Microsoft Vista - 'fveapi.dll' BitLocker Drive Encryption API Hijacking

Greetz to :b0nd, Fbih2s,r45c4l,Charles ,j4ckh4x0r, punter,eberly, Charles , Dinesh Arora / Exploit Title: Microsoft Vista BitLocker Drive Encryption API Hijacking Exploit Date: 25/08/2010 Author: Beenu Arora Tested on: Windows XP SP3 Vulnerable extensions: .wbcat Compile and rename to fveapi.dll,...

Roxio Creator DE - HomeUtils9.dll DLL Hijacking

Roxio Creator DE - HomeUtils9.dll DLL Hijacking / Exploit Title: Roxio Creator DE DLL Hijacking Exploit HomeUtils9.dll Date: August 25, 2010 Author: storm [email protected] Version: 9.0.116 - Other versions are very possibly exploitable too Tested on: Windows Vista SP2...

Nvidia Driver - nview.dll DLL Hijacking

Nvidia Driver - nview.dll DLL Hijacking / Nvidia Driver nview.dll Dll Hijacking Exploit By: Encrypt3d.M!nd Date: 25\8\2010 Download: http://www.nvidia.com/Download/index.aspx?lang=en-us Details: Compile the following code and rename it to nview.dll and place file with one of the affected types in...

Mircosoft Windows Program Group DLL Hijacking Exploit

Exploit for windows platform in category local exploits ===================================================== Mircosoft Windows Program Group DLL Hijacking Exploit ===================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 ...

Opera v10.61 DLL Hijacking Exploit (dwmapi.dll)

No description provided by source. / Exploit Title: Opera DLL Hijacking Exploit dwmapi.dll Date: 24/08/2010 Author: Nicolas Krassas http://twitter.com/Dinosn Version: Opera 10.61 Tested on: Windows XP SP3 The code is based on the exploit from "TheLeader" Vulnerable extensions: .htm .mht .mhtml .x...

Media Player Classic 1.3.2189.0 - 'iacenc.dll' DLL Hijacking

/ Mediaplayer Classic 1.3.2189.0 Dll Hijack Exploit By: Encrypt3d.M!nd Date: 25\8\2010 Download: http://mpc-hc.sourceforge.net/ Details: Compile the following code and rename it to iacenc.dll and place file with one of the affected types in the same directory of the dll Affected types: m2ts, m2t,...

Microsoft Windows Internet Communication Settings - schannel.dll DLL Hijacking

Microsoft Windows Internet Communication Settings - schannel.dll DLL Hijacking / Exploit Title: Windows Internet Communication Settings DLL Hijacking Exploit schannel.dll Date: 25/08/2010 Author: ALPdaemon Email: ALPdaemon at yahoo dot com Software Link: N/A Tested on: Windows XP SP3 English...

Wireshark 1.2.10 - airpcap.dll DLL Hijacking

Wireshark 1.2.10 - airpcap.dll DLL Hijacking / Exploit Title: Wireshark define DLLIMPORT declspec dllexport DLLIMPORT void AirpcapGetDeviceList evil; DLLIMPORT void AirpcapFreeDeviceList evil; DLLIMPORT void AirpcapOpen evil; DLLIMPORT void AirpcapClose evil; DLLIMPORT void AirpcapGetLinkType evi...

Microsoft Windows Live Email - 'dwmapi.dll' DLL Hijacking

/ Exploit Title: Windows Live Email DLL Hijacking Exploit dwmapi.dll Date: 24/08/2010 Author: Nicolas Krassas http://twitter.com/Dinosn Version: Latest windows live suite Tested on: Windows XP SP3 The code is based on the exploit from "TheLeader" Vulnerable extensions: .eml .nws .rss / include...

Microsoft Windows Live Email - dwmapi.dll DLL Hijacking

Microsoft Windows Live Email - dwmapi.dll DLL Hijacking / Exploit Title: Windows Live Email DLL Hijacking Exploit dwmapi.dll Date: 24/08/2010 Author: Nicolas Krassas http://twitter.com/Dinosn Version: Latest windows live suite Tested on: Windows XP SP3 The code is based on the exploit from...

