osed-scripts

osed-scripts bespoke tooling for offensive security's Windows Usermode Exploit Dev course OSED Table of Contents Standalone Scripts egghunter.py find-gadgets.py shellcoder.py install-mona.sh attach-process.ps1 WinDbg Scripts find-ppr.py find-bad-chars.py search.py Standalone Scripts Installation:...

OSCE-prep

OSCE-prep Exploits made practicing for OSCE eipintegard.py...

HTML5 Video Player 1.2.5 - Local Buffer Overflow (Non SEH)

!/usr/bin/python Exploit Title: HTML5 Video Player 1.2.5 - Local Buffer Overflow - Non SEH Date: 27/01/2019 Exploit Author: Dino Covotsos - Telspace Systems Vendor Homepage: http://www.html5videoplayer.net/download.html Software: http://www.html5videoplayer.net/html5videoplayer-setup.exe Contact:...

R 3.4.4 XP SP3 - Buffer Overflow (Non SEH)

R 3.4.4 XP SP3 - Buffer Overflow Non SEH !/usr/bin/python Exploit Title: R 3.4.4 - Local Buffer Overflow Windows XP SP3 Date: 21/01/2019 Exploit Author: Dino Covotsos - Telspace Systems Vendor Homepage: https://cloud.r-project.org/bin/windows/ Contact: [email protected] Twitter:...

osce.gob.pe XSS vulnerability

Open Bug Bounty ID: OBB-566382 Description| Value ---|--- Affected Website:| osce.gob.pe Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

osce.gob.pe XSS vulnerability

Vulnerable URL: http://www.osce.gob.pe/red/default.asp?msg=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 68101 VIP website status:| No Coordinated Disclosure Timeline:...

CVE-2008-3364: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the ObjRemoveCtrl Class ActiveX control in OfficeScanRemoveCtrl.dll 7.3.0.1020 in Trend Micro OfficeScan Corp Edition OSCE Web-Deployment 7.0, 7.3 build 1343 Patch 4 and other builds, and 8.0; Client Server Messaging Security CSM 3.5 and 3.6; and Worry-Free Business Security WF...

CVE-2006-5157

Vulnerability summary (CVE-2006-5157): Trend Micro OfficeScan Corporate Edition (OSCE) prior to 7.3 Patch 1 contains a format-string flaw in the ATXCONSOLE.OCX ActiveX control (Management Console) that can allow remote code execution via crafted input in the remote client install name search, whe...