7259 matches found
IntelliTamper 2.0.7 - HTML Parser Remote Buffer Overflow
/ IntelliTamper 2.0.7 html parser Remote Buffer Overflow Just a C version of Guido Landi's discovery. Written by r0ut3r writ3r at gmail.com kit:/home/r0ut3r/publichtml gcc -o intell intell.c kit:/home/r0ut3r/publichtml ./intell + Building payload + Success writing to index.html...
IntelliTamper 2.0.7 - HTML Parser Remote Buffer Overflow (C)
IntelliTamper 2.0.7 - HTML Parser Remote Buffer Overflow C / IntelliTamper 2.0.7 html parser Remote Buffer Overflow Just a C version of Guido Landi's discovery. Written by r0ut3r writ3r at gmail.com kit:/home/r0ut3r/publichtml gcc -o intell intell.c kit:/home/r0ut3r/publichtml ./intell + Building...
intellitamper-overflow.txt
!/usr/bin/perl use warnings; use strict; CMD="c:\windows\system32\calc.exe" x86/alphamixed succeeded, final size 344 my $shellcode = "\xda\xc3\xd9\x74\x24\xf4\x5a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a" . "\x4a\x4a\x43\x43\x43\x43\x43\x43\x43\x37\x52\x59\x6a\x41\x58"...
IntelliTamper 2.0.7 - HTML Parser Remote Buffer Overflow
!/usr/bin/perl use warnings; use strict; CMD="c:\windows\system32\calc.exe" x86/alphamixed succeeded, final size 344 my $shellcode = "\xda\xc3\xd9\x74\x24\xf4\x5a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a" . "\x4a\x4a\x43\x43\x43\x43\x43\x43\x43\x37\x52\x59\x6a\x41\x58"...
modjk1219-overflow.txt
!/usr/bin/python / | || | | | | | | | | /| | | | | || ||| ||||| || C. H. R. O. O. T. SECURITY GROUP - -- ----- --- -- -- ---- --- -- - http://www.chroot.org Hacks In Taiwan | || | | | | | | | Conference 2008 | | | | | | | | | || ||| || |||| http://www.hitcon.org Title =======:: Apache modjk...
IntelliTamper 2.07 (map file) Local Arbitrary Code Execution Exploit (pl)
Exploit for unknown platform in category local exploits ========================================================================= IntelliTamper 2.07 map file Local Arbitrary Code Execution Exploit pl ========================================================================= !/usr/bin/perl ksOSe -...
intellitamper-exec.txt
!/usr/bin/perl ksOSe - 7/21/2008 http://secunia.com/advisories/20172 A sploit for an ancient vuln. Just because i need to improve my skills on windows explotation. use warnings; use strict; CMD="c:\windows\system32\calc.exe" x86/alphamixed succeeded, final size 345 bad char - \x89 my $shellcode =...
Aeon 0.2a Local Linux Exploit (c code)
No description provided by source. / first release /str0ke / / local linux exploit within aeon-0.2a Coded by patr0n security-tmp.h14.ru / define BUFLEN 533 define PATH "/home/research/aeon-0.2a/aeon" char shellcode= "\x31\xc0\x31\xdb\xb0\x17\xcd\x80" "\xb0\x2e\xcd\x80\xeb\x15\x5b\x31"...
RealPlayer 10 ".smil" File Local Buffer Overflow Exploit
No description provided by source. / RealPlayer .smil file buffer overflow Coded by nolimit@CiSO & Buzzdee greets to COREiSO & news & flare & class101 & ESI & RVL & everyone else I forget This uses a seh overwrite method, which takes advantage of the SEH being placed in multiple locations over th...
MS Jet Database (msjet40.dll) Reverse Shell Exploit
No description provided by source. See-security Technologies ltd. http://www.see-security.com Microsoft Jet msjet40.dll Reverse Shell Exploit coded by Tal zeltzer Based on the exploit written by S.Pearson import sys import struct Addresses are compatible with Windows XP Service Pack 1 ReturnAddre...
