Belkin G Wireless Router Firmware 5.00.12 - RCE PoC

Belkin G Wireless Router remote code execution proof of concept exploit. +-----------------------------------+ | Belkin G Wireless Router RCE PoC. | +-----------------------------------+ Firmware Version : 5.00.12 Sep 10 2009 19:54:12 Boot Version : 1.18 Hardware : F5D7234-4 v5 01 Author :...

WinAmp 5.63 (winamp.ini) - Local Exploit

Exploit for windows platform in category local exploits Exploit Title: winampevilskin.py Date: 25 August 2013 Exploit Author: Ayman Sagy Vendor Homepage: http://www.winamp.com/ Version: 5.63 Tested on: Windows XP Professional SP3 Version 2002 CVE : 2013-4694 Ayman Sagy August 2013 This is an...

Belkin G Wireless Router Code Execution

+-----------------------------------+ | Belkin G Wireless Router RCE PoC. | +-----------------------------------+ Firmware Version : 5.00.12 Sep 10 2009 19:54:12 Boot Version : 1.18 Hardware : F5D7234-4 v5 01 Author : Aodrulez. Email : [email protected] Twitter : http://twitter.com/Aodrul...

Winamp 5.63 - winamp.ini Local Overflow

Winamp 5.63 - winamp.ini Local Overflow Exploit Title: winampevilskin.py Date: 25 August 2013 Exploit Author: Ayman Sagy Vendor Homepage: http://www.winamp.com/ Version: 5.63 Tested on: Windows XP Professional SP3 Version 2002 CVE : 2013-4694 Ayman Sagy August 2013 This is an exploit for Bug 1...

Belkin G Wireless Router Firmware 5.00.12 - Remote Code Execution

+-----------------------------------+ | Belkin G Wireless Router RCE PoC. | +-----------------------------------+ Firmware Version : 5.00.12 Sep 10 2009 19:54:12 Boot Version : 1.18 Hardware : F5D7234-4 v5 01 Author : Aodrulez. Email : [email protected] Twitter : http://twitter.com/Aodrul...

Winamp 5.63 - 'winamp.ini' Local Overflow

Exploit Title: winampevilskin.py Date: 25 August 2013 Exploit Author: Ayman Sagy Vendor Homepage: http://www.winamp.com/ Version: 5.63 Tested on: Windows XP Professional SP3 Version 2002 CVE : 2013-4694 Ayman Sagy August 2013 This is an exploit for Bug 1 described in...

Java User Agent Executable Download

Some executable files can be downloaded to computer systems Java user agent. There are cases in which certain traffic, although not intended for malicious use, is very unsafe, since it may transfer shellcode which is undetectable by IPS...

ALLMediaServer version 0.95 SEH Overflow Exploit

ALLMediaServer version 0.95 SEH overflow exploit written for Windows XP SP3 English. !/usr/bin/python print """ + Exploit Title: ALLMediaServer 0.95 SEH Overflow Exploit + Date: 21/08/2013 + Exploit Author: metacom + Romanian Security Team + Software Link:http://allmediaserver.org/download +...

ALLMediaServer 0.95 Overflow For Win XP

!/usr/bin/python print """ + Exploit Title: ALLMediaServer 0.95 SEH Overflow Exploit + Date: 21/08/2013 + Exploit Author: metacom + Romanian Security Team + Software Link:http://allmediaserver.org/download + Version: ALLMediaServer 0.95 + Tested On: Windows XP SP3 English + ALLMediaServer run...

[The Backdoor Factory] Backdoors win32 PE files

Backdoors win32 PE files, to continue normal file execution if the shellcode supports it, by patching the exe/dll directly. Some executables have built in protections, as such this will not work on all PE files. It is advisable that you test target PE files before deploying them to clients or usi...

freeFTPd 1.0.10 Buffer Overflow

!/usr/bin/perl freeFTPd 1.0.10 anonymous-auth PASS SEH buffer overflow PoC by Wireghoul - www.justanotherhacker.com Date: 20130820 Tested on: XPSP3 Similar exploits: EDB 23079 1330 1339 Greetz corelan, TecR0C, mrme, jjkakakk if scalar@ARGV != 2 "Usage $0 host port\n"; exit; use IO::Socket::INET;...

