Windows Meterpreter (Reflective Injection), Reverse TCP Stager (DNS)

Inject the Meterpreter server DLL via the Reflective Dll Injection payload staged. Requires Windows XP SP2 or newer. Connect back to the attacker This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule...

Windows Inject DLL, Reverse TCP Stager (DNS)

Inject a custom DLL into the exploited process. Connect back to the attacker This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 321 include Msf::Payload::Stager include...

Windows Command Shell, Reverse TCP Stager (DNS)

Spawn a piped command shell staged. Connect back to the attacker This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 321 include Msf::Payload::Stager include...

VNC Server (Reflective Injection), Reverse TCP Stager (DNS)

Inject a VNC Dll via a reflective loader staged. Connect back to the attacker This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 321 include Msf::Payload::Stager include...

Medium security hole in Varnish reverse proxy

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Nth Dimension Security Advisory NDSA20090908 Date: 26th September 2009 Author: Tim Brown mailto:[email protected] URL: http://www.nth-dimension.org.uk/ / http://www.machine.org.uk/ Product: Varnish 2.0.4 http://www.varnish-cache.org/ Vendor:...

Simple middleman（MITM, Man-In-The-Middle attack-vulnerability warning-the black bar safety net

Used tools: ScoopLM.exe 和nt2crbf.exe the www.icehack.comyou can download With ScoopLM. exe the forward and reverse captured. ! On the figure, I is positive to capture my environment is native 1 9 2. 1 6 8. 0. 3 to 1 9 2. 1 6 8. 0. 1 0 initiate the ipc$connection ! The machine ScoopLM. exe...

Oracle XDB FTP Service UNLOCK Buffer Overflow

vulnerabilities network level/stack based buffer overflow + special network layer attack + implemented over http/XML-db/ftp==windows XDB + connecting:8080 = operation: win 32--xdb overflow + author mc2s3lector + yogyacarderlink.web.id/KeDai Computerworks.com exploit win32 include include include...

Luxology Modo 401 .LXO Integer Overflow Vulnerability

Exploit for unknown platform in category remote exploits ===================================================== Luxology Modo 401 .LXO Integer Overflow Vulnerability ===================================================== Vendors contacted: Luxology LLC Release mode: User release 2. Vulnerability...

Orbital Viewer 1.04 SEH Overflow

!/usr/bin/python sinn3r: I'm just submitting this for mrme Orbital Viewer v1.04 .orb 0day Local Universal SEH Overflow Exploit Date: 27 Feb 2010 CVE: CVE-2010-0688 Download: http://www.orbitals.com/orb/ov.htm Found & exploited by: mrme http://net-ninja.net Greetz to:...

Orbital Viewer v1.04 (.orb) 0day Local Universal SEH Overflow Exploit

Exploit for unknown platform in category local exploits ===================================================================== Orbital Viewer v1.04 .orb 0day Local Universal SEH Overflow Exploit ===================================================================== !/usr/bin/python Orbital Viewer...

OtsTurntables Free 1.00.047 Universal Buffer Overflow

!/usr/bin/python OtsTurntables Free v1.00.047 .olf Universal Buffer Overflow Exploit Date: 14-01-2010 Author: mrme Software Link: http://www.otsturntables.com/download-otsturntables-free/ Version: 1.00.047 Tested on: Windows XP sp3 Greetz:...

Internet Explorer 6 Web Server Exploit

Author : Ahmed Obied [email protected] Modify by: syniack [email protected] This program acts as a web server that generates an exploit to target a vulnerability CVE-2010-0249 in Internet Explorer. The exploit was tested using Internet Explorer 6 on Windows XP SP3. The exploit's payload...

Quick Player 1.2 Unicode Buffer Overflow

!/usr/bin/python Vulnerability : Quick Player v1.2 unicode buffer overflow exploit coded by : mrme reference : http://www.exploit-db.com/exploits/10759 corelanc0d3r Tested on : XP SP3 En VirtualBox Greetz to : Corelan Security Team::corelanc0d3r/EdiStrosar/Rick2600/MarkoT mrme@backtrack:$ nc -lvp...

Quick Player v1.2 Unicode Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ================================================= Quick Player v1.2 Unicode Buffer Overflow Exploit ================================================= Title: Quick Player v1.2 Unicode Buffer Overflow Exploit CVE-ID: OSVDB-ID: Author: mrme...

Quick Player 1.2 - Unicode Buffer Overflow (1)

!/usr/bin/python Vulnerability : Quick Player v1.2 unicode buffer overflow exploit coded by : mrme reference : http://www.exploit-db.com/exploits/10759 corelanc0d3r Tested on : XP SP3 En VirtualBox Greetz to : Corelan Security Team::corelanc0d3r/EdiStrosar/Rick2600/MarkoT mrme@backtrack:$ nc -lvp...

[SECURITY] Fedora 11 Update: nginx-0.7.64-1.fc11

Nginx engine x is an HTTPS server, HTTPS reverse proxy and IMAP/POP3 proxy server written by Igor Sysoev...

[SECURITY] Fedora 10 Update: nginx-0.7.64-1.fc10

Nginx engine x is an HTTPS server, HTTPS reverse proxy and IMAP/POP3 proxy server written by Igor Sysoev...

[SECURITY] Fedora 12 Update: nginx-0.7.64-1.fc12

Nginx engine x is an HTTPS server, HTTPS reverse proxy and IMAP/POP3 proxy server written by Igor Sysoev...

Mercur Messaging 2005 IMAP Login Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Mercur...

Serenity Audio Player Playlist - '.m3u' Local Buffer Overflow

!/usr/bin/python Exploit Title : Serenity Audio Player Playlist .m3u BOF Discovered by : Rick from Corelan Team ricks2600atgmaildotcom Author : mrme Author contact : seeleymagicathotmaildotcom Date : nov 24th, 2009 Type : local and remote code execution OS : Windows XP sp3 Product : Serenity Audi...