Archive Searcher - '.zip' Local Stack Overflow

!/usr/bin/ruby Software : Archive Searcher 2.1 Author : Lincoln OS : Windows Tested on : XP SP3 En VirtualBox Type of vuln : SEH Greetz to : Corelan Security Team http://www.corelan.be:8800/index.php/security/corelan-team-members/ Script provided 'as is', without any warranty. Use for educational...

Magneto Net Resource ActiveX v4.0.0.5 NetConnectionEnum Exploit

Exploit for windows platform in category remote exploits =========================================================================== Magneto Net Resource ActiveX v4.0.0.5 NetConnectionEnum Exploit Universal =========================================================================== 'Magneto...

Magneto Net Resource ActiveX 4.0.0.5 - NetConnectionEnum Universal

Magneto Net Resource ActiveX 4.0.0.5 - NetConnectionEnum Universal 'Magneto Software Net Resource ActiveX v4.0.0.5 NetConnectionEnum SEH Exploit Universal 'Author: dookie 'Original PoC by: s4squatch - http://www.exploit-db.com/exploits/12208 'Vendor:...

linux/x86 - execve("/bin/sh", 0, 0) shellcode 22 bytes

Exploit for linux/x86 platform in category shellcode ====================================================== linux/x86 - execve"/bin/sh", 0, 0 shellcode 22 bytes ====================================================== include include / by Magnefikko 15.04.2010 email protected Promhyl Studies ::...

Magneto Net Resource ActiveX 4.0.0.5 - NetFileClose Universal

Magneto Net Resource ActiveX 4.0.0.5 - NetFileClose Universal 'Magneto Software Net Resource ActiveX v4.0.0.5 NetFileClose SEH Exploit Universal 'Author: dookie 'Original PoC by: s4squatch - http://www.exploit-db.com/exploits/12206 'Vendor:...

Magneto Net Resource ActiveX 4.0.0.5 - 'NetConnectionEnum' Universal

'Magneto Software Net Resource ActiveX v4.0.0.5 NetConnectionEnum SEH Exploit Universal 'Author: dookie 'Original PoC by: s4squatch - http://www.exploit-db.com/exploits/12208 'Vendor: http://www.magnetosoft.com/products/sknetresource/sknetresourcefeatures.htm 'SKNetResource.ocx 'Function...

linux/x86 - execve("/bin/sh") shellcode 25 bytes

Exploit for linux/x86 platform in category shellcode ================================================ linux/x86 - execve"/bin/sh" shellcode 25 bytes ================================================ include include / by Magnefikko 14.04.2010 email protected promhyl.oz.pl Subgroup: PRekambr Name: 2...

DoS-Badger-Game shellcode 6 bytes

6 bytes DoS-Badger-Game shellcode. Shellcode exploit for linux platform include include / by Magnefikko 14.04.2010 [email protected] promhyl.oz.pl Subgroup: PRekambr Name: 6 bytes DoS-Badger-Game shellcode Platform: Linux x86 pause gcc -Wl,-z,execstack filename.c shellcode:...

execve"/bin/sh" shellcode 25 bytes

25 bytes execve"/bin/sh" shellcode. Shellcode exploit for linux platform include include / by Magnefikko 14.04.2010 [email protected] promhyl.oz.pl Subgroup: PRekambr Name: 25 bytes execve"/bin/sh" shellcode Platform: Linux x86 execve"/bin/sh", 0, 0; gcc -Wl,-z,execstack filename.c shellcode:...

