89 matches found
MS15-061 Windows NTUserMessageCall Win32k Kernel Pool Overflow (Schlamperei)
No description provided by source. include include / Exploiting MS15-061 with reverse engineering Win32k.sys by steps : 1: hook PEB callback Function 2: trigger vulnerability make proper Window to lead vulnerable function 3: replace fake object with NtUserDefSetText in Desktop heap inside PEB...
Eznet 3.5.0 - Remote Stack Overflow Universal Exploit
No description provided by source. !/usr/bin/perl -w COROMPUTER Crpt universal eZ v3.3 v3.5 remote exploit by kralor Crpt ---------------------------------------------------------------------------------------- versions tested & not vulnerables: v3.0 v3.1 v3.2 versions tested & vulnerables: v3.3...
Write-to-file Shellcode (Win32)
No description provided by source. ; Write-to-file Shellcode ; ; This shellcode was used in the exploit for: CVE-2010-0425 ; Supported: Windows 2000, WinXP, Server 2003, Server 2008, Vista, Windows 7 ; ; Size: 278 bytes ;...
[Process PEB Finder] Tool to find and display PEB Address of running Processes
Process PEB Finder is the console based tool to find and display PEB Address of running Processes on your system. PEB Process Environment Block is the part of Process memory where is stores important information including loaded modules, startup paramenters, environment variables, debug informati...
FutureSoft TFTP Server 2000 - Transfer-Mode Overflow (Metasploit)
$Id: futuresofttransfermode.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
SHOUTcast DNAS/Win32 1.9.4 - File Request Format String Overflow (Metasploit)
$Id: shoutcastformat.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framewor...
win32/xp sp3 (Ru) IsDebuggerPresent() 9 bytes
Exploit for win32 platform in category shellcode ============================================= win32/xp sp3 Ru IsDebuggerPresent 9 bytes ============================================= Tested on Windows XP Pro Rus sp3. Should work anywhere, starting with WinNT. 33 C0 xor eax,eax 64 8B 50 30 mov...
win xp sp2 PEB ISbeingdebugged shellcode
No description provided by source. name: win xp sp2 PEB ISbeingdebugged shellcode Date: 14.12.2009. here is the ASM code made using masm32 if program is being run under debugger the shellcode wil start beeping :D //////////////////////begin/////////////////////////////////////// .386 .model flat,...
win32/xp sp2 PEB ISbeingdebugged shellcode
Exploit for win32 platform in category shellcode ================================ win32/xp sp2 PEB ISbeingdebugged ================================ name: win xp sp2 PEB ISbeingdebugged shellcode Date: 14.12.2009. here is the ASM code made using masm32 if program is being run under debugger the...
SentinelLM UDP Buffer Overflow
$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'SentinelLM U...
HP Data Protector 4.00-sp1 43064 Denial Of Service
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'HP Data Protector...
HP Data Protector 4.00-SP1b43064 - Remote Memory LeakDenial of Service
HP Data Protector 4.00-SP1b43064 - Remote Memory LeakDenial of Service !/usr/bin/env python POC Memory disclosure/ Denial Of Service HP Data protector 4.00-sp1 43064 Tested for Windows Version Only ''' Buggy code @dpwinsup module of dpwingad process running at 3817/TCP port dpwinsup.10275F80...
HP Data Protector 4.00-SP1b43064 Remote Memory Leak/Dos Exploit
Exploit for unknown platform in category dos / poc =============================================================== HP Data Protector 4.00-SP1b43064 Remote Memory Leak/Dos Exploit =============================================================== !/usr/bin/env python POC Memory disclosure/ Denial Of...
win32 PEB!NtGlobalFlags shellcode 14 bytes
No description provided by source. / PEB!NtGlobalFlags 14 BYTES Author: Koshi Description: Uses PEB method to determine whether a debugger is attached to the running proccess or not. No 9x. : Length: 14 Bytes Registers Used: EAX,ESI,ESP Compiled: jpXV34dd3v09Fh / / 00401000 6A 70 PUSH 70 00401002...
win32 PEB!NtGlobalFlags shellcode 14 bytes
Exploit for win32 platform in category shellcode ========================================== win32 PEB!NtGlobalFlags shellcode 14 bytes ========================================== / PEB!NtGlobalFlags 14 BYTES Author: Koshi Description: Uses PEB method to determine whether a debugger is attached to...
win32 PEB!NtGlobalFlags shellcode 14 bytes
win32 PEB!NtGlobalFlags shellcode 14 bytes. Shellcode exploit for win32 platform / PEB!NtGlobalFlags 14 BYTES Author: Koshi Description: Uses PEB method to determine whether a debugger is attached to the running proccess or not. No 9x. : Length: 14 Bytes Registers Used: EAX,ESI,ESP Compiled:...
win32 PEB Kernel32.dll ImageBase Finder (Ascii Printable) 49 bytes
No description provided by source. / PEB Kernel32.dll ImageBase Finder Ascii Printable Author: Koshi Description: Uses PEB method to locate the ImageBase of Kernel32.dll ONLY supports NT/2K/XP.. sorry no 9X. ImageBase will be returned in EAX. No null bytes, obviously, so no need to encode really...
win32 PEB Kernel32.dll ImageBase Finder Alphanumeric 67 bytes
No description provided by source. / PEB Kernel32.dll ImageBase Finder Alphanumeric Author: Koshi Description: Uses PEB method to locate the ImageBase of Kernel32.dll ONLY supports NT/2K/XP.. sorry no 9X. ImageBase will be returned in EAX. No null bytes, obviously, so no need to encode really...
win32 PEB Kernel32.dll ImageBase Finder (Ascii Printable) 49 bytes
Exploit for win32 platform in category shellcode ================================================================== win32 PEB Kernel32.dll ImageBase Finder Ascii Printable 49 bytes ================================================================== / PEB Kernel32.dll ImageBase Finder Ascii Printab...
win32 PEB Kernel32.dll ImageBase Finder Alphanumeric 67 bytes
Exploit for win32 platform in category shellcode ============================================================= win32 PEB Kernel32.dll ImageBase Finder Alphanumeric 67 bytes ============================================================= / PEB Kernel32.dll ImageBase Finder Alphanumeric Author: Koshi...