VeryPDF HTML Converter 2.0 - Local Buffer Overflow (SEH/ToLower() Bypass)

Exploit Title: VeryPDF HTML Converter v2.0 SEH/ToLower Bypass Buffer Overflow Date: 9-6-2015 Target tested: Windows 7 x86/x64 Software Link: http://www.verypdf.com/htmltools/winhtmltools.exe Exploit Author: Robbie Corley Contact: [email protected] Website: CVE: Category: Local Exploit...

Boxoft WAV to MP3 Converter - convert 特性缓冲区溢出

首先拿到poc，先看看，明显的溢出，利用的是SEH的结构 !/usr/bin/python using=utf-8 f = open"malicious.aiff", "w" f.write"A"4132 f.write"\xeb\x06\x90\x90"nseh f.write"\xa4\x43\x40\x00"seh Shellcode: windows/exec - 277 bytes CMD=calc.exe f.write"\x90"20 f.write"\xba\xd5\x31\x08\x38\xdb\xcb\xd9\x74\x24\xf4\x5b\x29\xc9\xb1"...

AutoCAD DWG and DXF To PDF Converter 2.2 - Local Buffer Overflow

AutoCAD DWG and DXF To PDF Converter 2.2 - Local Buffer Overflow Exploit Title: AutoCAD DWG and DXF To PDF Converter v2.2 Buffer Overflow Date: 9-5-2015 Software Link: http://www.verypdf.com/autocad-dwg-dxf-to-pdf/dwgdxftopdfsetup.exe Exploit Author: Robbie Corley Contact: [email protected]...

AutoCAD DWG and DXF To PDF Converter 2.2 - Local Buffer Overflow

Exploit Title: AutoCAD DWG and DXF To PDF Converter v2.2 Buffer Overflow Date: 9-5-2015 Software Link: http://www.verypdf.com/autocad-dwg-dxf-to-pdf/dwgdxftopdfsetup.exe Exploit Author: Robbie Corley Contact: [email protected] Website: CVE: Category: Local Exploit Description: The title...

Filezilla Client 2.2.X - SEH Buffer Overflow Exploit

No description provided by source. !/usr/bin/env python2 coding: utf-8 import os,socket,threading,time import traceback visit: ly0n.me greetz: NBS MSGBOX "BrokenByte" msgbox = "\x68\x6e\x33\x72\x00\x68\x75\x74" "\x69\x30\x68\x5e\x58\x65\x63\x89" "\xe3\x68\x20\x20\x20\x00\x68\x68"...

PFTP Server 8.0f Lite - textfield Local SEH Buffer Overflow Exploit

Exploit for windows platform in category dos / poc Exploit Title: PFTP Server 8.0f lite SEH bypass technique tested on Win7x64 Date: 8-29-2015 Software Link: http://www.heise.de/download/the-personal-ftp-server-78679a5e8458e9faa7c5564617bdd4c4-1440883445-267104.html Exploit Author: Robbie Corley...

PFTP Server 8.0f Lite - textfield Local Buffer Overflow (SEH) (PoC)

PFTP Server 8.0f Lite - textfield Local Buffer Overflow SEH PoC Exploit Title: PFTP Server 8.0f lite SEH bypass technique tested on Win7x64 Date: 8-29-2015 Software Link: http://www.heise.de/download/the-personal-ftp-server-78679a5e8458e9faa7c5564617bdd4c4-1440883445-267104.html Exploit Author:...

Boxoft WAV to MP3 Converter - convert Feature Buffer Overflow Exploit

Exploit for windows platform in category local exploits Exploit Title: Boxoft wav to mp3 converter SEH bypass technique tested on Win7x64 Date: 8-31-2015 Software Link: http://www.boxoft.com/wav-to-mp3/ Exploit Author: Robbie Corley Contact: email protected Website: Target: Windows 7 Enterprise x...

PFTP Server 8.0f Buffer Overflow

Exploit Title: PFTP Server 8.0f lite SEH bypass technique tested on Win7x64 Date: 8-29-2015 Software Link: http://www.heise.de/download/the-personal-ftp-server-78679a5e8458e9faa7c5564617bdd4c4-1440883445-267104.html Exploit Author: Robbie Corley Contact: [email protected] Website: CVE:...

