Heap spraying Adobe Illustrator

Due to the recent patched vulnerabilities in Adobe Illustrator CVE-2012-2023, CVE-2012-2024, CVE-2012-2025, and CVE-2012-2026 it becomes interesting to analyze the exploitability facts of the .ai file format. Early versions of the AI file format are true EPS files with a restricted, compact synta...

HT Editor Spawning Root Shell

Exploit for linux platform in category remote exploits !/usr/bin/python Exploit Title: HT Editor Spawning Root Shell Date: 29-Mar-2012 Author: blusp10it Version: 2.0.18 Download: http://sourceforge.net/projects/hte/files/ht-source/ht-2.0.18.tar.gz Tested on: BackTrack 4 R2, Ubuntu 10.04 Run with:...

Sysax Multi Server 5.53 - SFTP (Authenticated) (SEH)

!/usr/bin/python Title: Sysax Multi Server 5.53 SFTP Post Auth SEH Exploit Egghunter Author: Craig Freyman @cd1zz Tested on: XP SP3 32bit Software Versions Tested: 5.53 Date Discovered: Febrary 22, 2012 Vendor Contacted: Febrary 23, 2012 Vendor Response: February 27, 2012 Vendor Fix: Version 5.55...

DPScan : Drupal Security Scanner Released

DPScan : Drupal Security Scanner Released The First Security scanner for Drupal CMS has been released by Ali Elouafiq, on his Blog. His team develop a tool that will enumerate at least the modules used by Drupal so we can simulate a White Box audit on our private machines. This small tool is publ...

Sysax Multi Server 5.52 - File Rename Buffer Overflow Remote Code Execution (Egghunter)

Sysax Multi Server 5.52 - File Rename Buffer Overflow Remote Code Execution Egghunter !/usr/bin/python Title: Sysax Multi Server " sys.exit1 target = sys.argv1 port = intsys.argv2 user = sys.argv3 password = sys.argv4 opersys = sys.argv5 base64 encode the provided creds creds =...

Microsoft Windows - Assembly Execution (MS12-005)

Microsoft Windows - Assembly Execution MS12-005 Exploit Title: MS12-005 : Microsoft Windows Assembly Execution Vulnerability Date: 1/14/2012 Author: Byoungyoung Lee, http://exploitshop.wordpress.com Version: Windows 7 32bit, fully patched until Jan 2012 Tested on: Windows 7 32bit CVE :...

Microsoft Windows - Assembly Execution (MS12-005)

Exploit Title: MS12-005 : Microsoft Windows Assembly Execution Vulnerability Date: 1/14/2012 Author: Byoungyoung Lee, http://exploitshop.wordpress.com Version: Windows 7 32bit, fully patched until Jan 2012 Tested on: Windows 7 32bit CVE : CVE-2012-0013 PoC:...

PHP Hash Table Collision - Denial of Service (PoC)

!/usr/bin/env python """ This script was written by Christian Mehlmauer https://twitter.com/!/FireFart Sourcecode online at: https://github.com/FireFart/HashCollision-DOS-POC Original PHP Payloadgenerator taken from https://github.com/koto/blog-kotowicz-net-examples/tree/master/hashcollision...

TFTP-Server-1.4ST

Stack-Based buffer overflow in TFTP Server SP 1.4 for Windows allow remote attackers to cause a DoS or execute arbitrary code via a long filename in a read or write request. The vulnerability is caused due to a boundary error in the handling of filenames and can be exploited to cause a stack-base...

Splunk Remote Root Exploit

Exploit for multiple platform in category remote exploits from sec1httplib.requestbuilder import Requestobj from sec1httplib.threaddispatcher import import threading import re import urlparse import sys import urllib import base64 from optparse import OptionParser import sys """ Source:...

Google Chrome PoC, killing thread

No description provided by source. -' pigtail23 -' -' www.remoteshell.de -.OO .- OO.- OO .-/ -. .' \ ,--' ,----'/ '. / ,---. ,--',--. .----. .----. ...--'' | OO' .-OO |'--...| \ /.\ | OO| -',-. |.-, | | |.' | | | | | .-, --. .--''-'|.' | | | | |OO .' .' | | ..'| |/ | | './ | | | .-. || |/| ' |...

Google Chrome - Killing Thread (PoC)

Google Chrome - Killing Thread PoC -' pigtail23 -' -' www.remoteshell.de -.OO .- OO.- OO .-/ | '-' | | | | | | | | |'-| |'| |\ -' / --' --' -----' --' --' --' --' -----' ------' ---'' October 22, 2011 Ohh nice! What u doing google? Thx 4 ur bug! 0o Google Chrome PoC, killing thread. Exploitable o...

Findmyhash - Find Cracked Hashes Online

Findmyhash - Find Cracked Hashes Online findmyhash is a Python script which has been developed to find different types of password hashes using multiple cracking online services. In case that it does not find a favourable "cracked" hash, it will also present you with relevant Google search...

Findmyhash - Find Cracked Hashes Online

Findmyhash - Find Cracked Hashes Online findmyhash is a Python script which has been developed to find different types of password hashes using multiple cracking online services. In case that it does not find a favourable "cracked" hash, it will also present you with relevant Google search...

Zinf Media Player Local Buffer Overflow

Exploit for windows platform in category local exploits !/usr/bin/python import sys print "" print " Exploit Title: Zinf Media Player Local Buffer Overflow " print " Author: Angel Injection " print " Email: email protected " print " Date: 25/8/2011 " print " Home Page: http://1337day.com...

Knock v1.5 - Subdomain Scanner , allows to bypass wildcard

Knock v1.5 - Subdomain Scanner , allows to bypass wildcard Knock is a python script, written by Gianni 'guelfoweb' Amato, designed to enumerate subdomains on a target domain through a wordlist. This program is self contained, doesn't need to be installed in any particular location. All it needs i...

Knock v1.5 - Subdomain Scanner , allows to bypass wildcard

Knock v1.5 - Subdomain Scanner , allows to bypass wildcard Knock is a python script, written by Gianni 'guelfoweb' Amato, designed to enumerate subdomains on a target domain through a wordlist. This program is self contained, doesn't need to be installed in any particular location. All it needs i...

Xlight FTP Server远程缓冲区溢出漏洞

Bugtraq ID: 49255 Xlight FTP Server是一款FTP服务程序。 Xlight FTP Server不正确提交用户的请求，远程攻击者可以利用漏洞对应用程序进行缓冲区溢出攻击，可能以应用程序上下文执行任意代码。 XLight FTP Server 3.7 厂商解决方案 目前没有详细解决方案提供： http://www.xlightftpd.com/index.htm !/usr/bin/python from socket import import sys, struct, os, time print "\nXlightFTP Server v3.7.0...

Download Accelerator plus (DAP) 9.7 M3U File Buffer Overflow Exploit (Unicode SEH)

No description provided by source. !/usr/bin/python +Exploit Title: Download Accelarator plusDAP 9.7 M3U File Buffer Overflow ExploitUNICODE-SEH +Date: 23\07\2011 +Author: C4SS!0 G0M3S +Software Link: http://download.speedbit.com/dap97baix.exe +Version: 9.7 +Tested On: WIN-XP SP3 Brazilian...

phpcms2008 password brute-force-vulnerability warning-the black bar safety net

Source: Dis9 Team users==chowner Description, This is indeed relatively painless do not have what meaning, is before me to detect a station when discovery is phpcms2008, see encryption way, just got a try the next, find the code section of the post too little it didn't have the heart just to scra...