397 matches found
CVE-2002-1120
🐞 CVE-2002-1120: Savant Web Server 3.1 - スタックベースのバッファオーバーフロー エッグハンター 2000年代初頭のリモートメモリ破壊を、巧妙に細工されたHTTPリクエストで実演するSavant Web Server 3.1の古典的なスタックベースのバッファオーバーフロー（2025年のほとんどのバッファオーバーフローCVEよりも初心者に多くの知識を要求する2002年の脆弱性）。 📑 目次 このリポジトリの存在理由 この脆弱性が興味深い理由 背景と影響を受けるソフトウェア 脆弱性について クラッシュの発生 エクスプロイト 🎓 このリポジトリの存在理由...
CVE-2008-4654
CVE-2008-4654 针对VideoLan的VLC Media Player 0.9.4在处理TiVo文件时出现的栈缓冲区溢出漏洞CVE-2008-4654的功能完整的利用程序。它针对运行在64位Windows系统上的32位二进制文件，并使用WOW64 egghunter来绕过有限的栈空间。 使用方法 更新脚本 ： 将脚本中的占位符 buf = b'...' 替换为你自己的shellcode（例如，来自 msfvenom）。 如果需要不同的标签或自定义egghunter，可酌情调整 EGGHUNTERWOW64 shellcode。 python .\CVE-2008-4654.p...
CVE-2009-3999-HP-Power-Manager-4.2-Build-7-Buffer-Overflow
OSCPの準備の一環として、私はCVE-2009-3999（HP Power Manager 4.2 Build 7 バッファオーバーフローエクスプロイト）に出会いました。 この最新のスクリプトは、文字列とバイトの処理に関するPython 3互換性の問題を解決するために更新されており、ペイロードが生のバイナリとして送信されることでメモリ破損を防ぎます。...
CVE-2004-2271-MiniShare-1.4.1-BOF
CVE-2004-2271 - MiniShare 1.4.1 - BOF 参考文献 https://nvd.nist.gov/vuln/detail/CVE-2004-2271 脆弱性 MiniShare 1.4.1 は、受信した HTTP GET リクエストに対して境界チェックを行いません。 長く不正な形式の HTTP GET リクエストを送信することで、攻撃者はバッファオーバーフローを引き起こし、システム上で任意のコードを実行できます。 エクスプロイトノート EIP が上書きされた後、シェルコードに使用できるスペースは 210 バイトのみです。...
osed-scripts
osed-scripts 为 Offensive Security 的 Windows 用户模式漏洞利用开发课程（OSED）量身定制的工具集 目录 独立脚本 egghunter.py find-gadgets.py shellcoder.py install-mona.sh attach-process.ps1 WinDbg 脚本 find-ppr.py find-bad-chars.py search.py 独立脚本 安装： pip3 install keystone-engine numpy egghunter.py 需要 keystone-engine usage:...
SLAE
SecurityTube Linux 汇编专家 这篇博客文章是为完成 SecurityTube Linux 汇编专家认证的要求而创建的： http://securitytube-training.com/online-courses/securitytube-linux-assembly-expert/ 学生 ID：SLAE-1134 文章 作业 1：Linux x86 IPv4、IPv6 与双网络协议栈 TCP 绑定 Shell 作业 2：Linux x86 IPv4 和 IPv6 TCP 反向 Shell 作业 3：Linux x86 Egghunter（蛋搜索器） 作业 4：Lin...
Exploit-Framework
Exploit Framework !License: MIThttps://img.shields.io/bad...
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Hp Power_Manager
As part of my OSCP preparation I came across CVE-2009-3999 HP P...
EUVD-2018-21780
LanSpy 2.0.1.159 contains a local buffer overflow vulnerability in the scan section that allows local attackers to execute arbitrary code by exploiting structured exception handling mechanisms. Attackers can craft malicious payloads using egghunter techniques to locate and execute shellcode,...
CVE-2018-25265
LanSpy 2.0.1.159 contains a local buffer overflow vulnerability in the scan section that allows local attackers to execute arbitrary code by exploiting structured exception handling mechanisms. Attackers can craft malicious payloads using egghunter techniques to locate and execute shellcode,...
CVE-2018-25265
CVE-2018-25265 affects LanSpy 2.0.1.159 with a local buffer overflow in the scan section that can lead to arbitrary code execution. Attackers can craft payloads using egghunter techniques to locate and execute shellcode by manipulating the SEH chain; this is a local, no-interaction vulnerability ...
CVE-2018-25265 LanSpy 2.0.1.159 Local Buffer Overflow
LanSpy 2.0.1.159 contains a local buffer overflow vulnerability in the scan section that allows local attackers to execute arbitrary code by exploiting structured exception handling mechanisms. Attackers can craft malicious payloads using egghunter techniques to locate and execute shellcode,...
CVE-2018-25265
LanSpy 2.0.1.159 contains a local buffer overflow vulnerability in the scan section that allows local attackers to execute arbitrary code by exploiting structured exception handling mechanisms. Attackers can craft malicious payloads using egghunter techniques to locate and execute shellcode,...
CVE-2018-25265 LanSpy 2.0.1.159 Local Buffer Overflow
LanSpy 2.0.1.159 contains a local buffer overflow vulnerability in the scan section that allows local attackers to execute arbitrary code by exploiting structured exception handling mechanisms. Attackers can craft malicious payloads using egghunter techniques to locate and execute shellcode,...
PT-2026-34461
LanSpy 2.0.1.159 contains a local buffer overflow vulnerability in the scan section that allows local attackers to execute arbitrary code by exploiting structured exception handling mechanisms. Attackers can craft malicious payloads using egghunter techniques to locate and execute shellcode,...
EUVD-2019-20008
Base64 Decoder 1.1.2 contains a stack-based buffer overflow vulnerability that allows local attackers to execute arbitrary code by triggering a structured exception handler SEH overwrite. Attackers can craft a malicious input file that overflows a buffer, overwrites the SEH chain with a POP-POP-R...
CVE-2019-25634
Base64 Decoder 1.1.2 contains a stack-based buffer overflow vulnerability that allows local attackers to execute arbitrary code by triggering a structured exception handler SEH overwrite. Attackers can craft a malicious input file that overflows a buffer, overwrites the SEH chain with a POP-POP-R...
CVE-2019-25634 Base64 Decoder 1.1.2 Local Buffer Overflow SEH Egghunter
Base64 Decoder 1.1.2 contains a stack-based buffer overflow vulnerability that allows local attackers to execute arbitrary code by triggering a structured exception handler SEH overwrite. Attackers can craft a malicious input file that overflows a buffer, overwrites the SEH chain with a POP-POP-R...
CVE-2019-25634
The vulnerability CVE-2019-25634 affects Base64 Decoder 1.1.2. It is a stack-based buffer overflow in the decoder that enables local code execution when an SEH chain is overwritten via crafted input. An egghunter payload can locate and execute shellcode after overflowing a buffer and placing a PO...
CVE-2019-25634 Base64 Decoder 1.1.2 Local Buffer Overflow SEH Egghunter
Base64 Decoder 1.1.2 contains a stack-based buffer overflow vulnerability that allows local attackers to execute arbitrary code by triggering a structured exception handler SEH overwrite. Attackers can craft a malicious input file that overflows a buffer, overwrites the SEH chain with a POP-POP-R...