VLC Media Player RealText Subtitle Overflow

This module exploits a stack buffer overflow vulnerability in VideoLAN VLC use exploit/windows/fileformat/vlc/realtext msf undefinedrealtext show actions ...actions... msf undefinedrealtext set ACTION msf undefinedrealtext show options ...show and set options... msf undefinedrealtext run This...

Husdawg, LLC. System Requirements Lab ActiveX Unsafe Method

This module allows attackers to execute code via an unsafe method in Husdawg, LLC. System Requirements Lab ActiveX Control sysreqlab2.dll 2.30.0.0 Module Options msf use exploit/windows/browser/systemrequirementslab/unsafe msf undefinedunsafe show actions ...actions... msf undefinedunsafe set...

Microsoft Host Integration Server 2006 Command Execution Vulnerability

This module exploits a command-injection vulnerability in Microsoft Host Integration Server 2006. Module Options msf use auxiliary/admin/ms/ms08/059his2006 msf undefined059his2006 show actions ...actions... msf undefined059his2006 set ACTION msf undefined059his2006 show options ...show and set...

Linux Command Shell, Reverse TCP Inline

Connect back to attacker and spawn a command shell This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 184 include Msf::Payload::Single include Msf::Sessions::CommandShellOptions def...

Windows Meterpreter (skape/jt Injection), Bind IPv6 TCP Stager (Windows x86)

Inject the meterpreter server DLL staged. Listen for an IPv6 connection Windows x86 This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 298 include Msf::Payload::Stager include...

VNC Authentication None Detection

Detect VNC servers that support the "None" authentication method. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'VNC Authentication None Detection', 'Description' = 'Detect VNC servers that...

macrovision-overwrite.txt

MC has already made a Metasploit module for this, and Symantec has released BloodHound signatures for general isusweb abuse. Code is inline and attached. ---------------- Macrovision Installshield isusweb.dll SEH Overwrite Exploit function Check var buf = 'A'; while buf.length = 599 buf = buf +...

SOCKS Proxy UNC Path Redirection

This module provides a Socks proxy service that redirects all HTTP requests to a web page that loads a UNC path. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SOCKS Proxy UNC Path Redirection...

Solaris srsexec Arbitrary File Reader

This module exploits a vulnerability in NetCommander 3.2.3 and 3.2.5. When srsexec is executed in debug -d verbose -v mode, the first line of an arbitrary file can be read due to the suid bit set. The most widely accepted exploitation vector is reading /etc/shadow, which will reveal root's hash f...

Novell NetWare LSASS CIFS.NLM Driver Stack Buffer Overflow

This module exploits a stack buffer overflow in the NetWare CIFS.NLM driver. Since the driver runs in the kernel space, a failed exploit attempt can cause the OS to reboot. Module Options msf use exploit/netware/smb/lsass/cifs msf undefinedcifs show actions ...actions... msf undefinedcifs set...

SIP Invite Spoof

This module will create a fake SIP invite request making the targeted device ring and display fake caller id information. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SIP Invite Spoof',...

Apple iOS MobileSafari LibTIFF Buffer Overflow

This module exploits a buffer overflow in the version of libtiff shipped with firmware versions 1.00, 1.01, 1.02, and 1.1.1 of the Apple iPhone. iPhones which have not had the BSD tools installed will need to use a special payload. Module Options msf use exploit/apple/ios/browser/safarilibtiff ms...

eIQ-LM-1.txt

!/usr/bin/perl -w metasploit module for EIQ Licence manager overflow Provided by ri0t of Bastard Labs package Msf::Exploit::EiQLicense494; use base "Msf::Exploit"; use strict; use Pex::Text; my $advanced = ; my $info = 'Name' = 'EIQ License Manager Overflow', 'Authors' = 'ri0t [email protected], K...

eIQnetworks License Manager Remote Buffer Overflow Exploit (494)

No description provided by source. !/usr/bin/perl -w metasploit module for EIQ Licence manager overflow Provided by ri0t of Bastard Labs package Msf::Exploit::EiQLicense494; use base "Msf::Exploit"; use strict; use Pex::Text; my $advanced = ; my $info = 'Name' = 'EIQ License Manager Overflow',...

PeerCast URL Handling Buffer Overflow

This module exploits a stack buffer overflow in PeerCast use exploit/windows/http/peercast/url msf undefinedurl show actions ...actions... msf undefinedurl set ACTION msf undefinedurl show options ...show and set options... msf undefinedurl run This module requires Metasploit:...

Linux Execute Command

Execute an arbitrary command or just a /bin/sh shell This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework Exec ---- Executes an arbitrary command. module MetasploitModule CachedSize = 43 include Msf::Payload::Single includ...

Call+4 Dword XOR Encoder

Call+4 Dword XOR Encoder This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Call+4 Dword XOR Encoder', 'Description' = 'Call+4 Dword XOR Encoder', 'Author' = 'hdm', 'spoonm' , 'Arch' = ARCHX86,...

Computer Associates License Server GETCONFIG Overflow

This module exploits an vulnerability in the CA License Server network service. By sending an excessively long GETCONFIG packet the stack may be overwritten. Module Options msf use exploit/windows/license/calicserv/getconfig msf undefinedgetconfig show actions ...actions... msf undefinedgetconfig...

wins_ms04_045.pm

This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...

Dell OpenManage POST Request Heap Overflow (win32)

This module exploits a heap overflow in the Dell OpenManage Web Server omws32.exe, versions 3.2-3.7.1. The vulnerability exists due to a boundary error within the handling of POST requests, where the application input is set to an overly long file name. This module will crash the web server,...