AOL Instant Messenger AIM "Away" Message Local Exploit
No description provided by source. / subject: local PoC exploit for AIM 5.5.3595 vendor: http://www.aim.com cve: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0636 credits: Matt Murphy date: 10 August 2004 notes: exploits localy if an argument is supplied, otherwise prints the url...
Solaris 7/8/9 CDE LibDTHelp Local Buffer Overflow Exploit
No description provided by source. / $Id: raptorlibdthelp.c,v 1.1 2004/12/04 14:44:38 raptor Exp $ raptorlibdthelp.c - libDtHelp.so local, Solaris/SPARC 7/8/9 Copyright c 2003-2004 Marco Ivaldi [email protected] Buffer overflow in CDE libDtHelp library allows local users to execute arbitrary...
MS Windows (ListBox/ComboBox Control) Local Exploit (MS03-045)
No description provided by source. / \ local ListBox/ComboBox exploit for Win32 / \ Created by xCrZx crazyeinstein yahoo com /11.11.03/ / \ Usage: MS03-045.exe -t target -r return address / \ there is two targets: CBDIR for ComboBox, LBDIR for ListBox. / \ As to return address it should be such a...
MS Windows 2K/XP Task Scheduler .job Exploit (MS04-022)
No description provided by source. // // Microsoft Windows 2K/XP Task Scheduler Vulnerability MS04-022 // Proof-of-Concept Exploit for English WinXP SP1 // 15 Jul 2004 // // Running this will create a file "j.job". When explorer.exe or any // file-open dialog box accesses the directory containing...
WinZIP MIME Parsing Overflow Proof of Concept Exploit
No description provided by source. / Author: snooq Date: 14 April 2004 This is a PoC exploit for WinZip32 MIME Parsing Overflow bug reported by iDefense on 27 February 2004. The original advisory is found here: http://www.idefense.com/application/poi/display?id=76 This version is SP dependent bec...
TerminatorX <= 3.81 stack overflow local root exploit
No description provided by source. / TerminatorX V. = 3.81 local root exploit by Li0n7 Typical local stack-based overflow Bugs discovered by c0wboy from 0x333 Contact Li0n7 voila fr Usage: ./terminatorX-exp -r RET-b -s STARTINGRET -r RET: no bruteforcing, try to execute shellcode with RET as retu...
rsync <= 2.5.7 Local stack overflow Root Exploit
No description provided by source. / rsync = 2.5.7 Local Exploit Saved EIP on stack is overwritten with address of shellcode in memory Generally rsync is not setuid or setgid so just a local shell is of no use So i used a portbinding shellcode as a PoC of a different attack vector. RET is...
WinRAR 1.0 Local Buffer Overflow Exploit
No description provided by source. / WinRar local buffer overflow exploit V1.0 Coded By ATmaCA Copyright ? 2004 ProGroup Software, Inc. E-Mail:[email protected] Web:www.prohack.net Usage:\r\nexploit Target OutputPath Targets: 1 - WinXP SP1 user32.dll 0x77D718FC 2 - WinXP SP2 user32.dll...
Solaris Runtime Linker (ld.so.1) Buffer Overflow Exploit (SPARC version)
No description provided by source. / ld.so.1 exploit SPARC coded by: osker178 bjr213 psu.edu Alright, so this exploits a fairly standard buffer overflow in the default Solaris runtime linker ld.so.1 discovery by Jouko Pynnonen Only real deviation here from the standard overflow and return into li...
ollydbg-overflow.txt
;-------------------------------------------------------------------------; ; OllyDBG v1.10 and ImpREC v1.7f export name buffer overflow vulnerability ; PoC probably older versions affected too, not tested though. ; ; Included shellcode shows a messagebox WinXP SP2 and is configured for ; OllyDBG...