PYSEC-2020-69

Python oic is a Python OpenID Connect implementation. In Python oic before version 1.2.1, there are several related cryptographic issues affecting client implementations that use the library. The issues are: 1 The IdToken signature algorithm was not checked automatically, but only if the expected...

RGui 3.5.0 Buffer Overflow

!/usr/bin/python Exploit Author: bzyo Twitter: @bzyo Exploit Title: RGui 3.5.0 - Local Buffer Overflow SEHDEP Bypass Date: 01-09-2018 Vulnerable Software: RGui 3.5.0 Vendor Homepage: https://www.r-project.org/ Version: 3.5.0 Software Link:...

R 3.4.4 (Windows 10 x64) - Buffer Overflow (DEPASLR Bypass)

R 3.4.4 Windows 10 x64 - Buffer Overflow DEPASLR Bypass !/usr/bin/python R 3.4.4 Win10 x86 Buffer Overflow discovered by: bzyo author: Charles Truscott I love you Alison Thompson OAM tested on: Windows 10 x86 rebooted for practice defeating ASLR/DEP -------------------------------------------- GU...

Reversing malware in a custom format: Hidden Bee elements

Malware can be made of many components. Often, we encounter macros and scripts that work as malicious downloaders. Some functionalities can also be achieved by position-independent code—so-called shellcode. But when it comes to more complex elements or core modules, we almost take it for granted...

Easy MPEG to DVD Burner 1.7.11 - Local Buffer Overflow (SEH) (DEP Bypass)

Easy MPEG to DVD Burner 1.7.11 - Local Buffer Overflow SEH DEP Bypass !/usr/bin/python ------------------------------------------------------------------------------------------------------------------------------------ Exploit: Easy MPEG to DVD Burner 1.7.11 SEH + DEP Bypass Local Buffer Overflo...

(0Day) ActivePDF Toolkit ImageToPDF IAT Overwrite Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of ActivePDF Toolkit. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the ImageToPDF...

Easy CD-DA Recorder - (PLS File) Buffer Overflow

No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = NormalRanking include Msf::Exploit::FILEFORMAT def initializeinfo =...

Novell ZENworks Configuration Management Preboot Service 0x6c Buffer Overflow

This module exploits a remote buffer overflow in the ZENworks Configuration Management. The vulnerability exists in the Preboot service and can be triggered by sending a specially crafted packet with the opcode 0x6c PROXYCMDGETNEXTSTEP to port 998/TCP. The module has been successfully tested on...

[Перевод] Manually unpacking Asprotect 1.23 RC4 - 1.3.08.24

Введение Asprotect - это один из сложнейших пакеров для реверсера средней квалификации, так что для первого урока по распаковке защитных схем я выбрал именно эту защиту. Так же Вы выучите как восстановить IAT Import Address Table, возвратить перемещенные байты и как использовать лог трассировки...

Veritas Backup Exec Name Service - Remote Overflow (Metasploit)

$Id: nameservice.rb 9583 2010-06-22 19:11:05Z todb $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Windows/x86 (2000) - Reverse TCP (192.168.0.247:8721/TCP) Connect + Vampiric Import Shellcode (179 bytes)

Windows/x86 2000 - Reverse TCP 192.168.0.247:8721/TCP Connect + Vampiric Import Shellcode 179 bytes. Shellcode exploit for Windowsx86 platform ; Title: Windows 2000 Vampiric Import Reverse Connect ; Platforms: Windows 2000 ; Function: Attach to dbmssocn.dll, use IAT to connect, read/exec payload ...

Use IAT hook to achieve universal windows password Backdoor-vulnerability warning-the black bar safety net

Author: clyfish windows has a generic password? Go ask bill uncle. The first matter is not really there, we can implement such a backdoor. Briefly explain the windows login process in some process. the winlogon process with gina. dll to obtain a user name and password, through the LPC passed to t...

TFTP Server for Windows 1.4 ST Remote BSS Overflow Exploit

No description provided by source. !/usr/bin/perl TFTPServer SP v1.4 for Windows remote .bss overflow exploit The Service or the RunStandAlone version. URL: http://sourceforge.net/projects/tftp-server/ Author: tix or tixxDZ [email protected] Date: 07/05/2008...