PHP 6.0 Dev str_transliterate() Buffer Overflow

whoami whoami nt authority\system / errorreporting0; $bases = $GET'poss'; $basee = $GET'pose'; $offs = $GET'offs'; $offe = $GET'offe'; ifinigetbool'unicode.semantics' $buff = strrepeat"\u4141", 32; $tbp = "\u2650\u6EE5"; // 6EE52650 ADDRESS TO BE PATCHED BY WPM $ptw = "\u2FE0\u6EE5"; // 6EE52FE0...

chmod"/etc/shadow", 0666 shellcode 36 bytes

36 bytes chmod"/etc/shadow", 0666 shellcode. Shellcode exploit for linux platform include include / by Magnefikko 14.04.2010 [email protected] promhyl.oz.pl Subgroup: PRekambr Name: 36 bytes chmod"/etc/shadow", 0666 shellcode Platform: Linux x86 chmod"/etc/shadow", 0666; gcc -Wl,-z,execstack...

linux/x86 - chmod("/etc/shadow", 0666) shellcode 36 bytes

Exploit for linux/x86 platform in category shellcode ========================================================= linux/x86 - chmod"/etc/shadow", 0666 shellcode 36 bytes ========================================================= include include / by Magnefikko 14.04.2010 email protected promhyl.oz.pl...

linux/x86 - DoS-Badger-Game shellcode 6 bytes

Exploit for linux/x86 platform in category shellcode ============================================= linux/x86 - DoS-Badger-Game shellcode 6 bytes ============================================= include include / by Magnefikko 14.04.2010 email protected promhyl.oz.pl Subgroup: PRekambr Name: 6 bytes...

SLoc-DoS shellcode 55 bytes

55 bytes SLoc-DoS shellcode by Magnefikko. Shellcode exploit for linux platform include include / by Magnefikko 14.04.2010 [email protected] Promhyl Studies :: http://promhyl.oz.pl Subgroup: PRekambr Name: 55 bytes SLoc-DoS shellcode Platform: Linux x86 unlink"/etc/shadow"; execve"poweroff", 0...

PHP 6.0 Dev - str_transliterate() Local Buffer Overflow (NX + ASLR Bypass)

PHP 6.0 Dev - strtransliterate Local Buffer Overflow NX + ASLR Bypass whoami whoami nt authority\system / errorreporting0; $bases = $GET'poss'; $basee = $GET'pose'; $offs = $GET'offs'; $offe = $GET'offe'; ifinigetbool'unicode.semantics' $buff = strrepeat"\u4141", 32; $tbp = "\u2650\u6EE5"; //...

Microsoft Office Visio Legacy Files (CVE-2010-0254; CVE-2010-0256)

Microsoft Visio is a diagram creation software for Microsoft Windows. Multiple remote code execution vulnerabilities have been identified in Microsoft Visio. A remote attacker could trigger these flaws by convincing a victim to open a specially crafted Visio file in legacy format. Successful...

MagnetoSoft ICMP ActiveX AddDestinationEntry BOF

Exploit for windows platform in category remote exploits ================================================ MagnetoSoft ICMP ActiveX AddDestinationEntry BOF ================================================ 'Magneto Software ICMP ActiveX Control Buffer Overflow 'Discovered by: s4squatch 'website:...

PHP 6.0 Dev str_transliterate() Buffer overflow - NX + ASLR Bypass

Exploit for windows platform in category local exploits ================================================================== PHP 6.0 Dev strtransliterate Buffer overflow - NX + ASLR Bypass ================================================================== whoami whoami nt authority\system /...

MS10-026 Microsoft MPEG Layer-3 Audio Stack Based Overflow

This module exploits a buffer overflow in l3codecx.ax while processing a AVI files with MPEG Layer-3 audio contents. The overflow only allows to overwrite with 0's so the three least significant bytes of EIP saved on stack are overwritten and shellcode is mapped using the .NET DLL memory techniqu...

MagnetoSoft ICMP 4.0.0.18 - ActiveX AddDestinationEntry Buffer Overflow

MagnetoSoft ICMP 4.0.0.18 - ActiveX AddDestinationEntry Buffer Overflow 'Magneto Software ICMP ActiveX Control Buffer Overflow 'Discovered by: s4squatch 'website: www.securestate.com 'Date Discovered: 03/11/09 'Exploit Written: 02/02/10 'Vendor Notified: 02/02/10 -- NO RESPONSE 'Vendor Notified:...