Ethereal 0.10.0 < 0.10.2 - IGAP Overflow

/ THE EYE ON SECURITY RESEARCH GROUP - INDIA Ethereal IGAP Dissector Message Overflow Remote Root exploit Copyright 2004 - EOS-India Group Authors note: Shellcode splitting technique: Due to difficulty involved while following normal exploitation techniques due to shortage of memory space for our...

Ethereal 0.10.0-0.10.2 IGAP Overflow Remote Root Exploit

Exploit for linux platform in category remote exploits ======================================================== Ethereal 0.10.0-0.10.2 IGAP Overflow Remote Root Exploit ======================================================== / THE EYE ON SECURITY RESEARCH GROUP - INDIA Ethereal IGAP Dissector...

Linux Kernel 2.x mremap missing do_munmap Exploit

Exploit for linux platform in category local exploits ================================================= Linux Kernel 2.x mremap missing domunmap Exploit ================================================= / mremap missing domunmap return check kernel exploit gcc -O3 -static -fomit-frame-pointer...

Linux Kernel 2.2.25/2.4.24/2.6.2 - 'mremap()' Local Privilege Escalation

/ mremap missing domunmap return check kernel exploit gcc -O3 -static -fomit-frame-pointer mremappte.c -o mremappte ./mremappte suid shell Vulnerable kernel versions are all include include include include include include include include include include include define strs s define xstrs strs //...

Linux Kernel 2.2.252.4.242.6.2 - mremap() Local Privilege Escalation

Linux Kernel 2.2.252.4.242.6.2 - mremap Local Privilege Escalation / mremap missing domunmap return check kernel exploit gcc -O3 -static -fomit-frame-pointer mremappte.c -o mremappte ./mremappte suid shell Vulnerable kernel versions are all include include include include include include include...

WU-FTPD 2.6.2 - wuftpd-freezer.c Remote Denial of Service

WU-FTPD 2.6.2 - wuftpd-freezer.c Remote Denial of Service / c Rosiello Security Copyright Rosiello Security 2003 All Rights reserved. Tested on Red Hat 9.0 Author: Angelo Rosiello Mail : angelo rosiello org This software is only for educational purpose. Do not use it against machines different fr...

WU-FTPD 2.6.2 - 'wuftpd-freezer.c' Remote Denial of Service

/ c Rosiello Security Copyright Rosiello Security 2003 All Rights reserved. Tested on Red Hat 9.0 Author: Angelo Rosiello Mail : angelo rosiello org This software is only for educational purpose. Do not use it against machines different from yours. Respect law. / include include include include...

ZoneAlarm 3.7.202PRO 4.0PRO 4.5 - Random UDP Flood Denial of Service (2)

ZoneAlarm 3.7.202PRO 4.0PRO 4.5 - Random UDP Flood Denial of Service 2 // source: https://www.securityfocus.com/bid/8525/info A denial of service vulnerability has been alleged in ZoneAlarm. It is reportedly possible to reproduce this condition by sending a flood of UDP packets of random sizes to...

Win32 Device Drivers Communication Vulnerabilities

Win32 Device Drivers Communication Vulnerabilities Proof Of Concept - Exploiting Norton AntiVirus Device Driver Written by Lord YuP / sEC-Labs ^ tkT Tested on NAV 2002! zipped exploit http://sec-labs.hack.pl DISCLAIMER: This paper is written in educational purposes only. Author, sEC-Labs, tkT tea...

Samba 2.2.8 - Brute Force Method Remote Command Execution

Samba 2.2.8 - Brute Force Method Remote Command Execution / Mass Samba Exploit by Schizoprenic Xnuxer-Research c 2003 This code just for eduction purpose / include include include void usagechar s printf"Usage: %s \n",s; exit-1; int mainint argc, char argv printf"Mass Samba Exploit by...

Samba 2.2.8 (Bruteforce Method) Remote Root Exploit

Exploit for linux platform in category remote exploits =================================================== Samba 2.2.8 Bruteforce Method Remote Root Exploit =================================================== / Mass Samba Exploit by Schizoprenic Xnuxer-Research c 2003 This code just for eduction...

Samba 2.2.8 - Brute Force Method Remote Command Execution

/ Mass Samba Exploit by Schizoprenic Xnuxer-Research c 2003 This code just for eduction purpose / include include include void usagechar s printf"Usage: %s \n",s; exit-1; int mainint argc, char argv printf"Mass Samba Exploit by Schizoprenic\n"; ifargc != 3 usageargv0; scanargv1, argv2; return 0;...

Trillian Remote DoS

Application: Trillian Developers: Cerulean Studios http://www.trillian.cc Scope: Remote DoS & Possible Exploit Tested on: Trillian 1.0 Pro, 0.74 Freeware It is possible to crash Trillian by sending a corrupt 'TypingUser' message. Replacing any of the characters in 'TypingUser' will cause Trillian...

Microsoft Windows 2000/XP - SMB Authentication Remote Overflow

Exploit for "Authentication flaw in Windows SMB protocol" Release Date: April 24, 2003 Code by Haamed Gheibi [email protected] Salman Niksefat [email protected] Systems Affected by this exploit: Windows 2000 SP0 SP1 SP2 SP3 Windows XP SP0 SP1 EXPLOIT PROVIDED FOR EDUCATIONAL...

Microsoft Windows 2000XP - SMB Authentication Remote Overflow

Microsoft Windows 2000XP - SMB Authentication Remote Overflow Exploit for "Authentication flaw in Windows SMB protocol" Release Date: April 24, 2003 Code by Haamed Gheibi [email protected] Salman Niksefat [email protected] Systems Affected by this exploit: Windows 2000 SP0 SP1 SP2...

Linux Kernel 2.2.x - 2.4.x ptrace/kmod Local Root Exploit

Exploit for linux platform in category local exploits ========================================================= Linux Kernel 2.2.x - 2.4.x ptrace/kmod Local Root Exploit ========================================================= / Linux kernel ptrace/kmod local root exploit This code exploits a ra...

Linux Kernel 2.2.x/2.4.x (RedHat) - 'ptrace/kmod' Local Privilege Escalation

/ Linux kernel ptrace/kmod local root exploit This code exploits a race condition in kernel/kmod.c, which creates kernel thread in insecure manner. This bug allows to ptrace cloned process, allowing to take control over privileged modprobe binary. Should work under all current 2.2.x and 2.4.x...

MS Windows WebDAV Remote PoC Exploit

Exploit for unknown platform in category remote exploits ==================================== MS Windows WebDAV Remote PoC Exploit ==================================== // / IIS 5.0 WebDAV -Proof of concept- / / Bug: CAN-2003-0109 / / By Roman Medina-Heigl Hernandez / / aka RoMaNSoFt / / Madrid,...

Microsoft IIS 5.0 - WebDAV Remote

// / IIS 5.0 WebDAV -Proof of concept- / / Bug: CAN-2003-0109 / / By Roman Medina-Heigl Hernandez / / aka RoMaNSoFt / / Madrid, 23.Mar.2003 / / ================================= / / Public release. Version 1. / / --------------------------------- / // /...

spadv03.txt

Security PointR [email protected] http://www.secpoint.com/ Advisory 003 Title: Vulnerability in Windows 2000 TELNET service. Date: 25-07-01 Copyright c 2001 SECURITY POINTR Contents: ========= I Disclaimer II Introduction III Description IV Demonstration code V Fix VI Contact VII Security PointR...