QNAP Netatalk 3.1.12 - Authentication Bypass

QNAP Netatalk 3.1.12 - Authentication Bypass Exploit Title: QNAP Netatalk Authentication Bypass Date: 12/20/2018 Original Exploit Author: Jacob Baines Modifications for QNAP devices: Mati Aharoni Vendor Homepage: http://netatalk.sourceforge.net/ Software Link:...

MailEnable 1.8 - Remote Format String Denial of Service Exploit

No description provided by source. See-security Technologies ltd. http://www.see-security.com MailEnable 1.8 Format String DoS exploit Discovered by Mati Aharoni Coded by tal zeltzer import sys import time import socket def PrintLogo: print...

Savant Web Server 3.1 - Remote Buffer Overflow Exploit

No description provided by source. Savant web server Buffer Overflow Exploit Discovered by : Mati Aharoni Coded by : Tal Zeltzer and Mati Aharoni www.see-security.com FOR RESEACRH PURPOSES ONLY! import struct import socket sc = \x90 21 win32adduser - PASS=pwd EXITFUNC=thread USER=X Size=232...

PacketTrap Networks pt360 2.0.39 TFTPD - Remote DoS Exploit

No description provided by source. !/usr/bin/python PacketTrap Networks pt360 2.0.39 TFTPD Remote DOS Coded by Mati Aharoni muts..at..offensive-security.com http://www.offensive-security.com/0day/pt360dos.py.txt import socket import sys host = '172.16.167.134' port = 69 try: s =...

Savant Web Server 3.1 Remote Buffer Overflow Exploit

No description provided by source. Savant web server Buffer Overflow Exploit Discovered by : Mati Aharoni Coded by : Tal Zeltzer and Mati Aharoni www.see-security.com FOR RESEACRH PURPOSES ONLY! import struct import socket sc = "\x90" 21 win32adduser - PASS=pwd EXITFUNC=thread USER=X Size=232...

divx66.py.txt

!/usr/bin/python DivX 6.6 SRT SEH overwrite PoC Tested on XP SP2 Coded by Mati Aharoni, aka muts and Chris Hadnagy, aka loganWHD muts..at..offensive-security...dot..com chris..at..offensive-security...dot..com http://www.offensive-security.com/0day/divx66.py.txt Notes: Unicode buffer - real pita...

DivX Player 6.6.0 - .srt File Buffer Overflow (SEH)

DivX Player 6.6.0 - .srt File Buffer Overflow SEH !/usr/bin/python DivX 6.6 SRT SEH overwrite PoC Tested on XP SP2 Coded by Mati Aharoni, aka muts and Chris Hadnagy, aka loganWHD muts..at..offensive-security...dot..com chris..at..offensive-security...dot..com...

DivX Player 6.6.0 SRT File SEH Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ====================================================== DivX Player 6.6.0 SRT File SEH Buffer Overflow Exploit ====================================================== !/usr/bin/python DivX 6.6 SRT SEH overwrite PoC Tested on XP SP2 Coded by Ma...

Novel eDirectory HTTP Denial of Service Exploit

No description provided by source. !/usr/bin/python Novel eDirectory HTTP DOS Discovered and coded by Mati Aharoni muts..at..offensive-security.com http://www.offensive-security.com/0day/novel-edir.py.txt import socket import os import sys from time import sleep biff=""2048 print " Payload sent "...

HP OpenView NNM 7.5.1 OVAS.exe SEH PRE AUTH Overflow Exploit

Exploit for unknown platform in category remote exploits ============================================================ HP OpenView NNM 7.5.1 OVAS.exe SEH PRE AUTH Overflow Exploit ============================================================ !/usr/bin/python HP OpenView NNM 7.5.1 OVAS.EXE Pre...

Mcafee EPO 4.0 - 'FrameworkService.exe' Remote Denial of Service

!/usr/bin/python Mcafee EPO 4.0 and others FrameworkService.exe DOS More than meets the eye Discovered and coded by Mati Aharoni muts..at..offensive-security.com http://www.offensive-security.com/0day/mcafeeagain.py.txt EAX 00840C30 ECX 00837830 EDX 01EACF18 EBX 00004000 ESP 01EAFF04 EBP 01EAFF38...

Novel eDirectory HTTP Denial of Service Exploit

Exploit for unknown platform in category dos / poc =============================================== Novel eDirectory HTTP Denial of Service Exploit =============================================== !/usr/bin/python Novel eDirectory HTTP DOS Discovered and coded by Mati Aharoni...

PacketTrap Networks pt360 2.0.39 TFTPD Remote DoS Exploit

Exploit for unknown platform in category dos / poc ========================================================= PacketTrap Networks pt360 2.0.39 TFTPD Remote DoS Exploit ========================================================= !/usr/bin/python PacketTrap Networks pt360 2.0.39 TFTPD Remote DOS Coded...

sourceforge-tftpd.py.txt

!/usr/bin/python TFTP Server for Windows V1.4 ST 0day http://sourceforge.net/projects/tftp-server/ Tested on Windows Vista SP0. Coded by Mati Aharoni muts..at..offensive-security.com http://www.offensive-security.com/0day/sourceforge-tftpd.py.txt bt sourceforge-tftpd.py TFTP Server for Windows V1...

HP OpenView Network Node Manager 07.50 - CGI Remote Buffer Overflow

HP OpenView Network Node Manager 07.50 - CGI Remote Buffer Overflow !/usr/bin/python HP OpenView Network Node Manager CGI Buffer Overflow Tested on NNM Release B.07.50 / Windows 2000 server SP4 http://www.zerodayinitiative.com/advisories/ZDI-07-071.html Coded by Mati Aharoni...

hpopen-overflow.txt

!/usr/bin/python HP OpenView Network Node Manager CGI Buffer Overflow Tested on NNM Release B.07.50 / Windows 2000 server SP4 http://www.zerodayinitiative.com/advisories/ZDI-07-071.html Coded by Mati Aharoni muts|offensive-security|com http://www.offensive-security.com/0day/hpnnm.txt Notes: Vanil...

HP OpenView Network Node Manager 07.50 - CGI Remote Buffer Overflow

!/usr/bin/python HP OpenView Network Node Manager CGI Buffer Overflow Tested on NNM Release B.07.50 / Windows 2000 server SP4 http://www.zerodayinitiative.com/advisories/ZDI-07-071.html Coded by Mati Aharoni muts|offensive-security|com http://www.offensive-security.com/0day/hpnnm.txt Notes: Vanil...

ibmtivoli-preauth.txt

!/usr/bin/python IBM Tivoli Provisioning Manager PRE AUTH Remote Exploit http://dvlabs.tippingpoint.com/advisory/TPTI-07-05 Tested on windows 2003 server SP0. Coded by Mati Aharoni [email protected] http://www.offensive-security.com/0day/ibm-ti-pro.py Notes: Egghunter can take upto 5...

IBM Lotus Domino Server 6.5 - Remote Overflow

!/usr/bin/python IBM Lotus Domino Server 6.5 PRE AUTH Remote Exploit Tested on windows 2003 server SP0. Coded by Mati Aharoni [email protected] http://www.offensive-security.com Notes: Not the the faint of heart. Iris, I love you Skeleton exploit shamelessly ripped off Winny Thomas bt...

See-security Advisory: Format string vulnerability in MailEnable 1.8

See-security Technologies ltd. http://www.see-security.com - Product Information MailEnable Standard Edition provides robust SMTP and POP3 services for Windows NT/2000/XP/2003 systems. - Vulnerability Description MailEnable contains a format string vulnerability in the it handles SMTP mailto:...