1613 matches found
MS Windows Metafile (gdi32.dll) Denial of Service Exploit (MS05-053)
Exploit for unknown platform in category dos / poc ==================================================================== MS Windows Metafile gdi32.dll Denial of Service Exploit MS05-053 ==================================================================== / Author: Winny Thomas Pune, INDIA The...
Microsoft Windows Metafile - 'gdi32.dll' Denial of Service (MS05-053)
/ Author: Winny Thomas Pune, INDIA The crafted metafile from this code when viewed in internet explorer raises the CPU utilization to 100%. The code was tested on Windows 2000 server SP4. The issue does not occur with the hotfix for GDI MS05-053 installed Disclaimer: This code is for...
RM SafetyNet Plus XSS
The remote host runs SafetyNet Plus, a popular educational filtering service. This version is vulnerable to multiple cross-site scripting due to a lack of sanitization of user-supplied data. Successful exploitation of this issue may allow an attacker to execute malicious script code on a vulnerab...
Snort <= 2.4.2 BackOrifice Remote Buffer Overflow Exploit (meta)
No description provided by source. for educational purpose only by Kira trir00t at gmail.com package Msf::Exploit::snortbooverflowwin32; use base 'Msf::Exploit'; use strict; use Pex::Text; my $holdrand; my $advanced = ; my $info = 'Name' = 'Snort Back Orifice Preprocessor Overflow', 'Version' =...
Snort 2.4.2 - BackOrifice Remote Buffer Overflow (Metasploit)
for educational purpose only by Kira package Msf::Exploit::snortbooverflowwin32; use base 'Msf::Exploit'; use strict; use Pex::Text; my $holdrand; my $advanced = ; my $info = 'Name' = 'Snort Back Orifice Preprocessor Overflow', 'Version' = '$Revision: 1.0 $', 'Authors' = 'Trirat Puttaraksa Kira '...
MS Windows Plug-and-Play (Umpnpmgr.dll) DoS Exploit (MS05-047) (2)
Exploit for unknown platform in category dos / poc ================================================================== MS Windows Plug-and-Play Umpnpmgr.dll DoS Exploit MS05-047 2 ================================================================== // tested and approved /str0ke / Program: Denial of...
Ethereal 0.9.1 - 0.10.12 SLIMP3 Remote Buffer Overflow PoC
No description provided by source. etherealslimp3bof.py Ethereal SLIMP3 Remote Buffer Overflow PoC Bug Discoverd by Vendor? 2005-10-19 Coded by Sowhat http://secway.org 2005-10-20 This PoC will crash the Ethereal Tested with Ethereal 0.10.12, WinPcap 3.1 beta4, WinXP SP2 For educational purpose...
Solaris 10 (x86) - DtPrintinfoSession Privilege Escalation
Solaris 10 x86 - DtPrintinfoSession Privilege Escalation !/usr/bin/perl Solaris 10 DtPrintinfo/Session Exploit x86 EDUCATIONAL purposes only.... :- by Charles Stevenson core greetz to raptor for sharing this vulnerability and in no specific order just want to show love for: nemo, andrewg, jduck,...
MS Windows (keybd_event) Local Privilege Elevation Exploit
Exploit for unknown platform in category local exploits ========================================================== MS Windows keybdevent Local Privilege Elevation Exploit ========================================================== / Microsoft Windows keybdevent validation vulnerability. Local...
CUPS Server <= 1.1 (Get Request) Denial of Service Exploit
No description provided by source. / dl-cups.c v0.1 CUPS server freeze and processor load "fuckup" exploit bug found and exploit coded by tracewar darklogic team for educaional purposes only. greetz goes to: setuid, matan. / include stdio.h include sys/types.h include sys/socket.h include...
CUPS Server <= 1.1 (Get Request) Denial of Service Exploit
Exploit for linux platform in category dos / poc ========================================================== CUPS Server include include include include char EVIL = "\x2e\x2e\x5c\x2e\x2e"; void usagechar argv0 fprintfstdout, "cups/1.x server freeze and remote cpu usage fuckup\n"; fprintfstdout,...
CUPS Server 1.1 - GET Denial of Service
CUPS Server 1.1 - GET Denial of Service / dl-cups.c v0.1 CUPS server freeze and processor load "fuckup" exploit bug found and exploit coded by tracewar darklogic team for educaional purposes only. greetz goes to: setuid, matan. / include include include include include char EVIL =...
CUPS Server 1.1 - GET Denial of Service
/ dl-cups.c v0.1 CUPS server freeze and processor load "fuckup" exploit bug found and exploit coded by tracewar darklogic team for educaional purposes only. greetz goes to: setuid, matan. / include include include include include char EVIL = "\x2e\x2e\x5c\x2e\x2e"; void usagechar argv0...
man2web <= 0.88 Multiple Remote Command Execution Exploit (update2)
Exploit for cgi platform in category web applications =================================================================== man2web include include include include void usagechar argv0 fprintfstderr, "x86/linux multipie man2web cgi-scripts remote command spawn\n"; fprintfstderr, "researched by...
Simple PHP Blog <= 0.4.0 Multiple Remote Exploits
No description provided by source. !/usr/bin/perl -w =============================================================================== Title: sphpblogvulns.pl Written by: Kenneth F. Belva, CISSP Franklin Technologies Unlimited, Inc. http://www.ftusecurity.com Date: August 25, 2005 Version: 0.1...
Simple PHP Blog 0.4.0 - Multiple Remote s
Simple PHP Blog 0.4.0 - Multiple Remote s !/usr/bin/perl -w =============================================================================== Title: sphpblogvulns.pl Written by: Kenneth F. Belva, CISSP Franklin Technologies Unlimited, Inc. http://www.ftusecurity.com Date: August 25, 2005 Version: 0...
Simple PHP Blog 0.4.0 - Multiple Remote s
!/usr/bin/perl -w =============================================================================== Title: sphpblogvulns.pl Written by: Kenneth F. Belva, CISSP Franklin Technologies Unlimited, Inc. http://www.ftusecurity.com Date: August 25, 2005 Version: 0.1 Description: This program is for...
sphpblog_vulns.pl.txt
!/usr/bin/perl -w =============================================================================== Title: sphpblogvulns.pl Written by: Kenneth F. Belva, CISSP Franklin Technologies Unlimited, Inc. http://www.ftusecurity.com Date: August 25, 2005 Version: 0.1 Description: This program is for...
SimplePHPBlog Arbitrary File Deletion and Sample Exploit
SimplePHPBlog has a vulnerability in its commentdeletecgi.php. The PHP script allows for the arbitrary deletion of files. Please see following link for a perl script to demonstrate the exploit: http://www.ftusecurity.com/pub/sphpblogvulns Please add .pl extension as my ISP server preprocesses the...
Microsoft Windows Plug-and-Play Service - Remote Universal (Spanish) (MS05-039)
Microsoft Windows Plug-and-Play Service - Remote Universal Spanish MS05-039 / HOD-ms05039-pnp-expl-spanish.c 25.Aug.2005 Very slightly modified version by Roman Medina Tested on Win2k SP4 Spanish. Original credits & comments follow. / / HOD-ms05039-pnp-expl.c: 2005-08-10: PUBLIC v.0.2 Copyright c...