HP Data Protector 4.00-SP1b43064 Remote Memory Leak/Dos Exploit

Exploit for unknown platform in category dos / poc =============================================================== HP Data Protector 4.00-SP1b43064 Remote Memory Leak/Dos Exploit =============================================================== !/usr/bin/env python POC Memory disclosure/ Denial Of...

win32 PEB!NtGlobalFlags shellcode 14 bytes

No description provided by source. / PEB!NtGlobalFlags 14 BYTES Author: Koshi Description: Uses PEB method to determine whether a debugger is attached to the running proccess or not. No 9x. : Length: 14 Bytes Registers Used: EAX,ESI,ESP Compiled: jpXV34dd3v09Fh / / 00401000 6A 70 PUSH 70 00401002...

win32 PEB!NtGlobalFlags shellcode 14 bytes

Exploit for win32 platform in category shellcode ========================================== win32 PEB!NtGlobalFlags shellcode 14 bytes ========================================== / PEB!NtGlobalFlags 14 BYTES Author: Koshi Description: Uses PEB method to determine whether a debugger is attached to...

win32 PEB!NtGlobalFlags shellcode 14 bytes

win32 PEB!NtGlobalFlags shellcode 14 bytes. Shellcode exploit for win32 platform / PEB!NtGlobalFlags 14 BYTES Author: Koshi Description: Uses PEB method to determine whether a debugger is attached to the running proccess or not. No 9x. : Length: 14 Bytes Registers Used: EAX,ESI,ESP Compiled:...

win32 PEB Kernel32.dll ImageBase Finder (Ascii Printable) 49 bytes

No description provided by source. / PEB Kernel32.dll ImageBase Finder Ascii Printable Author: Koshi Description: Uses PEB method to locate the ImageBase of Kernel32.dll ONLY supports NT/2K/XP.. sorry no 9X. ImageBase will be returned in EAX. No null bytes, obviously, so no need to encode really...

win32 PEB Kernel32.dll ImageBase Finder Alphanumeric 67 bytes

No description provided by source. / PEB Kernel32.dll ImageBase Finder Alphanumeric Author: Koshi Description: Uses PEB method to locate the ImageBase of Kernel32.dll ONLY supports NT/2K/XP.. sorry no 9X. ImageBase will be returned in EAX. No null bytes, obviously, so no need to encode really...

win32 PEB Kernel32.dll ImageBase Finder (Ascii Printable) 49 bytes

Exploit for win32 platform in category shellcode ================================================================== win32 PEB Kernel32.dll ImageBase Finder Ascii Printable 49 bytes ================================================================== / PEB Kernel32.dll ImageBase Finder Ascii Printab...

win32 PEB Kernel32.dll ImageBase Finder Alphanumeric 67 bytes

Exploit for win32 platform in category shellcode ============================================================= win32 PEB Kernel32.dll ImageBase Finder Alphanumeric 67 bytes ============================================================= / PEB Kernel32.dll ImageBase Finder Alphanumeric Author: Koshi...

win32 PEB Kernel32.dll ImageBase Finder Ascii Printable 49 bytes

win32 PEB Kernel32.dll ImageBase Finder Ascii Printable 49 bytes. Shellcode exploit for win32 platform / PEB Kernel32.dll ImageBase Finder Ascii Printable Author: Koshi Description: Uses PEB method to locate the ImageBase of Kernel32.dll ONLY supports NT/2K/XP.. sorry no 9X. ImageBase will be...

win32 PEB Kernel32.dll ImageBase Finder Alphanumeric 67 bytes

win32 PEB Kernel32.dll ImageBase Finder Alphanumeric 67 bytes. Shellcode exploit for win32 platform / PEB Kernel32.dll ImageBase Finder Alphanumeric Author: Koshi Description: Uses PEB method to locate the ImageBase of Kernel32.dll ONLY supports NT/2K/XP.. sorry no 9X. ImageBase will be returned ...

Eznet 3.5.0 Remote Stack Overflow Universal Exploit

No description provided by source. !/usr/bin/perl -w COROMPUTER Crpt universal eZ v3.3 v3.5 remote exploit by kralor Crpt ---------------------------------------------------------------------------------------- versions tested & not vulnerables: v3.0 v3.1 v3.2 versions tested & vulnerables: v3.3...

subedit-poc.txt

/===Subedit Player build 4066 subtitle BoF vulnerability=========| | | SubEdit Player is a very popular player and subtitles | editor in Poland. It does not perform any boundery checks | on supplied subtitles. This causes buffer overrun and | throwing access violation exception on group of...

SubEdit Player build 4066 - subtitle Buffer Overflow (PoC)

SubEdit Player build 4066 - subtitle Buffer Overflow PoC /===Subedit Player build 4066 subtitle BoF vulnerability=========| | | SubEdit Player is a very popular player and subtitles | editor in Poland. It does not perform any boundery checks | on supplied subtitles. This causes buffer overrun and...

SubEdit Player build 4066 subtitle Buffer Overflow PoC

Exploit for unknown platform in category dos / poc ====================================================== SubEdit Player build 4066 subtitle Buffer Overflow PoC ====================================================== /===Subedit Player build 4066 subtitle BoF vulnerability=========| | | SubEdit...

SubEdit Player build 4066 - subtitle Buffer Overflow (PoC)

/===Subedit Player build 4066 subtitle BoF vulnerability=========| | | SubEdit Player is a very popular player and subtitles | editor in Poland. It does not perform any boundery checks | on supplied subtitles. This causes buffer overrun and | throwing access violation exception on group of...

Windows 9x/NT/2k/XP PEB method 31 bytes

No description provided by source. / 004045F4 6A 30 PUSH 30 004045F6 59 POP ECX 004045F7 64:8B09 MOV ECX,DWORD PTR FS:ECX 004045FA 85C9 TEST ECX,ECX 004045FC 78 0C JS SHORT OllyTest.0040460A 004045FE 8B49 0C MOV ECX,DWORD PTR DS:ECX+C 00404601 8B71 1C MOV ESI,DWORD PTR DS:ECX+1C 00404604 AD LODS...

Windows 9x/NT/2k/XP Reverse Generic Shellcode w/o Loader 249 bytes

No description provided by source. We use the PEB for the Output/Input/Error Handles. typedef struct PEB BOOLEAN InheritedAddressSpace ; BOOLEAN ReadImageFileExecOptions ; BOOLEAN BeingDebugged ; BOOLEAN Spare ; HANDLE Mutant ; PVOID ImageBaseAddress ; PPEB LDR DATA LoaderData ; PRTL USER PROCESS...

Windows 9x/NT/2k/XP PEB method 29 bytes

No description provided by source. // // PEB way of getting kernel32 imagebase by loco. // Compatible with all Win9x/NT based operating systems. // // Gives kernel32 imagebase in eax when executing. // 29 bytes, only eax/esi used. // // Originally discovered by Dino Dai Zovi. // // include stdio....

Windows 9x/NT/2k/XP PEB method 35 bytes

No description provided by source. /This is a 35 byte C implementation of the use of the PEB method to get the kernel32 base address on Windows. This is generic code designed to run on both Windows 9x and NT based systems. The code has been optimized to not have any 00h bytes so that you wont hav...

win32 download and execute 124 bytes

Exploit for win32 platform in category shellcode ==================================== win32 download and execute 124 bytes ==================================== ; ; relocateable dynamic runtime assembly code example using hash lookup for IE exploits only ; the URLMON.DLL must already be loaded int...