Boxoft WAV To MP3 Converter Buffer Overflow

Exploit Title: Boxoft wav to mp3 converter SEH bypass technique tested on Win7x64 Date: 8-31-2015 Software Link: http://www.boxoft.com/wav-to-mp3/ Exploit Author: Robbie Corley Contact: [email protected] Website: Target: Windows 7 Enterprise x64 CVE: Category: Local Exploit Description: A...

PFTP Server 8.0f Lite - textfield Local Buffer Overflow (SEH) (PoC)

Exploit Title: PFTP Server 8.0f lite SEH bypass technique tested on Win7x64 Date: 8-29-2015 Software Link: http://www.heise.de/download/the-personal-ftp-server-78679a5e8458e9faa7c5564617bdd4c4-1440883445-267104.html Exploit Author: Robbie Corley Contact: [email protected] Website: CVE:...

Konica Minolta FTP Utility 1.00 Post Auth CWD Command SEH Overflow

This module exploits an SEH overflow in Konica Minolta FTP Server 1.00. Konica Minolta FTP fails to check input size when parsing 'CWD' commands, which leads to an SEH overflow. Konica FTP allows anonymous access by default; valid credentials are typically unnecessary to exploit this vulnerabilit...

FTP Commander 8.02 - Overwrite (SEH)

FTP Commander 8.02 - Overwrite SEH Exploit Title: FTP Commander 'Costum Command' SEH Over-WriteBuffer Overflow. Date: 8/17/2015 Exploit Author: UnN0n Software Vendor : http://www.internet-soft.com/ Software Link: http://www.internet-soft.com/ftpcomm.htm Version: 8.02 Tested on: Windows 7 x3232 BI...

VideoCharge Studio - Local Buffer Overflow (SEH) (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'VideoCharge Studio Buffer Overflow SEH', 'Description' = %q This module exploits a stack based buffer overflow in VideoCharge Studio...

FTP Commander 8.02 - Overwrite (SEH)

Exploit Title: FTP Commander 'Costum Command' SEH Over-WriteBuffer Overflow. Date: 8/17/2015 Exploit Author: UnN0n Software Vendor : http://www.internet-soft.com/ Software Link: http://www.internet-soft.com/ftpcomm.htm Version: 8.02 Tested on: Windows 7 x3232 BIT Steps to Produce the Crash: 1- op...

MASM321 11 Quick Editor .qeditor 4.0g - .qse File Buffer Overflow (SEH) (ASLR + SafeSEH Bypass)

MASM321 11 Quick Editor .qeditor 4.0g - .qse File Buffer Overflow SEH ASLR + SafeSEH Bypass !/usr/bin/env python Exploit Title: MASM32 quick editor .QSE SEH Based Buffer Overflow ASLR & SAFESEH bypass Date: 2015-08-15 Exploit Author: St0rn Twitter: st0rnpentest Vendor Homepage:...

MASM321 11 Quick Editor '.qeditor' 4.0g - '.qse' File Buffer Overflow (SEH) (ASLR + SafeSEH Bypass)

!/usr/bin/env python Exploit Title: MASM32 quick editor .QSE SEH Based Buffer Overflow ASLR & SAFESEH bypass Date: 2015-08-15 Exploit Author: St0rn Twitter: st0rnpentest Vendor Homepage: http://www.masm32.com/ Software Link: http://www.masm32.com/masmdl.htm Version: MASM32 11 qeditor 4.0g Tested...

Microsoft HTML Help Compiler 4.74.8702.0 - SEH Based Overflow Exploit

Exploit for windows platform in category local exploits !/usr/bin/env python Exploit Title: Microsoft HTML Help Compiler SEH Based Overflow Date: 2015-08-13 Exploit Author: St0rn Twitter: st0rnpentest Vendor Homepage: www.microsoft.com Software Link:...

MASM32 Quick Editor Buffer Overflow

!/usr/bin/env python Exploit Title: MASM32 quick editor .QSE SEH Based Buffer Overflow ASLR & SAFESEH bypass Date: 2015-08-15 Exploit Author: St0rn Twitter: st0rnpentest Vendor Homepage: http://www.masm32.com/ Software Link: http://www.masm32.com/masmdl.htm Version: MASM32 11 qeditor 4.0g Tested...

Microsoft HTML Help Compiler 4.74.8702.0 - Local Overflow (SEH)

!/usr/bin/env python Exploit Title: Microsoft HTML Help Compiler SEH Based Overflow Date: 2015-08-13 Exploit Author: St0rn Twitter: st0rnpentest Vendor Homepage: www.microsoft.com Software Link:...