PCMan FTP Server 2.07 - 'STOR' Remote Buffer Overflow

!/usr/bin/python Exploit Title: PCMAN FTP 2.07 STOR Command - buffer overflow Date: 18 Agosto 2013 Exploit Author: Christian Polunchis Ramirez https://intrusionlabs.org Contact: [email protected] Version: PCMAN FTP 2.07 STOR Command Tested on: Windows XP SP3, Spanish Thanks:To GOD for...

MinaliC WebServer 2.0.0 - Remote Buffer Overflow (Egghunter)

MinaliC WebServer 2.0.0 - Remote Buffer Overflow Egghunter !/usr/bin/env python Exploit Title: MinaliC Webserver buffer overflow egghunter Date: August 13 2013 Exploit Author: PuN1sh3r Email: [email protected] Vendor Homepage: http://minalic.sourceforge.net/ Version: MinaliC Webserver 2.0.0...

Sami FTP 2.0.1 MKD Buffer Overflow Vulnerability

Exploit for windows platform in category remote exploits !/usr/bin/python Exploit Title: Sami FTP MKD buffer overflow SEH + Bypass ASL Date: 11 Agosto 2013 Exploit Author: Christian Polunchis Ramirez https://intrusionlabs.org Vendor Homepage: http://www.karjasoft.com/old.php Version: Sami FTP...

MinaliC Webserver 2.0.0 - Buffer Overflow (Egghunter)

Exploit for windows platform in category remote exploits !/usr/bin/env python Exploit Title: MinaliC Webserver buffer overflow egghunter Date: August 13 2013 Exploit Author: PuN1sh3r Email: email protected Vendor Homepage: http://minalic.sourceforge.net/ Version: MinaliC Webserver 2.0.0 Tested on...

MinaliC WebServer 2.0.0 - Remote Buffer Overflow (Egghunter)

!/usr/bin/env python Exploit Title: MinaliC Webserver buffer overflow egghunter Date: August 13 2013 Exploit Author: PuN1sh3r Email: [email protected] Vendor Homepage: http://minalic.sourceforge.net/ Version: MinaliC Webserver 2.0.0 Tested on: Windows XP Pro SP3, English Description: Remote...

Sami FTP 2.0.1 MKD Buffer Overflow

!/usr/bin/python Exploit Title: Sami FTP MKD buffer overflow SEH + Bypass ASL Date: 11 Agosto 2013 Exploit Author: Christian Polunchis Ramirez https://intrusionlabs.org Vendor Homepage: http://www.karjasoft.com/old.php Version: Sami FTP Server 2.0.1 Tested on: Windows 7 Home Basic x86, Spanish...

Easy LAN Folder Share 3.2.0.100 - Local Buffer Overflow (SEH)

!/usr/bin/python ========================================================================================== Exploit Title: Easy LAN Folder Share Version 3.2.0.100 Buffer Overflow vulnerability SEH Date: 2013-08-03 Exploit Author: sagi- Original Bug Found By: ariarat Vendor Homepage:...

MIPS Little Endian Shellcode

MIPS Little Endian Shellcode. CVE-2013-4659. Shellcode exploit for mips platform Disassembled MIPS Little Endian Shellcode Shellcode was designed for ACSD exploit on the ASUS RT-AC66U SOHO router. CVE: CVE-2013-4659 Written by Jacob Holcomb, Security Analyst @ Independent Security Evaluators Blog...

Nginx 1.3.9 / 1.4.0 Buffer Overflow

encoding: ASCII abort"$0 host port" if ARGV.length 2 require 'ronin' $count = 0 rop address taken from nginx binary find in the repo poprdi = 0x00427006 poprsi = 0x0043a00e poprdx = 0x0041b8fa poprax = 0x00442c80 mmap64 = 0x4029b0 mmapgot = 0x67f290 mmapaddr = 0x00410000 rsitorax = 0x0042afcb...