American Fuzzy Lop Utilities: afl-utils

Utilities for automated crash sample processing/analysis, easy afl-fuzz job management and corpus optimization afl-utils is a collection of utilities to assist fuzzing with american-fuzzy-lop afl . afl-utils includes tools for: automated crash sample collection, verification, reduction and analys...

Extensible Debugger UI For Hackers: Voltron

Voltron is an extensible debugger UI toolkit written in Python. It aims to improve the user experience of various debuggers LLDB, GDB, VDB and WinDbg by enabling the attachment of utility views that can retrieve and display data from the debugger host. By running these views in other TTYs, you ca...

Texas Instrument Emulator 3.03 - Local Buffer Overflow

Exploit Author: Juan Sacco - http://www.exploitpack.com - [email protected] Program affected: Texas Instruments calculators emulator without GDB Version: 3.03-nogdb+dfsg-3 Tested and developed under: Kali Linux 2.0 x86 - https://www.kali.org Program description: TiEmu emulates Texas...

PHP 7.0.0 - Format String

Overview -------------------------------------------- A fun little format string vulnerability exists in PHP 7.0.0 due to how non-existent class names are handled. From my limited research I believe this issue is likely exploitable for full code execution see test script below. This issue does no...

OpenVPN Gather Credentials

This module grab OpenVPN credentials from a running process in Linux. Note: --auth-nocache must not be set in the OpenVPN command line. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'OpenVPN...

Oracle: Security Advisory (ELSA-2013-0522)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 22 : golang-1.5.1-0.fc22 (2015-15619)

golang-1.5.1-0.fc21 - update to go1.5.1 golang-1.5.1-0.fc22 - update to go1.5.1 golang-1.5.1-0.el6 - update to go1.5.1 golang-1.5.1-0.fc23 - update to go1.5.1 ---- bz1258166 remove srpm macros, for go-srpm-macros ---- update to go1.5; shared objects for x8664; gdb fixes; full http smuggle fix;...

Fedora 21 : golang-1.5.1-0.fc21 (2015-15618)

golang-1.5.1-0.fc21 - update to go1.5.1 golang-1.5.1-0.fc22 - update to go1.5.1 golang-1.5.1-0.el6 - update to go1.5.1 golang-1.5.1-0.fc23 - update to go1.5.1 ---- update to go1.5; shared objects for x8664; gdb fixes; full http smuggle fix; fixes for tests Note that Tenable Network Security has...

SUSE-OU-2015:1803-1 Optional update for gcc5, binutils and gdb

The core toolchain components were updated to newer version to bring various features, improved performance and usability, and also bugfixes. This GNU Compiler Collection feature update is provided for the Intel/AMD x8664, IBM zSeries and IBM PowerPC 64bit architectures. The GNU Compiler Collecti...

Modular visual interface for GDB: GDB dashboard

Modular visual interface for GDB in Python This comes as a standalone single-file .gdbinit which, among the other things, enables a configurable dashboard showing the most relevant information during the program execution. Its main goal is to reduce the number of GDB commands issued to inspect th...

OpenLDAP 2.4.42 - ber_get_next Denial of Service Vulnerability

OpenLDAP versions 2.4.42 and below suffer from a remote denial of service vulnerability. Exploit Title: OpenLDAP 2.4.42 bergetnext DOS Date: 11/09/15 Exploit Author: Denis Andzakovic Vendor Homepage: http://www.openldap.org/ Software Link:...

OpenLDAP 2.4.42 - ber_get_next Denial of Service

Exploit Title: OpenLDAP 2.4.42 bergetnext DOS Date: 11/09/15 Exploit Author: Denis Andzakovic - Security-Assessment.com Vendor Homepage: http://www.openldap.org/ Software Link: ftp://ftp.openldap.org/pub/OpenLDAP/openldap-release/openldap-2.4.42.tgz Version: Y Y \ / /| / \ /||| / / /.-. / /:wq...

Amazon Linux: Security Advisory (ALAS-2013-159)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 14.04 NetKit FTP Client - Crash/DoS PoC Vulnerability

Exploit for linux platform in category dos / poc + Author: TUNISIAN CYBER + Exploit Title: Ubuntu 14.04 NetKit FTP Client Crash/DoS POC + Date: 15-08-2015 + Type: Local Exploits + Tested on: Ubuntu 14.04 Works with other distros 11.04:https://www.exploit-db.com/exploits/17806/ + Twitter: @TCYB3R...

NetKit FTP Client (Ubuntu 14.04) - Crash/Denial of Service (PoC)

Author: TUNISIAN CYBER + Exploit Title: Ubuntu 14.04 NetKit FTP Client Crash/DoS POC + Date: 15-08-2015 + Type: Local Exploits + Tested on: Ubuntu 14.04 Works with other distros 11.04:https://www.exploit-db.com/exploits/17806/ + Twitter: @TCYB3R cyb3rus@ubuntu:$ gdp ftp No command 'gdp' found,...

linux common exploit techniques practice-vulnerability warning-the black bar safety net

1.1 purpose of the 1.1.1 writing this article is to summarize some time ago learned,the second is to pwn also not getting the students some help,after all they learn when still encountered many difficulties the following are my actual operation,write more detailed,contains some of my own...

TestDisk 6.14 - Check_OS2MB Stack Buffer Overflow (PoC)

TestDisk 6.14 - CheckOS2MB Stack Buffer Overflow PoC , , . '.' '. ', . , '. , .', , / / / \ \ ==/ /\ \ / / \ / \ / / | \ \ Y Y \ / /| / \ /||| / / /.-. / /:wq x.0 '=.|w|.=' =''"''=. presents.. TestDisk 6.14 CheckOS2MB Stack Buffer Overflow Affected versions: TestDisk 6.14 - Linux, Windows...

TestDisk 6.14 Check_OS2MB Stack Buffer Overflow Vulnerability

This document details a stack based buffer overflow vulnerability within TestDisk version 6.14. A buffer overflow is triggered within the software when a malicious disk image is attempted to be recovered. This may be leveraged by an attacker to crash TestDisk and gain control of program execution...

TestDisk 6.14 - 'Check_OS2MB' Stack Buffer Overflow (PoC)

, , . '.' '. ', . , '. , .', , / / / \ \ ==/ /\ \ / / \ / \ / / | \ \ Y Y \ / /| / \ /||| / / /.-. / /:wq x.0 '=.|w|.=' =''"''=. presents.. TestDisk 6.14 CheckOS2MB Stack Buffer Overflow Affected versions: TestDisk 6.14 - Linux, Windows and Mac OSX PDF:...

TestDisk 6.14 Check_OS2MB Stack Buffer Overflow

, , . '.' '. ', . , '. , .', , / / / \ \ ==/ /\ \ / / \ / \ / / | \ \ Y Y \ / /| / \ /||| / / /.-. / /:wq x.0 '=.|w|.=' =''"''=. presents.. TestDisk 6.14 CheckOS2MB Stack Buffer Overflow Affected versions: TestDisk 6.14 - Linux, Windows and Mac OSX PDF:...