Registry OCX 1.5 - ActiveX Buffer Overflow

Tested on: Windows XP SP3 IE6/7 ' Registry OCX Remote Buffer Overflow ' Written by Blake buffer = String2008, "A" eip = unescape"%f3%30%9d%7c" 'eip 7C9D30F3 JMP ESP - SHELL32 nops = String20, unescape"%90" ' nop sled junk = String804, "D" ' bind shell port 4444 sc =...

VUPlayer 2.49 - '.m3u' File Universal Buffer Overflow (DEP Bypass) (1)

!/usr/bin/env python VUPlayer =2.49 .M3u Universal buffer overflow exploit w/ DEP bypass Author: mrme Download: http://vuplayer.com/ Tested on Wind0ws XP SP3 /noexecute=alwayson Greetz: Corelan Security Team http://www.corelan.be:8800/index.php/security/corelan-team-members/ DEP AlwaysOn bypass...

Mini-Stream Exploit for Windows XP SP2 and SP3

Exploit for unknown platform in category local exploits ============================================== Mini-Stream Exploit for Windows XP SP2 and SP3 ============================================== Title: Mini-Stream Exploit for Windows XP SP2 and SP3 CVE-ID: OSVDB-ID: Author: Ron Henry Published:...

Mini-stream 3.0.1.1 - Local Buffer Overflow (Metasploit)

$Id: ministream.rb 11516 2011-01-08 01:13:26Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Mini-stream 3.0.1.1 - Local Buffer Overflow (Metasploit)

Mini-stream 3.0.1.1 - Local Buffer Overflow Metasploit $Id: ministream.rb 11516 2011-01-08 01:13:26Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensi...

CastRipper 2.50.70 (.pls) Stack buffer Overflow Exploit WinXP SP3

No description provided by source. !/usr/bin/perl CastRipper 2.50.70 .plsStack buffer Overflow Exploit WinXP SP3 Exploite By : d3b4g my webpage www.d3b4g.info From tiny islands of maldivies Tested on Windows XP SP3 24.12.2009 I used Adress from SHELL32.dll.You can change it to your desired...

CastRipper 2.50.70 (.pls) Stack buffer Overflow Exploit WinXP SP3

Exploit for unknown platform in category local exploits ================================================================= CastRipper 2.50.70 .pls Stack buffer Overflow Exploit WinXP SP3 ================================================================= Title: CastRipper 2.50.70 .pls Stack buffer...

CastRipper 2.50.70 (Windows XP SP3) - .pls Local Stack Buffer Overflow

CastRipper 2.50.70 Windows XP SP3 - .pls Local Stack Buffer Overflow !/usr/bin/perl CastRipper 2.50.70 .plsStack buffer Overflow Exploit WinXP SP3 Exploite By : d3b4g my webpage www.d3b4g.info From tiny islands of maldivies Tested on Windows XP SP3 24.12.2009 I used Adress from SHELL32.dll.You ca...

Easy RM to MP3 2.7.3.700 BoF Exploit

Exploit for unknown platform in category local exploits ==================================== Easy RM to MP3 2.7.3.700 BoF Exploit ==================================== Title: Easy RM to MP3 2.7.3.700 BoF Exploit CVE-ID: OSVDB-ID: Author: Ron Henry Published: 2009-12-23 Verified: yes view source...

Easy RM to MP3 2.7.3.700 - Local Buffer Overflow

!/usr/bin/python Exploit for against Easy RM to MP3 2.7.3.700 12.2.2009 Author: Ron Henry - [email protected] - dijital1 Version: Easy RM to MP3 2.7.3.700 Tested against WinXP SP3 - English outputfile = "astley.m3u" shellcode="A" 26071 Offset to EIP - Windows XP SP3 shellcode+="\x25\x96\xa0\x7c"...

Win32 XP SP3 ShellExecuteA shellcode

No description provided by source. ; Author: sinn3r x90.sinner a.t gmail.c0m ; Tested on Windows XP SP3 ; Description: ; This shellcode will attempt to delete the Zone.Identifier ADS it's a ; trick Microsoft uses to warn you about an exe when you try to run it, ; and then run the file using the...

Win32 XP SP3 ShellExecuteA shellcode

Win32 XP SP3 ShellExecuteA shellcode. Shellcode exploit for win32 platform ; Author: sinn3r x90.sinner a.t gmail.c0m ; Tested on Windows XP SP3 ; Description: ; This shellcode will attempt to delete the Zone.Identifier ADS it's a ; trick Microsoft uses to warn you about an exe when you try to run...

PointDev IDEAL Administration 2009 9.7 - Local Buffer Overflow

PointDev IDEAL Administration 2009 9.7 - Local Buffer Overflow !/usr/bin/env python IDEAL Administration 2009 v9.7 Local Buffer Overflow Exploit Found By: DrIDE Usage: Migrate - Open Migration Project - Bind Shell Download: www.pointdev.com Tested On: Windows XPSP3 windows/shellbindtcp - 696 byte...

CVE-2009-0341

The shell32 module in Microsoft Internet Explorer 7.0 on Windows XP SP3 might allow remote attackers to execute arbitrary code via a long VALUE attribute in an INPUT element, possibly related to a stack consumption vulnerability...

Cain & Abel <= v4.9.24 .RDP Stack Overflow Exploit

No description provided by source. !/usr/bin/perl Cain & Abel = v4.9.24 .RDP Stack Overflow Exploit Exploit by SkD [email protected] ----------------------------------------------- Nothing much to say about this one. This works on an updated Windows XP SP3. On Vista this exploit is way easier th...

MS Internet Explorer (blnmgr.dll) COM Object Remote Exploit (MS05-038)

No description provided by source. !-- placed into html for your testing. /str0ke !/usr/bin/perl Internet Explorer COM Objects Instantiation Proof of Concept Exploit MS05-038 Bindshell on port 28876 - Based and ripped from Berend-Jan Wever's IE Exploit Vulnerable Objects :...

dap-overflow.txt

!/usr/bin/python Download Accelerator Plus - DAP 8.x m3u 0day Local Buffer Overflow Exploit Bug discovered by Krystian Kloskowski h07 Tested on: Download Accelerator Plus 8.6 / XP SP2 Polish Shellcode: Windows Execute Command calc Just for fun ; from struct import pack shellcode =...

Microsoft Security Bulletin MS07-061 – Critical Vulnerability in Windows URI Handling Could Allow Remote Code Execution (943460)

Microsoft Security Bulletin MS07-061 – Critical Vulnerability in Windows URI Handling Could Allow Remote Code Execution 943460 Published: November 13, 2007 Version: 1.0 General Information Executive Summary This update resolves a publicly reported vulnerability. A remote code execution...

VulnCheck KEV: CVE-2007-3896

The URL handling in Shell32.dll in the Windows shell in Microsoft Windows XP and Server 2003, with Internet Explorer 7 installed, allows remote attackers to execute arbitrary programs via invalid "%" sequences in a mailto: or other URI handler, as demonstrated using mIRC, Outlook, Firefox,...

Sony CONNECT Player 4.x (m3u File) Local Stack Overflow Exploit

No description provided by source. !/usr/bin/python Secunia Advisory : SA27270 Release Date : 2007-10-29 Sony CONNECT Player M3U Playlist Processing Stack Buffer Overflow m3u File Local Exploit Bug discovered by Parvez Anwar Exploit Written by TaMBaRuS [email protected] Tested on: Sony CONNECT...