1700 matches found
Windows/x86 - Message Box + Null-Free Shellcode (140 bytes)
Windows/x86 - Message Box + Null-Free Shellcode 140 bytes. Shellcode exploit for Windowsx86 platform. Tags: Metasploit Framework MSF ; Copyright c 2009-2010, Berend-Jan "SkyLined" Wever ; Project homepage: http://code.google.com/p/w32-dl-loadlib-shellcode/ ; All rights reserved. See COPYRIGHT.txt...
Microsoft Active Directory LDAP Server - 'Username' Enumeration
source: https://www.securityfocus.com/bid/32305/info Microsoft Active Directory is prone to a username-enumeration weakness because of a design error in the application when verifying user-supplied input. Attackers may exploit this weakness to discern valid usernames. This may aid them in...
smb-enum-domains NSE Script
Attempts to enumerate domains on a system, along with their policies. This generally requires credentials, except against Windows 2000. In addition to the actual domain, the "Builtin" domain is generally displayed. Windows returns this in the list of domains, but its policies don't appear to be...
TugZip 3.00 Archiver - '.zip' Local Buffer Overflow
/0day TUGzip 3.00 archiver .ZIP File Local Buffer Overflow "If you change things ,forever,there's no going back,you see for them you're just a freak, like me ..Mhaaaahaaaaaaaaaaaaaaaaaaaa"JK Well hello there ,greetz from Romania,here is a exploit for the archiver TUGzip. So the payload doesen't...
ESET SysInspector - 1.1.1.0 (esiadrv.sys) Proof of Concept Exploit
No description provided by source. //////////////////////////////////////////////////////////////////////////////////// // +----------------------------------------------------------------------------+ // // | | // // | ESET, LLC. - http://www.eset.com/ | // // | | // // | Affected Software: | //...
[security bulletin] HPSBMA02326 SSRT071490 rev.1 - HP Instant Support HPISDataManager.dll Running on Windows, Remote Execution of Arbitrary Code
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01422264 Version: 1 HPSBMA02326 SSRT071490 rev.1 - HP Instant Support HPISDataManager.dll Running on Windows, Remote Execution of Arbitrary Code NOTICE: The information in this Security Bulletin...
Teach you clever with a text editor find system vulnerabilities-vulnerability warning-the black bar safety net
Although Kaspersky, rising and other security software can help us to find the vulnerabilities, but today the editor to introduce a method to find loopholes in the new method: use a hexadecimal editor to find the vulnerability. A hex Editor can be used to check and repair various files, recover...
Microsoft Security Bulletin MS08-028 – Critical Vulnerability in Microsoft Jet Database Engine Could Allow Remote Code Execution (950749)
Microsoft Security Bulletin MS08-028 – Critical Vulnerability in Microsoft Jet Database Engine Could Allow Remote Code Execution 950749 Published: May 13, 2008 Version: 1.0 General Information Executive Summary This security update resolves a security vulnerability in the Microsoft Jet Database...
Microsoft Security Bulletin MS08-022 – Critical Vulnerability in VBScript and JScript Scripting Engines Could Allow Remote Code Execution (944338)
Microsoft Security Bulletin MS08-022 – Critical Vulnerability in VBScript and JScript Scripting Engines Could Allow Remote Code Execution 944338 Published: April 8, 2008 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in the...
Windows 9x/NT/2k/XP PEB method 35 bytes
No description provided by source. /This is a 35 byte C implementation of the use of the PEB method to get the kernel32 base address on Windows. This is generic code designed to run on both Windows 9x and NT based systems. The code has been optimized to not have any 00h bytes so that you wont hav...
Windows 9x/NT/2k/XP Reverse Generic Shellcode w/o Loader 249 bytes
No description provided by source. We use the PEB for the Output/Input/Error Handles. typedef struct PEB BOOLEAN InheritedAddressSpace ; BOOLEAN ReadImageFileExecOptions ; BOOLEAN BeingDebugged ; BOOLEAN Spare ; HANDLE Mutant ; PVOID ImageBaseAddress ; PPEB LDR DATA LoaderData ; PRTL USER PROCESS...
Microsoft Security Bulletin MS07-058 - Important Vulnerability in RPC Could Allow Denial of Service (933729)
Microsoft Security Bulletin MS07-058 - Important Vulnerability in RPC Could Allow Denial of Service 933729 Published: October 9, 2007 Version: 1.0 General Information Executive Summary This update resolves a privately reported vulnerability. A denial of service vulnerability exists in the remote...
PPStream - PowerPlayer.dll 2.0.1.3829 ActiveX Remote Overflow
PPStream - PowerPlayer.dll 2.0.1.3829 ActiveX Remote Overflow // author: dummy // written by [email protected] 2007 define CRTSECURENODEPRECATE include include const unsigned char shellcode174 = 0xE8, 0x00, 0x00, 0x00, 0x00, 0x6A, 0x03, 0xEB, 0x21, 0x7E, 0xD8, 0xE2, 0x73, 0x98, 0xFE, 0x8A, 0x0E, 0x8...
Successfully bypass the XP login password-vulnerability warning-the black bar safety net
There are many friends also in for forgot XP login password can not enter the system to worry about,now I come to bring you a solution. Tools required 1. U disk a 2. UsbootU disk to start making software 3. winrarcompression software This method I've personally experimented,and successfully bypas...
Breakthrough Windows 2 0 0 3 the PHP server to new ideas-vulnerability warning-the black bar safety net
From WIN2000 to WIN XP, WIN2003, MS IIS server security improvement is obvious. In WIN2000, a regular PHP SHELL will be able to put it down; in WIN XP, even Safe mode = off,you cannot use system function executes a system command, but we can also use the comfunction to break;to WIN 2 0 0 3,even i...
Clone the administrator account the method-vulnerability warning-the black bar safety net
Often see some people in the invasion of a Windows 2 0 0 0 or Windows NT after the grandly create an Administrator group of users, it seems that when the administrator is not present generally, today, even contrary to what even the previous of the mind, Share one similar to the RootKit thing, of...
using named pipes for local privilege escalation
Digital Scream August, 2003 Using named pipes for local privilege escalation For Phrack magazine 61 Operating systems created by Microsoft in recent years several years old, based on the Windows NT kernel. This decision is positive affected the security of released operating systems, relatively...
MS Windows WebDav III remote root Exploit (xwdav)
No description provided by source. / IIS 5.0 WebDAV Exploit Xnuxer Lab By Schizoprenic, Copyright c 2003 WebDAV exploit without netcat or telnet and with pretty magic number as RET / include stdio.h include errno.h include string.h include stdlib.h include fcntl.h include sys/types.h include...
MS Windows IIS Unicode Remote Transversal Bug
No description provided by source. / iisex iis exploit - nost's idea v2 -------------------------------------- Okay.. the first piece of code was not really finished. So, i apologize to everybody.. by incubus [email protected] grtz to: Bio, nos, zoa, reg and vor... who else would stay up at nig...
Design/Logic Flaw
ICQ Inc. formerly Mirabilis ICQ 2003a, 2003b, Lite 4.0, Lite 4.1, and possibly other Windows versions allows user-assisted remote attackers to hide malicious file extensions and bypass Windows security warnings via a filename that ends in an assumed-safe extension such as JPG, and possibly...