA Web: atmacasoft.com && spyinstructors.com E-Mail: [email protected] Credit to kozan / / Tested with...

forumpayperpost-sql.txt

-+================================================================================+- -+ Forum Pay Per Post Exchange = 2.0 SQL Injection Vulnerabilitys +- -+================================================================================+- By : Stack...

Forum Pay Per Post Exchange <= 2.0 (catid) SQL Injection Vulnerability

No description provided by source. -+================================================================================+- -+ Forum Pay Per Post Exchange = 2.0 SQL Injection Vulnerabilitys +- -+================================================================================+- By : Stack...

Windows Command Shell, Bind TCP (via Perl)

Listen for a connection and spawn a command shell via perl persistent This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 139 include Msf::Payload::Single include...

Apple Safari (webkit) Remote Denial of Service Exploit (iphone/osx/win)

Exploit for multiple platform in category dos / poc ======================================================================= Apple Safari webkit Remote Denial of Service Exploit iphone/osx/win ======================================================================= Copyright Georgi Guninski Cannot ...

irfanview-corrupt.txt

/ IrfanView 4.10 .FPX File Memory Corruption This exploit launches calc.exe. Tested against Win XP SP2 FR. Have Fun! Coded and discovered by Marsu Other bugs exist... / include "stdio.h" include "stdlib.h" include "string.h" / win32exec - EXITFUNC=process CMD=calc.exe Size=164 Encoder=PexFnstenvS...

IrfanView 4.10 .FPX File Memory Corruption Exploit

No description provided by source. / IrfanView 4.10 .FPX File Memory Corruption This exploit launches calc.exe. Tested against Win XP SP2 FR. Have Fun! Coded and discovered by Marsu [email protected] Other bugs exist... / include "stdio.h" include "stdlib.h" include "string.h" / win32exe...

IrfanView 4.10 - .fpx Memory Corruption

IrfanView 4.10 - .fpx Memory Corruption / IrfanView 4.10 .FPX File Memory Corruption This exploit launches calc.exe. Tested against Win XP SP2 FR. Have Fun! Coded and discovered by Marsu Other bugs exist... / include "stdio.h" include "stdlib.h" include "string.h" / win32exec - EXITFUNC=process...

IrfanView 4.10 - '.fpx' Memory Corruption

/ IrfanView 4.10 .FPX File Memory Corruption This exploit launches calc.exe. Tested against Win XP SP2 FR. Have Fun! Coded and discovered by Marsu Other bugs exist... / include "stdio.h" include "stdlib.h" include "string.h" / win32exec - EXITFUNC=process CMD=calc.exe Size=164 Encoder=PexFnstenvS...

Move Networks Quantum Streaming Player - Remote Overflow (SEH)

Move Networks Quantum Streaming Player - Remote Overflow SEH Move Networks Quantum Streaming Player SEH Overwrite Exploit function Check var buf = 'A'; while buf.length = 1027 buf = buf + 'A'; // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.c...