Rekall - The Most Complete Memory Analysis Framework

The Rekall Framework is a completely open collection of tools, implemented in Python under the GNU General Public License, for the extraction of digital artifacts from volatile memory RAM samples. The extraction techniques are performed completely independent of the system being investigated but...

Microsoft Windows CVE-2015-1701 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary code with elevated privileges. Successful exploits will result in the complete compromise of affected computers. Technologies Affected Microsoft Windo...

Oracle Hyperion Smart View for Office 11.1.2.3.000 - Crash (PoC)

Exploit Title: Buffer Overflow in Oracle� Hyperion Smart View for Office DOS Exploit Author: sajith Vendor Homepage: http://oracle.com vulnerable Version: Fusion Edition 11.1.2.3.000 Build 157 Vulnerable Link: http://www.oracle.com/technetwork/middleware/smart-view-for-office/downloads/index.html...

Oracle Hyperion Smart View For Office 11.1.2.3.000 DoS

Exploit Title: Buffer Overflow in Oracle� Hyperion Smart View for Office DOS Exploit Author: sajith Vendor Homepage: http://oracle.com vulnerable Version: Fusion Edition 11.1.2.3.000 Build 157 Vulnerable Link: http://www.oracle.com/technetwork/middleware/smart-view-for-office/downloads/index.html...

Oracle Hyperion Smart View for Office 11.1.2.3.000 - Crash (PoC)

Oracle Hyperion Smart View for Office 11.1.2.3.000 - Crash PoC Exploit Title: Buffer Overflow in Oracle� Hyperion Smart View for Office DOS Exploit Author: sajith Vendor Homepage: http://oracle.com vulnerable Version: Fusion Edition 11.1.2.3.000 Build 157 Vulnerable Link:...

Microsoft Window (HTTP.sys) HTTP Request Parsing DoS (MS15-034)

Exploit for windows platform in category dos / poc Tested on Win Srv 2012R2. import socket,sys if lensys.argv=1: sys.exit'Give me an IP' Host = sys.argv1 def SendPayloadPayload, Host: s = socket.socketsocket.AFINET, socket.SOCKSTREAM s.connectHost, 80 s.sendPayload s.recv1024 s.close Make sure...

Microsoft Windows - HTTP.sys HTTP Request Parsing Denial of Service (MS15-034)

Microsoft Windows - HTTP.sys HTTP Request Parsing Denial of Service MS15-034 Tested on Win Srv 2012R2. import socket,sys if lensys.argv=1: sys.exit'Give me an IP' Host = sys.argv1 def SendPayloadPayload, Host: s = socket.socketsocket.AFINET, socket.SOCKSTREAM s.connectHost, 80 s.sendPayload...

Microsoft Windows - 'HTTP.sys' HTTP Request Parsing Denial of Service (MS15-034)

Tested on Win Srv 2012R2. import socket,sys if lensys.argv=1: sys.exit'Give me an IP' Host = sys.argv1 def SendPayloadPayload, Host: s = socket.socketsocket.AFINET, socket.SOCKSTREAM s.connectHost, 80 s.sendPayload s.recv1024 s.close Make sure iisstart.htm exist. Init = "GET /iisstart.htm...

Microsoft Windows HTTP.sys Proof Of Concept

/ UNTESTED - MS15-034 Checker THE BUG: 8a8b2112 56 push esi 8a8b2113 6a00 push 0 8a8b2115 2bc7 sub eax,edi 8a8b2117 6a01 push 1 8a8b2119 1bca sbb ecx,edx 8a8b211b 51 push ecx 8a8b211c 50 push eax 8a8b211d e8bf69fbff call HTTP!RtlULongLongAdd 8a868ae1 ; here ORIGNAL POC:...

Secunia Research: Microsoft Windows GDI "MRSETDIBITSTODEVICE ::bPlay()" EMF Parsing Memory Corruption Vulnerability

====================================================================== Secunia Research 15/04/2015 Microsoft Windows GDI "MRSETDIBITSTODEVICE ::bPlay" EMF Parsing Memory Corruption Vulnerability ====================================================================== Table of Contents Affected...

Microsoft Windows - HTTP.sys (PoC) (MS15-034)

Microsoft Windows - HTTP.sys PoC MS15-034 / UNTESTED - MS15-034 Checker THE BUG: 8a8b2112 56 push esi 8a8b2113 6a00 push 0 8a8b2115 2bc7 sub eax,edi 8a8b2117 6a01 push 1 8a8b2119 1bca sbb ecx,edx 8a8b211b 51 push ecx 8a8b211c 50 push eax 8a8b211d e8bf69fbff call HTTP!RtlULongLongAdd 8a868ae1 ; he...

Microsoft Window - HTTP.sys PoC (MS15-034)

Exploit for windows platform in category dos / poc / UNTESTED - MS15-034 Checker THE BUG: 8a8b2112 56 push esi 8a8b2113 6a00 push 0 8a8b2115 2bc7 sub eax,edi 8a8b2117 6a01 push 1 8a8b2119 1bca sbb ecx,edx 8a8b211b 51 push ecx 8a8b211c 50 push eax 8a8b211d e8bf69fbff call HTTP!RtlULongLongAdd...

Microsoft Windows Graphics Component Remote Code Execution Vulnerability (3046306)

This host is missing a critical security update according to Microsoft Bulletin MS15-035. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows Privilege Elevation Vulnerabilities (3049576)

This host is missing an important security update according to Microsoft Bulletin MS15-038. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows .NET Framework Information Disclosure Vulnerability (3048010)

This host is missing an important security update according to Microsoft Bulletin MS15-041. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows - 'HTTP.sys' (PoC) (MS15-034)

/ UNTESTED - MS15-034 Checker THE BUG: 8a8b2112 56 push esi 8a8b2113 6a00 push 0 8a8b2115 2bc7 sub eax,edi 8a8b2117 6a01 push 1 8a8b2119 1bca sbb ecx,edx 8a8b211b 51 push ecx 8a8b211c 50 push eax 8a8b211d e8bf69fbff call HTTP!RtlULongLongAdd 8a868ae1 ; here ORIGNAL POC:...

Microsoft Windows XML Core Services Security Feature Bypass Vulnerability (3046482)

This host is missing an important security update according to Microsoft Bulletin MS15-039. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2015-1644

Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 do not properly constrain impersonation levels, which allows local users to gain privileges via a crafted...

CVE-2015-1643

Microsoft Windows Server 2003 R2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 do not properly constrain impersonation levels, which allows local users to gain privileges via a crafted...

CVE-2015-1635

HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via crafted HTTP requests, aka "HTTP.sys Remote Code Execution Vulnerability."...