Linux/x86-64 - Bindshell 4444/TCP with Password Prompt Shellcode (162 bytes)

/--------------------------------------------------------------------------------------------------------------------- / Title: tcp bindshell with password prompt in 162 bytes Author: Sathish kumar Contact: https://www.linkedin.com/in/sathish94 Description: x64 Linux bind TCP port shellcode on po...

PT-2016-7987

Name of the Vulnerable Software and Affected Versions yTree version 1.94-1.1 Description A stack-based buffer overflow allows local attackers to execute arbitrary code by providing an excessively long argument to the application. This is achieved by crafting a malicious command-line argument...

Linux/x86-64 - Bind TCP Port Shellcode (103 bytes)

/--------------------------------------------------------------------------------------------------------------------- / Author: Scorpion Copyright: c 2016 iQube. http://iQube.io Release Date: January 1, 2016 Description: x64 Linux null-free TCP bind port shellcode Assembled Size: 103 bytes Teste...

FTPShell client buffer overflow vulnerability

FTPShell client is a file transfer program for windows platform. A cache overflow entry exists in the input field 'Address' used to connect to an FTP server in the FTPShell.exe client. The vulnerability is exploited to execute arbitrary local commands by overwriting multiple stack registers and...

KiTTY Portable 0.65.1.1p - Local Saved Session Overflow (Egghunter XP / Denial of Service 7/8.1/10)

Exploit Title: KiTTY Portable Local Code Execution Win7 - Denial Of Service Win8.1 - Denial Of Service Win10 - Denial Of Service Instructions: ------------- - Ru...

KiTTY Portable 0.65.0.2p (Windows XP/7/10) - Chat Remote Buffer Overflow (SEH)

Exploit Title: KiTTY Portable Remote Code Execution Win7 - Remote Code Execution...

Dynamic Shellcode Injection: Shellter

Shellter is a dynamic shellcode injection tool, and probably the first dynamic PE infector ever created. It can be used in order to inject shellcode into native Windows applications currently 32-bit apps only. The shellcode can be something yours or something generated through a framework, such a...

Ovidentia online Module 2.8 - 'GLOBALS[babAddonPhpPath]' Remote File Inclusion

Title: Ovidentia Module online 2.8 GLOBALSbabAddonPhpPath Remote File Include Vulnerability Author: bd0rk eMail: bd0rkathackermail.com Twitter: twitter.com/bd0rk Download:...

Ovidentia Widgets 1.0.61 - Remote Command Execution

Ovidentia Widgets 1.0.61 - Remote Command Execution Title: Ovidentia Widgets 1.0.61 Remote Command Execution Exploit Author: bd0rk eMail: bd0rkathackermail.com Twitter: twitter.com/bd0rk Tested on: Ubuntu-Linux Download:...

Ovidentia online Module 2.8 - GLOBALS[babAddonPhpPath] Remote File Inclusion

Ovidentia online Module 2.8 - GLOBALSbabAddonPhpPath Remote File Inclusion Title: Ovidentia Module online 2.8 GLOBALSbabAddonPhpPath Remote File Include Vulnerability Author: bd0rk eMail: bd0rkathackermail.com Twitter: twitter.com/bd0rk Download:...

Easy File Sharing FTP Server 3.6 Stack Buffer Overflow Exploit

Easy File Sharing FTP server version 3.6 suffers from a stack buffer overflow vulnerability. Exploit Title: Easy File Sharing FTP Server 3.6 0day - Stack Overflow Exploit Author: @zeifan Vendor Homepage: http://www.sharing-file.com/products.htm Software Link: http://www.efssoft.com/efsfs.exe...

Dell Pre-Boot Authentication Driver Uncontrolled Write Vulnerability

The Dell Pre-Boot Authentication Driver PBADRV.sys contains a vulnerability that can be leveraged to enable an attacker to write arbitrary code. The 'OutputAddress' from the IOCTL call is not validated before it attempts to write to memory. The content of the write is a four-byte hex value that i...

Easy File Sharing Web Server 7.2 HEAD SEH Buffer Overflow

Exploit Title: Easy File Sharing Web Server 7.2 - HEAD HTTP request SEH Buffer Overflow Date: 12/2/2015 Exploit Author: ArminCyber Contact: [email protected] Version: 7.2 Tested on: XP SP3 EN category: Remote Exploit Usage: ./exploit.py ip port import socket import sys host = strsys.argv1...

Easy File Sharing Web Server 7.2 - HEAD Request Buffer Overflow (SEH)

Exploit Title: Easy File Sharing Web Server 7.2 - HEAD HTTP request SEH Buffer Overflow Date: 12/2/2015 Exploit Author: ArminCyber Contact: [email protected] Version: 7.2 Tested on: XP SP3 EN category: Remote Exploit Usage: ./exploit.py ip port import socket import sys host = strsys.argv1...

Ovidentia absences Module 2.64 - Remote File Inclusion

Title: Ovidentia Module absences 2.64 Remote File Include Vulnerability Author: bd0rk eMail: bd0rkathackermail.com Tested on: Ubuntu-Linux Download: http://www.ovidentia.org/index.php?tg=fileman&sAction=getFile&id=17&gr=Y&path=Downloads%2FAdd-ons%2FModules%2Fabsences&file=absences-2-64.zip&idf=88...

Ovidentia absences Module 2.64 - Remote File Inclusion

Ovidentia absences Module 2.64 - Remote File Inclusion Title: Ovidentia Module absences 2.64 Remote File Include Vulnerability Author: bd0rk eMail: bd0rkathackermail.com Tested on: Ubuntu-Linux Download:...

Windows XP-10 - Null-Free WinExec Shellcode Python

Windows XP-10 - Null-Free WinExec Shellcode Python. Shellcode exploit for generator platform All Windows Null-Free WinExec Shellcode """ Coded by B3mB4m Concat : [email protected] Home : b3mb4m.blogspot.com 10.12.2015 Tested on : Windows XP/SP3 x86 Windows 7 Ultimate x64 Windows 8.1 Pro Build 9600 x...

win32/xp SP3 x86 Null-Free WinExec Shellcode

This is a tool written in python to generate shellcode to use on Microsoft Windows. All Windows Null-Free WinExec Shellcode """ Coded by B3mB4m Concat : email protected Home : b3mb4m.blogspot.com 10.12.2015 Tested on : Windows XP/SP3 x86 Windows 7 Ultimate x64 Windows 8.1 Pro Build 9600 x64 Windo...

linux x86/x86_64 execve Shellcode

Linux execve shellcode that works on both x86 and x8664. Cross-Linux execve shellcode works on x86/x8664 Coded by B3mB4m 4.11.2015 This shellcodes works on both x86 and x64null-free : Disassembly of section .text: 08048060 : 8048060: 31 c0 xor %eax,%eax 8048062: 40 inc %eax 8048063: 74 15 je...

Easy File Sharing Web Server 7.2 - Remote Buffer Overflow (SEH) (DEP Bypass + ROP)

!/usr/bin/env python Exploit title: Easy File Sharing Web Server v7.2 - Remote SEH Buffer Overflow DEP bypass with ROP Date: 29/11/2015 Exploit Author: Knaps Contact: @TheKnapsy Website: http://blog.knapsy.com Software Link: http://www.sharing-file.com/efssetup.exe Version: Easy File Sharing Web...