Linux Kernel 2.2.252.4.242.6.2 - mremap() Local Privilege Escalation

Linux Kernel 2.2.252.4.242.6.2 - mremap Local Privilege Escalation / mremap missing domunmap return check kernel exploit gcc -O3 -static -fomit-frame-pointer mremappte.c -o mremappte ./mremappte suid shell Vulnerable kernel versions are all include include include include include include include...

Linux Kernel 2.2.25/2.4.24/2.6.2 - 'mremap()' Local Privilege Escalation

/ mremap missing domunmap return check kernel exploit gcc -O3 -static -fomit-frame-pointer mremappte.c -o mremappte ./mremappte suid shell Vulnerable kernel versions are all include include include include include include include include include include include define strs s define xstrs strs //...

Advisory !

------------------------------------------------- thePHOTOtool SQL Injection Vulnerability By KingSerb ------------------------------------------------- Please Forgive my spelling or any mistakes i have made, Its my first discovery of a vulnerablity so please understand, and use this file for...

Linux Kernel 2.4.x mremap() bound checking Root Exploit

Exploit for linux platform in category local exploits ======================================================= Linux Kernel 2.4.x mremap bound checking Root Exploit ======================================================= / Linux kernel mremap bound checking bug exploit. Bug found by Paul Starzetz...

Linux Kernel 2.4.232.6.0 - do_mremap() Bound Checking Privilege Escalation

Linux Kernel 2.4.232.6.0 - domremap Bound Checking Privilege Escalation / Linux kernel mremap bound checking bug exploit. Bug found by Paul Starzetz Copyright c 2004 iSEC Security Research. All Rights Reserved. THIS PROGRAM IS FOR EDUCATIONAL PURPOSES ONLY IT IS PROVIDED "AS IS" AND WITHOUT ANY...

wu-ftpd 2.6.2 Remote Denial Of Service Exploit (wuftpd-freezer.c)

Exploit for linux platform in category dos / poc ================================================================= wu-ftpd 2.6.2 Remote Denial Of Service Exploit wuftpd-freezer.c ================================================================= / c Rosiello Security Copyright Rosiello Security 20...

wu-ftpd 2.6.2 Remote Denial Of Service Exploit (wuftpd-freezer.c)

No description provided by source. / c Rosiello Security Copyright Rosiello Security 2003 All Rights reserved. Tested on Red Hat 9.0 Author: Angelo Rosiello Mail : angelo rosiello org This software is only for educational purpose. Do not use it against machines different from yours. Respect law. ...

WU-FTPD 2.6.2 - wuftpd-freezer.c Remote Denial of Service

WU-FTPD 2.6.2 - wuftpd-freezer.c Remote Denial of Service / c Rosiello Security Copyright Rosiello Security 2003 All Rights reserved. Tested on Red Hat 9.0 Author: Angelo Rosiello Mail : angelo rosiello org This software is only for educational purpose. Do not use it against machines different fr...

WU-FTPD 2.6.2 - 'wuftpd-freezer.c' Remote Denial of Service

/ c Rosiello Security Copyright Rosiello Security 2003 All Rights reserved. Tested on Red Hat 9.0 Author: Angelo Rosiello Mail : angelo rosiello org This software is only for educational purpose. Do not use it against machines different from yours. Respect law. / include include include include...

ZoneAlarm 3.7.202PRO 4.0PRO 4.5 - Random UDP Flood Denial of Service (2)

ZoneAlarm 3.7.202PRO 4.0PRO 4.5 - Random UDP Flood Denial of Service 2 // source: https://www.securityfocus.com/bid/8525/info A denial of service vulnerability has been alleged in ZoneAlarm. It is reportedly possible to reproduce this condition by sending a flood of UDP packets of random sizes to...

ZoneAlarm 3.7.202/PRO 4.0/PRO 4.5 - Random UDP Flood Denial of Service (2)

// source: https://www.securityfocus.com/bid/8525/info A denial of service vulnerability has been alleged in ZoneAlarm. It is reportedly possible to reproduce this condition by sending a flood of UDP packets of random sizes to random ports on a system hosting the vulnerable software. /...

MS Windows (RPC DCOM) Remote Exploit (Universal Targets)

No description provided by source. / Windows remote RPC DCOM exploit Coded by oc192 Includes 2 universal targets, 1 for win2k, and 1 for winXP. This exploit uses ExitThread in its shellcode to prevent the RPC service from crashing upon successful exploitation. It also has several other options...

Microsoft Windows - RPC DCOM Remote (Universal)

Microsoft Windows - RPC DCOM Remote Universal / Windows remote RPC DCOM exploit Coded by oc192 Includes 2 universal targets, 1 for win2k, and 1 for winXP. This exploit uses ExitThread in its shellcode to prevent the RPC service from crashing upon successful exploitation. It also has several other...

Microsoft Windows - 'RPC DCOM' Remote (Universal)

/ Windows remote RPC DCOM exploit Coded by oc192 Includes 2 universal targets, 1 for win2k, and 1 for winXP. This exploit uses ExitThread in its shellcode to prevent the RPC service from crashing upon successful exploitation. It also has several other options including definable bindshell and...

Win32 Device Drivers Communication Vulnerabilities

Win32 Device Drivers Communication Vulnerabilities Proof Of Concept - Exploiting Norton AntiVirus Device Driver Written by Lord YuP / sEC-Labs ^ tkT Tested on NAV 2002! zipped exploit http://sec-labs.hack.pl DISCLAIMER: This paper is written in educational purposes only. Author, sEC-Labs, tkT tea...

Samba 2.2.8 (Bruteforce Method) Remote Root Exploit

Exploit for linux platform in category remote exploits =================================================== Samba 2.2.8 Bruteforce Method Remote Root Exploit =================================================== / Mass Samba Exploit by Schizoprenic Xnuxer-Research c 2003 This code just for eduction...

Samba 2.2.8 - Brute Force Method Remote Command Execution

Samba 2.2.8 - Brute Force Method Remote Command Execution / Mass Samba Exploit by Schizoprenic Xnuxer-Research c 2003 This code just for eduction purpose / include include include void usagechar s printf"Usage: %s \n",s; exit-1; int mainint argc, char argv printf"Mass Samba Exploit by...

Samba 2.2.8 - Brute Force Method Remote Command Execution

/ Mass Samba Exploit by Schizoprenic Xnuxer-Research c 2003 This code just for eduction purpose / include include include void usagechar s printf"Usage: %s \n",s; exit-1; int mainint argc, char argv printf"Mass Samba Exploit by Schizoprenic\n"; ifargc != 3 usageargv0; scanargv1, argv2; return 0;...

Trillian Remote DoS

Application: Trillian Developers: Cerulean Studios http://www.trillian.cc Scope: Remote DoS & Possible Exploit Tested on: Trillian 1.0 Pro, 0.74 Freeware It is possible to crash Trillian by sending a corrupt 'TypingUser' message. Replacing any of the characters in 'TypingUser' will cause Trillian...

Privilege escalation applet, Java Media Framework

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi Bugtraqqers, this is the proof-of-concept code for the vulnerability described in http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert2F54760 The code shows that there is more in this vulnerability than crash the vm, it allows to read and write...