SMB Create Pipe Request Fuzzer

This module sends a series of SMB create pipe requests using malicious strings. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SMB Create Pipe Request Fuzzer', 'Description' = %q This module...

SSH Version Corruption

This module sends a series of SSH requests with a corrupted version string This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SSH Version Corruption', 'Description' = %q This module sends a series...

SSH 1.5 Version Fuzzer

This module sends a series of SSH requests with malicious version strings. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SSH 1.5 Version Fuzzer', 'Description' = %q This module sends a series...

SMB Negotiate SMB2 Dialect Corruption

This module sends a series of SMB negotiate requests that advertise a SMB2 dialect with corrupted bytes. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SMB Negotiate SMB2 Dialect Corruption',...

SSH 2.0 Version Fuzzer

This module sends a series of SSH requests with malicious version strings. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SSH 2.0 Version Fuzzer', 'Description' = %q This module sends a series...

TDS Protocol Login Request Username Fuzzer

This module sends a series of malformed TDS login requests. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'TDS Protocol Login Request Username Fuzzer', 'Description' = %q This module sends a...

TDS Protocol Login Request Corruption Fuzzer

This module sends a series of malformed TDS login requests. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'TDS Protocol Login Request Corruption Fuzzer', 'Description' = %q This module sends a...

Microsoft Releases New SDL Security Tools

Microsoft’s Security Development Lifecycle SDL team has released two new security tools to help developers test and verify the security of software programs. The tools — BinScope Binary Analyzer and MiniFuzz File Fuzzer — are available for download at no cost. The BinScope Binary Analyzer can be...

Safari 4.0.2 (WebKit Parsing of Floating Point Numbers) BOF PoC

No description provided by source. Three weeks ago, I coded a nice little browser fuzzer, and started playing with various browsers: IE, Firefox, Safari, Chrome, Opera... I found an interesting Safari crash after couple of hours of fuzzing. It was a stack overflow and a smile on my face. Since...

Apple Safari 4.0.2 - WebKit Parsing of Floating Point Numbers Buffer Overflow (PoC)

Three weeks ago, I coded a nice little browser fuzzer, and started playing with various browsers: IE, Firefox, Safari, Chrome, Opera... I found an interesting Safari crash after couple of hours of fuzzing. It was a stack overflow and a smile on my face. Since then, every now and then I took some...

PHP Fuzzer Framework - Default Location Insecure Temporary File Creation

PHP Fuzzer Framework - Default Location Insecure Temporary File Creation // source: https://www.securityfocus.com/bid/35924/info PHP Fuzzer Framework creates temporary files in an insecure manner. An attacker with local access could potentially exploit this issue to overwrite and execute arbitrar...

PHP Fuzzer Framework - Default Location Insecure Temporary File Creation

// source: https://www.securityfocus.com/bid/35924/info PHP Fuzzer Framework creates temporary files in an insecure manner. An attacker with local access could potentially exploit this issue to overwrite and execute arbitrary code with the privileges of the victim user. Successfully exploiting th...

Asterisk IAX2 - Attacked IAX Fuzzer Resource Exhaustion (Denial of Service)

Asterisk IAX2 - Attacked IAX Fuzzer Resource Exhaustion Denial of Service !/usr/bin/perl -w udp IAX protocol fuzzer Created: Blake Cornell Exploits found with this code can be found at http://www.securityscraper.com/ Released under the VoIPER project Do not hesitate to show enthusiasm and support...

Asterisk IAX2 Resource Exhaustion via Attacked IAX Fuzzer

Exploit for multiple platform in category dos / poc ========================================================= Asterisk IAX2 Resource Exhaustion via Attacked IAX Fuzzer ========================================================= !/usr/bin/perl -w udp IAX protocol fuzzer Created: Blake Cornell Exploi...

Asterisk IAX2 - Attacked IAX Fuzzer Resource Exhaustion (Denial of Service)

!/usr/bin/perl -w udp IAX protocol fuzzer Created: Blake Cornell Exploits found with this code can be found at http://www.securityscraper.com/ Released under the VoIPER project Do not hesitate to show enthusiasm and support and help develop this further. use strict; use IO::Socket; use...

Zervit Web Server 0.02 - Remote Buffer Overflow (PoC)

Zervit Web Server 0.02 - Remote Buffer Overflow PoC Zervit Webserver 0.02 Buffer Overflow By: e.wiZz! Site: www.balcansecurity.com Found with ServMeNot world's sexiest fuzzer :P In the wild... Vend0r site: http://www.ohloh.net/projects/mereo / When requested uri isn't found,it goes to char tmp255...

PGP Desktop 9.0.6 (PGPwded.sys) Local Denial of Service Exploit

No description provided by source. --------------------------PGP Desktop 9.0.6 Denial Of Service--------------- Author: Giuseppe 'Evilcry' Bonfa' E-Mail: evilcry AT GMAIL DOT COM Profile: http://evilcry.netsons.org Website: http://evilfingers.com/ Release Date: 23/12/2008...

PGP Desktop 9.0.6 - 'PGPwded.sys' Local Denial of Service

--------------------------PGP Desktop 9.0.6 Denial Of Service--------------- Author: Giuseppe 'Evilcry' Bonfa' E-Mail: evilcry AT GMAIL DOT COM Profile: http://evilcry.netsons.org Website: http://evilfingers.com/ Release Date: 23/12/2008 +-------------------------------------------------+ Product...

fhttpd-dos.txt

!/usr/bin/perl Jeremy Brown [email protected]/http://jbrownsec.blogspot.com http://www.fhttpd.org / fhttpd-0.4.2.tar.gz WARNING: VERY OLD Program received signal SIGSEGV, Segmentation fault. 0x0804b42d in un64 s=0x809b2d2 "" at util.cc:69 69 ifc2!=-2 c3=rptr3; else c3=-2; gdb bt 0 0x0804b42d i...

fhttpd 0.4.2 - 'un64()' Remote Denial of Service

!/usr/bin/perl Jeremy Brown [email protected]/http://jbrownsec.blogspot.com http://www.fhttpd.org / fhttpd-0.4.2.tar.gz WARNING: VERY OLD Program received signal SIGSEGV, Segmentation fault. 0x0804b42d in un64 s=0x809b2d2 "" at util.cc:69 69 ifc2!=-2 c3=rptr3; else c3=-2; gdb bt 0 0x0804b42d i...