QQPlayer - .asx File Processing Buffer Overflow

QQPlayer - .asx File Processing Buffer Overflow Title: QQPlayer asx File Processing Buffer Overflow Exploit Author: Li Qingshan of Information Security Engineering Center,School of Software and Microelectronics,Peking University Vendor: www.qq.com Platform: Windows XPSP3 Chinese Simplified Test:...

Safari JS JITed shellcode - exec calc ASLR/DEP bypass

Safari JS JITed shellcode - exec calc ASLR/DEP bypass. Shellcode exploit for windows platform var SPRAY=""; var JIT=" "+ "var y="+ "0x22222222^"+ / START OF OFFSET / "0x22222222^"+ "0x22222222^"+ "0x22222222^"+ "0x22222222^"+ /we don't wanna NULLS in pointer/ "0x22222222^"+ "0x22222222^"+...

Apple Safari 4.0.5 parent.close() Code Execution

Tested on: Apple Safari 4.0.5 / XP SP2 Polish Shellcode: Windows Execute Command calc Local: Yes Remote: Yes POPUP must be enabled Ctrl+Shift+K Just for fun ; -- window.open"0day.htm"; //parent.close activation self.close;...

Apple Safari 4.0.5 - parent.close() Memory Corruption Code Execution

Apple Safari 4.0.5 - parent.close Memory Corruption Code Execution Tested on: Apple Safari 4.0.5 / XP SP2 Polish Shellcode: Windows Execute Command calc Local: Yes Remote: Yes POPUP must be enabled Ctrl+Shift+K Just for fun ; -- window.open"0day.htm"; //parent.close activation self.close;...

Apple Safari 4.0.5 - 'parent.close()' Memory Corruption Code Execution

Tested on: Apple Safari 4.0.5 / XP SP2 Polish Shellcode: Windows Execute Command calc Local: Yes Remote: Yes POPUP must be enabled Ctrl+Shift+K Just for fun ; -- window.open"0day.htm"; //parent.close activation self.close;...

AVCON 4.6.8.7 Buffer Overflow

!/usr/bin/perl Exploit Title: AVCON Buffer Overflow Date: 5/7/10 Author: Dillon Beresford URL: http://www.avcon.com.cn/ Version: 4.6.8.7 Tested on: XP SP2 and SP3 CVE : NONE Code : exploit.pl Twitter: http://twitter.com/D1N Dork: site:gov.cn "AVCON" There are other bugs... This is just for fun ;-...

PHP str_transliterate()函数Unicode字符远程溢出漏洞

BUGTRAQ ID: 39185 PHP是广泛使用的通用目的脚本语言，特别适合于Web开发，可嵌入到HTML中。 远程攻击者可以通过向PHP的strtransliterate函数提交超长的Unicode字符串请求触发缓冲区溢出，导致执行任意代码。成功利用这个漏洞要求配置中打开了unicode.semantics。 PHP 6.0 dev 厂商补丁： PHP --- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.php.net view sourceprint??php errorreporting0; PHP 6....

PHP 6.0 Dev str_transliterate() Buffer Overflow

Exploit Title: PHP 6.0 Dev strtransliterate 0Day Buffer Overflow Exploit Date: 2010-04-04 Author: Pr0T3cT10n Software Link: http://downloads.sourceforge.net/project/wampserver/WampServer%202%20-%20Extensions/PHP/WampServer2-PHP6.0dev.exe?usemirror=garr Version: 6.0 Dev Tested on: WIN XP HEB SP3...

win32/xp pro sp3 (calc) 57 bytes

Exploit for win32 platform in category shellcode ================================ win32/xp pro sp3 calc 57 bytes ================================ / + win32/xp pro sp3 calc 57 bytes 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ ...

CastRipper 2.9.6.0 .wvx File Local Buffer Overflow

!/usr/bin/python CastRipper 2.9.6.0 .wvx file local BOF 0day by FB1H2S Greetz to all Darkc0de, Andhra Hackers and ICW Memebers Thanks : Mr bond,beenu,Wipu,GOdwinAustin,Theempty,hgH@x0r,r45c4l,itsecurity,eberly,Tia Shoutz : SMARTHAX0R,j4ckh4x0r,41w@r10r,Hackuin Catch us at www.andhrahackers.com or...