UFO: Alien Invasion 2.2.1 (Windows 7) - Remote Buffer Overflow (ASLR + DEP Bypass)

!/usr/bin/python Exploit Title: UFO: Alien Invasion v2.2.1 BoF Exploit Win7 ASLR and DEP Bypass Date: July 5, 2010 Author: Node Software Link: http://sourceforge.net/projects/ufoai/files/UFOAI%202.x/2.2.1/ufoai-2.2.1-win32.exe/download Version: "UFO: Alien Invasion 2.2.1 x86 Apr 28 2008 Win32...

setreuid0,0 execve"/bin/sh",NULL,NULL XOR Encoded Linux Shellcode 62 bytes

62 bytes setreuid0,0 execve"/bin/sh",NULL,NULL XOR Encoded Linux Shellcode. Shellcode exploit for linux platform / Author : gunslinger Web : http://devilzc0de.org blog : http://gunslingerc0de.wordpress.com tested on : linux debian special thanks to : r0073r inj3ct0r.com, d3hydr8 darkc0de.com, ty...

linux/x86 nc -lp 31337 -e /bin/sh polymorphic shellcode 91 bytes

Exploit for linux/x86 platform in category shellcode ================================================================ linux/x86 nc -lp 31337 -e /bin/sh polymorphic shellcode 91 bytes ================================================================ /...

linux/x86 setreuid(0,0) execve("/bin/sh",NULL,NULL) encoded 62 bytes

Exploit for linux/x86 platform in category shellcode ======================================================================== linux/x86 setreuid0,0 execve"/bin/sh",NULL,NULL XOR encoded 62 bytes ======================================================================== /...

linux/x86 polymorphic Drop suid shell root /tmp/.hiddenshell 161 bytes

Exploit for linux/x86 platform in category shellcode ====================================================================== linux/x86 polymorphic Drop suid shell root /tmp/.hiddenshell 161 bytes ====================================================================== /...

125 bind port to 6778 XOR encoded polymorphic linux shellcode

125 bind port to 6778 XOR encoded polymorphic linux shellcode .. Shellcode exploit for linux platform / Title : bind port to 6678 XOR encoded polymorphic linux shellcode . Name : 125 bind port to 6678 XOR encoded polymorphic linux shellcode . Date : Tue Jul 6 01:52:33 WIT 2010 Author : gunslinger...

linux/x86 bind [email protected] 97 bytes

Exploit for linux/x86 platform in category shellcode ================================ linux/x86 bind email protected 97 bytes ================================ include include / 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ ...

Drop suid shell root in /tmp/.hiddenshell Linux Polymorphic Shellcode 161 bytes

161 bytes Drop suid shell root in /tmp/.hiddenshell Linux Polymorphic Shellcode. Shellcode exploit for linux platform / Author : gunslinger Web : http://devilzc0de.org blog : http://gunslingerc0de.wordpress.com tested on : linux debian special thanks to : r0073r inj3ct0r.com, d3hydr8 darkc0de.com...

linux/x86 lynx polymorphic shellcode 84 bytes

Exploit for linux/x86 platform in category shellcode ============================================= linux/x86 lynx polymorphic shellcode 84 bytes ============================================= / 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, ...

EasyFTP Server LIST Command Stack Buffer Overflow

This module exploits a stack-based buffer overflow in EasyFTP Server 1.7.0.11. credit goes to Karn Ganeshan. NOTE: Although, this is likely to exploit the same vulnerability as the 'easyftpcwdfixret' exploit, it uses a slightly different vector. Module Options msf use...

UFO: Alien Invasion v2.2.1 BoF Exploit (Win7 ASLR and DEP Bypass)

Exploit for windows platform in category remote exploits ================================================================= UFO: Alien Invasion v2.2.1 BoF Exploit Win7 ASLR and DEP Bypass ================================================================= !/usr/bin/python Exploit Title: UFO: Alien...

linux/ARM - Polymorphic execve("/bin/sh", ["/bin/sh"], NULL); 78 bytes

Exploit for linux/x86 platform in category shellcode ========================================================================================= linux/ARM - Polymorphic execve"/bin/sh", "/bin/sh", NULL; - XOR 88 encoded - 78 bytes...

