395 matches found
CVE-2002-1120
🐞 CVE-2002-1120: Savant Web Server 3.1 - スタックベースのバッファオーバーフロー エッグハンター 2000年代初頭のリモートメモリ破壊を、巧妙に細工されたHTTPリクエストで実演するSavant Web Server 3.1の古典的なスタックベースのバッファオーバーフロー（2025年のほとんどのバッファオーバーフローCVEよりも初心者に多くの知識を要求する2002年の脆弱性）。 📑 目次 このリポジトリの存在理由 この脆弱性が興味深い理由 背景と影響を受けるソフトウェア 脆弱性について クラッシュの発生 エクスプロイト 🎓 このリポジトリの存在理由...
CVE-2008-4654
CVE-2008-4654 VideoLan의 VLC Media Player 0.9.4가 TiVo 파일을 처리할 때 발생하는 스택 기반 버퍼 오버플로 취약점 CVE-2008-4654에 대한 완전한 기능을 갖춘 익스플로잇입니다. 64비트 Windows 시스템에서 실행되는 32비트 바이너리를 대상으로 하며, 제한된 스택 공간을 우회하기 위해 WOW64 egghunter를 사용합니다. 사용법 스크립트 업데이트 : 스크립트의 자리 표시자 buf = b'...'를 자신의 셸코드예: msfvenom에서 생성한 셸코드로 교체하세요. 다른 태그...
CVE-2009-3999-HP-Power-Manager-4.2-Build-7-Buffer-Overflow
OSCP 준비 과정에서 CVE-2009-3999HP Power Manager 4.2Build 7 버퍼 오버플로우 익스플로잇을 접하게 되었습니다. 이 최신 스크립트는 문자열과 바이트 처리에 관한 Python 3 호환성 문제를 해결하기 위해 업데이트되었으며, 페이로드가 원시 바이너리로 전송되어 메모리 손상을 방지하도록 합니다. 이 버전은 올바른 배드 캐릭터\x00\x1a\x3a\x26\x3f\x25\x23\x20\x0a\x0d\x2f\x2b\x0b\x5c를 포함한 셸코드를 동적으로 생성하는 자동화된 msfvenom 통합 기능을...
CVE-2004-2271-MiniShare-1.4.1-BOF
CVE-2004-2271 - MiniShare 1.4.1 - BOF 참고자료 https://nvd.nist.gov/vuln/detail/CVE-2004-2271 취약점 MiniShare 1.4.1은 수신하는 HTTP GET 요청에 대한 경계 검사가 없습니다. 길고 잘못된 형식의 HTTP GET 요청을 전송함으로써 공격자는 버퍼 오버플로우를 수행하고 시스템에서 임의 코드를 실행할 수 있습니다. 익스플로잇 참고사항 EIP가 덮어쓰여진 후 셸코드에 사용할 수 있는 공간은 210바이트에 불과합니다. 따라서 이 익스플로잇은 익스플로잇...
osed-scripts
osed-scripts オフェンシブセキュリティの Windows ユーザーモードエクスプロイト開発コース OSED 向けの特注ツール群 目次 スタンドアロンスクリプト egghunter.py find-gadgets.py shellcoder.py install-mona.sh attach-process.ps1 WinDbg スクリプト find-ppr.py find-bad-chars.py search.py スタンドアロンスクリプト インストール: pip3 install keystone-engine numpy egghunter.py...
SLAE
SecurityTube Linux 汇编专家 这篇博客文章是为完成 SecurityTube Linux 汇编专家认证的要求而创建的： http://securitytube-training.com/online-courses/securitytube-linux-assembly-expert/ 学生 ID：SLAE-1134 文章 作业 1：Linux x86 IPv4、IPv6 与双网络协议栈 TCP 绑定 Shell 作业 2：Linux x86 IPv4 和 IPv6 TCP 反向 Shell 作业 3：Linux x86 Egghunter（蛋搜索器） 作业 4：Lin...
