Windows x64 VNC Server (Reflective Injection), Windows x64 Reverse HTTP Stager (winhttp)

Inject a VNC Dll via a reflective loader Windows x64 staged. Tunnel communication over HTTP Windows x64 winhttp This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 745 include...

Win x86-64 - Download & execute Generator

Win x86-64 - Download & execute Generator. Shellcode exploit for windows platform Title: Obfuscated Shellcode Windows x86/x64 Download And Execute Use PowerShell - Generator length: Dynamic ! depend on url and filename Date: 20 January 2015 Author: Ali Razmjoo tested On: Windows 7 x64 ultimate...

iPass Control Pipe Remote Command Execution Exploit

This Metasploit module exploits a vulnerability in the IPass Client service. This service provides a named pipe which can be accessed by the user group BUILTIN\Users. This pipe can be abused to force the service to load a DLL from a SMB share. This module requires Metasploit:...

Obfuscated Shellcode Windows x64 - 1218 Bytes Add Administrator User/Pass ALI/ALI & Add ALI To RDP Group & Enable RDP From Registry & STOP Firewall & Auto Start Terminal Service

Obfuscated Shellcode Windows x64 - 1218 Bytes Add Administrator User/Pass ALI/ALI & Add ALI To RDP Group & Enable RDP From Registry & STOP Fire... Author: Ali Razmjoo ​ ​Title: ​Obfuscated Shellcode Windows x64 1218 Bytes Add Administrator User/Pass ALI/ALI & Add ALI to RDP Group & Enable RDP Fro...

CrowdStrike found Windows x64 to mention the right to 0day (CVE-2 0 1 4-4 1 1 3)-vulnerability warning-the black bar safety net

Monitoring the program to display from the WEBSHELL using Win64. exe to elevate permissions | 1 | net localgroup administrators admin /add ---|--- 1 2 3 4 next...

[security bulletin] HPSBHF03006 rev.1 - HP Integrated Lights-Out 2 (iLO 2) Denial of Service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04244787 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04244787 Version: 1 HPSBHF03006 rev....

Agnitio - Manual Security Code Review Tool

A tool to help developers and security professionals conduct manual security code reviews in a consistent and repeatable way. Agnitio aims to replace the adhoc nature of manual security code review documentation, create an audit trail and reporting. The major changes in v2.1 are listed below:...

SAP Sybase Adaptive Server Enterprise SQL Injection (SAP Note 1893440)

SAP Sybase Adaptive Server Enterprise ASE contains a flaw that may allow an attacker to carry out a SQL injection attack. The issue is due to the program not properly sanitizing user-supplied input before using it in SQL queries. This may allow an attacker to inject or manipulate SQL queries in t...

Windows Meterpreter (Reflective Injection x64), Windows x64 Reverse HTTP Stager (wininet)

Inject the meterpreter server DLL via the Reflective Dll Injection payload staged. Requires Windows XP SP2 or newer. Tunnel communication over HTTP Windows x64 wininet This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework...

SAP SOAP RFC SXPG_CALL_SYSTEM Remote Command Execution

This module abuses the SAP NetWeaver SXPGCALLSYSTEM function, on the SAP SOAP RFC Service, to execute remote commands. This module needs SAP credentials with privileges to use the /sap/bc/soap/rfc in order to work. The module has been tested successfully on Windows 2008 64-bit and Linux 64-bit...

Denis Nazarov

Gathering his statistics from the Kaspersky Security Network, Denis Nazarov, head of Kaspersky Lab’s Anti-Malware Research US, compared infection rates on x86 and x64 versions of Windows while describing Kernel Patch Protection technology...

Skype v5.3.x - Transfer Buffer Overflow Vulnerability x64

Document Title: =============== Skype v5.3.x - Transfer Buffer Overflow Vulnerability x64 References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=183 Release Date: ============= 2011-10-15 Vulnerability Laboratory ID VL-ID: ==================================== 1...

Skype v5.3.x - Transfer Buffer Overflow Vulnerability x64

Document Title: =============== Skype v5.3.x - Transfer Buffer Overflow Vulnerability x64 References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=183 Release Date: ============= 2011-10-15 Vulnerability Laboratory ID VL-ID: ==================================== 1...

Windows x64 VNC Server (Reflective Injection), Windows x64 Reverse TCP Stager

Inject a VNC Dll via a reflective loader Windows x64 staged. Connect back to the attacker Windows x64 This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 449 include Msf::Payload::Stag...

Windows x64 Command Shell, Bind TCP Inline

Listen for a connection and spawn a command shell Windows x64 This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 505 include Msf::Payload::Windows include Msf::Payload::Single include...

Windows x64 Command Shell, Windows x64 Reverse TCP Stager

Spawn a piped command shell Windows x64 staged. Connect back to the attacker Windows x64 This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 449 include Msf::Payload::Stager include...

ImageMagick Detection (Windows SMB Login)

Detects the installed version of ImageMagick. The script logs in via smb, searches for ImageMagick in the registry and gets the version from SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

win64 URLDownloadToFileA download and execute 218+ bytes

win64 URLDownloadToFileA download and execute 218+ bytes. Shellcode exploit for win64 platform ; ; dexec64.asm - 218+ bytes unoptimised ; ; Win64 asm code, download & execute file using URLDownloadToFileA moniker & WinExec ; ; tested on AMD64 running Windows x64 SP1 ; ; there probably are errors ...

win64 (URLDownloadToFileA) download and execute 218+ bytes

Exploit for win64 platform in category shellcode ========================================================== win64 URLDownloadToFileA download and execute 218+ bytes ========================================================== ; ; dexec64.asm - 218+ bytes unoptimised ; ; Win64 asm code, download &...

win64 (URLDownloadToFileA) download and execute 218+ bytes

No description provided by source. ; ; dexec64.asm - 218+ bytes unoptimised ; ; Win64 asm code, download & execute file using URLDownloadToFileA moniker & WinExec ; ; tested on AMD64 running Windows x64 SP1 ; ; there probably are errors in the code, but this is more of an experimental source if...