SasCam WebCam Server v2.6.5 ActiveX SEH Overwrite

Exploit for windows platform in category remote exploits ================================================= SasCam WebCam Server v2.6.5 ActiveX SEH Overwrite ================================================= 'SEH Overwrite exploited by Blake 'Original EIP method by callAX 'Tested on XP SP3/IE7 in...

ASX To MP3 Converter 3.1.2.1 Buffer Overflow

Exploit Title: ASX to MP3 Converter Version 3.1.2.1 2010-03-30 Local Buffer Overflow SEH Date: nhar essabt 3-7-10 Author: MadjiX Software Link: http://www.mini-stream.net/downloads/ASXtoMP3Converter.exe Version: 3.1.2.1 ‎2010-03-30 Tested on: xp sp3 my $shellcode=...

SasCam WebCam Server 2.6.5 - ActiveX Overwrite (SEH)

SasCam WebCam Server 2.6.5 - ActiveX Overwrite SEH 'SEH Overwrite exploited by Blake 'Original EIP method by callAX 'Tested on XP SP3/IE7 in virtualbox '$ nc 192.168.1.155 4444 'Microsoft Windows XP Version 5.1.2600 'C Copyright 1985-2001 Microsoft Corp. ' 'C:\Documents and Settings\blake\Desktop...

Sun Java System Web Server Stack Overflow

/ Sun Java Web Server Exploit Tested on: Sun Java Web Server 7.0 update 7 - XP SP3 Ref: CVE-2010-0361 This vulnerability was identified by Evgeny Legerov Author: Dominic Chell Date: 23/01/2010 / include "stdafx.h" include include include include include "winsock2.h" pragma commentlib, "ws232"...

Serenity Audio Player 3.2.3 (SEH) Buffer Overflow

Exploit for windows platform in category local exploits ================================================= Serenity Audio Player 3.2.3 SEH Buffer Overflow ================================================= Serenity Audio Player 3.2.3 SEH Buffer Overflow Download :...

Mediacoder 0.7.3.4682 - Universal Buffer Overflow (SEH)

Mediacoder 0.7.3.4682 - Universal Buffer Overflow SEH Exploit Title : Mediacoder v0.7.3.4682 universal buffer overflow SEH tested on windows xp SP 3 FR download : http://www.dodownload.com/video+multimedia/play+video/mediacoder.html Author: MadjiX Dz8 HotmaiL cOm Greets:Bibi-info , His0k4 where a...

Mini-stream RM-MP3 Converter 3.1.2.1 - .m3u Local Buffer Overflow

Mini-stream RM-MP3 Converter 3.1.2.1 - .m3u Local Buffer Overflow By Madjix Dz8athotmaildotcom Greets: myself for find the bug : Exploit-DB Notes: 000DBF98 41414141 AAAA 000DBF9C 41414141 AAAA 000DBFA0 41414141 AAAA 000DBFA4 41414141 AAAA Pointer to next SEH record 000DBFA8 41414141 AAAA SE handl...

Mini-stream RM-MP3 Converter 3.1.2.1 - '.m3u' Local Buffer Overflow

By Madjix Dz8athotmaildotcom Greets: myself for find the bug : Exploit-DB Notes: 000DBF98 41414141 AAAA 000DBF9C 41414141 AAAA 000DBFA0 41414141 AAAA 000DBFA4 41414141 AAAA Pointer to next SEH record 000DBFA8 41414141 AAAA SE handler 000DBFAC FFFFFFFF ÿÿÿÿ 000DBFB0 7C87F317 ó‡| kernel32.7C87F317...