QNAP Netatalk 3.1.12 - Authentication Bypass

QNAP Netatalk 3.1.12 - Authentication Bypass Exploit Title: QNAP Netatalk Authentication Bypass Date: 12/20/2018 Original Exploit Author: Jacob Baines Modifications for QNAP devices: Mati Aharoni Vendor Homepage: http://netatalk.sourceforge.net/ Software Link:...

Savant Web Server 3.1 - Remote Buffer Overflow Exploit

No description provided by source. Savant web server Buffer Overflow Exploit Discovered by : Mati Aharoni Coded by : Tal Zeltzer and Mati Aharoni www.see-security.com FOR RESEACRH PURPOSES ONLY! import struct import socket sc = \x90 21 win32adduser - PASS=pwd EXITFUNC=thread USER=X Size=232...

PacketTrap Networks pt360 2.0.39 TFTPD - Remote DoS Exploit

No description provided by source. !/usr/bin/python PacketTrap Networks pt360 2.0.39 TFTPD Remote DOS Coded by Mati Aharoni muts..at..offensive-security.com http://www.offensive-security.com/0day/pt360dos.py.txt import socket import sys host = '172.16.167.134' port = 69 try: s =...

MailEnable 1.8 - Remote Format String Denial of Service Exploit

No description provided by source. See-security Technologies ltd. http://www.see-security.com MailEnable 1.8 Format String DoS exploit Discovered by Mati Aharoni Coded by tal zeltzer import sys import time import socket def PrintLogo: print...

Savant Web Server 3.1 Remote Buffer Overflow Exploit

No description provided by source. Savant web server Buffer Overflow Exploit Discovered by : Mati Aharoni Coded by : Tal Zeltzer and Mati Aharoni www.see-security.com FOR RESEACRH PURPOSES ONLY! import struct import socket sc = "\x90" 21 win32adduser - PASS=pwd EXITFUNC=thread USER=X Size=232...

DivX Player 6.6.0 - .srt File Buffer Overflow (SEH)

DivX Player 6.6.0 - .srt File Buffer Overflow SEH !/usr/bin/python DivX 6.6 SRT SEH overwrite PoC Tested on XP SP2 Coded by Mati Aharoni, aka muts and Chris Hadnagy, aka loganWHD muts..at..offensive-security...dot..com chris..at..offensive-security...dot..com...

divx66.py.txt

!/usr/bin/python DivX 6.6 SRT SEH overwrite PoC Tested on XP SP2 Coded by Mati Aharoni, aka muts and Chris Hadnagy, aka loganWHD muts..at..offensive-security...dot..com chris..at..offensive-security...dot..com http://www.offensive-security.com/0day/divx66.py.txt Notes: Unicode buffer - real pita...

DivX Player 6.6.0 SRT File SEH Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ====================================================== DivX Player 6.6.0 SRT File SEH Buffer Overflow Exploit ====================================================== !/usr/bin/python DivX 6.6 SRT SEH overwrite PoC Tested on XP SP2 Coded by Ma...

Novel eDirectory HTTP Denial of Service Exploit

No description provided by source. !/usr/bin/python Novel eDirectory HTTP DOS Discovered and coded by Mati Aharoni muts..at..offensive-security.com http://www.offensive-security.com/0day/novel-edir.py.txt import socket import os import sys from time import sleep biff=""2048 print " Payload sent "...

Novel eDirectory HTTP Denial of Service Exploit

Exploit for unknown platform in category dos / poc =============================================== Novel eDirectory HTTP Denial of Service Exploit =============================================== !/usr/bin/python Novel eDirectory HTTP DOS Discovered and coded by Mati Aharoni...

Mcafee EPO 4.0 - 'FrameworkService.exe' Remote Denial of Service

!/usr/bin/python Mcafee EPO 4.0 and others FrameworkService.exe DOS More than meets the eye Discovered and coded by Mati Aharoni muts..at..offensive-security.com http://www.offensive-security.com/0day/mcafeeagain.py.txt EAX 00840C30 ECX 00837830 EDX 01EACF18 EBX 00004000 ESP 01EAFF04 EBP 01EAFF38...

HP OpenView NNM 7.5.1 OVAS.exe SEH PRE AUTH Overflow Exploit

Exploit for unknown platform in category remote exploits ============================================================ HP OpenView NNM 7.5.1 OVAS.exe SEH PRE AUTH Overflow Exploit ============================================================ !/usr/bin/python HP OpenView NNM 7.5.1 OVAS.EXE Pre...

PacketTrap Networks pt360 2.0.39 TFTPD Remote DoS Exploit

Exploit for unknown platform in category dos / poc ========================================================= PacketTrap Networks pt360 2.0.39 TFTPD Remote DoS Exploit ========================================================= !/usr/bin/python PacketTrap Networks pt360 2.0.39 TFTPD Remote DOS Coded...

sourceforge-tftpd.py.txt

!/usr/bin/python TFTP Server for Windows V1.4 ST 0day http://sourceforge.net/projects/tftp-server/ Tested on Windows Vista SP0. Coded by Mati Aharoni muts..at..offensive-security.com http://www.offensive-security.com/0day/sourceforge-tftpd.py.txt bt sourceforge-tftpd.py TFTP Server for Windows V1...

hpopen-overflow.txt

!/usr/bin/python HP OpenView Network Node Manager CGI Buffer Overflow Tested on NNM Release B.07.50 / Windows 2000 server SP4 http://www.zerodayinitiative.com/advisories/ZDI-07-071.html Coded by Mati Aharoni muts|offensive-security|com http://www.offensive-security.com/0day/hpnnm.txt Notes: Vanil...

HP OpenView Network Node Manager 07.50 - CGI Remote Buffer Overflow

HP OpenView Network Node Manager 07.50 - CGI Remote Buffer Overflow !/usr/bin/python HP OpenView Network Node Manager CGI Buffer Overflow Tested on NNM Release B.07.50 / Windows 2000 server SP4 http://www.zerodayinitiative.com/advisories/ZDI-07-071.html Coded by Mati Aharoni...

HP OpenView Network Node Manager 07.50 - CGI Remote Buffer Overflow

!/usr/bin/python HP OpenView Network Node Manager CGI Buffer Overflow Tested on NNM Release B.07.50 / Windows 2000 server SP4 http://www.zerodayinitiative.com/advisories/ZDI-07-071.html Coded by Mati Aharoni muts|offensive-security|com http://www.offensive-security.com/0day/hpnnm.txt Notes: Vanil...

ibmtivoli-preauth.txt

!/usr/bin/python IBM Tivoli Provisioning Manager PRE AUTH Remote Exploit http://dvlabs.tippingpoint.com/advisory/TPTI-07-05 Tested on windows 2003 server SP0. Coded by Mati Aharoni [email protected] http://www.offensive-security.com/0day/ibm-ti-pro.py Notes: Egghunter can take upto 5...

IBM Lotus Domino Server 6.5 - Remote Overflow

!/usr/bin/python IBM Lotus Domino Server 6.5 PRE AUTH Remote Exploit Tested on windows 2003 server SP0. Coded by Mati Aharoni [email protected] http://www.offensive-security.com Notes: Not the the faint of heart. Iris, I love you Skeleton exploit shamelessly ripped off Winny Thomas bt...

See-security Advisory: Format string vulnerability in MailEnable 1.8

See-security Technologies ltd. http://www.see-security.com - Product Information MailEnable Standard Edition provides robust SMTP and POP3 services for Windows NT/2000/XP/2003 systems. - Vulnerability Description MailEnable contains a format string vulnerability in the it handles SMTP mailto:...