Exploit-Framework
Exploit Framework !License: MIThttps://img.shields.io/bad...
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Hp Power_Manager
As part of my OSCP preparation I came across CVE-2009-3999 HP P...
EUVD-2018-21780
LanSpy 2.0.1.159 contains a local buffer overflow vulnerability in the scan section that allows local attackers to execute arbitrary code by exploiting structured exception handling mechanisms. Attackers can craft malicious payloads using egghunter techniques to locate and execute shellcode,...
CVE-2018-25265
LanSpy 2.0.1.159 contains a local buffer overflow vulnerability in the scan section that allows local attackers to execute arbitrary code by exploiting structured exception handling mechanisms. Attackers can craft malicious payloads using egghunter techniques to locate and execute shellcode,...
CVE-2018-25265
CVE-2018-25265 affects LanSpy 2.0.1.159 with a local buffer overflow in the scan section that can lead to arbitrary code execution. Attackers can craft payloads using egghunter techniques to locate and execute shellcode by manipulating the SEH chain; this is a local, no-interaction vulnerability ...
CVE-2018-25265 LanSpy 2.0.1.159 Local Buffer Overflow
LanSpy 2.0.1.159 contains a local buffer overflow vulnerability in the scan section that allows local attackers to execute arbitrary code by exploiting structured exception handling mechanisms. Attackers can craft malicious payloads using egghunter techniques to locate and execute shellcode,...
CVE-2018-25265 LanSpy 2.0.1.159 Local Buffer Overflow
LanSpy 2.0.1.159 contains a local buffer overflow vulnerability in the scan section that allows local attackers to execute arbitrary code by exploiting structured exception handling mechanisms. Attackers can craft malicious payloads using egghunter techniques to locate and execute shellcode,...
CVE-2018-25265
LanSpy 2.0.1.159 contains a local buffer overflow vulnerability in the scan section that allows local attackers to execute arbitrary code by exploiting structured exception handling mechanisms. Attackers can craft malicious payloads using egghunter techniques to locate and execute shellcode,...
PT-2026-34461
LanSpy 2.0.1.159 contains a local buffer overflow vulnerability in the scan section that allows local attackers to execute arbitrary code by exploiting structured exception handling mechanisms. Attackers can craft malicious payloads using egghunter techniques to locate and execute shellcode,...
EUVD-2019-20008
Base64 Decoder 1.1.2 contains a stack-based buffer overflow vulnerability that allows local attackers to execute arbitrary code by triggering a structured exception handler SEH overwrite. Attackers can craft a malicious input file that overflows a buffer, overwrites the SEH chain with a POP-POP-R...
CVE-2019-25634
Base64 Decoder 1.1.2 contains a stack-based buffer overflow vulnerability that allows local attackers to execute arbitrary code by triggering a structured exception handler SEH overwrite. Attackers can craft a malicious input file that overflows a buffer, overwrites the SEH chain with a POP-POP-R...
CVE-2019-25634 Base64 Decoder 1.1.2 Local Buffer Overflow SEH Egghunter
Base64 Decoder 1.1.2 contains a stack-based buffer overflow vulnerability that allows local attackers to execute arbitrary code by triggering a structured exception handler SEH overwrite. Attackers can craft a malicious input file that overflows a buffer, overwrites the SEH chain with a POP-POP-R...
CVE-2019-25634
Base64 Decoder 1.1.2 contains a stack-based buffer overflow vulnerability that allows local attackers to execute arbitrary code by triggering a structured exception handler SEH overwrite. Attackers can craft a malicious input file that overflows a buffer, overwrites the SEH chain with a POP-POP-R...
CVE-2019-25634 Base64 Decoder 1.1.2 Local Buffer Overflow SEH Egghunter
Base64 Decoder 1.1.2 contains a stack-based buffer overflow vulnerability that allows local attackers to execute arbitrary code by triggering a structured exception handler SEH overwrite. Attackers can craft a malicious input file that overflows a buffer, overwrites the SEH chain with a POP-POP-R...