7549 matches found
MS Windows (ListBox/ComboBox Control) Local Exploit (MS03-045)
No description provided by source. / \ local ListBox/ComboBox exploit for Win32 / \ Created by xCrZx crazyeinstein yahoo com /11.11.03/ / \ Usage: MS03-045.exe -t target -r return address / \ there is two targets: CBDIR for ComboBox, LBDIR for ListBox. / \ As to return address it should be such a...
Solaris Runtime Linker (ld.so.1) Buffer Overflow Exploit (SPARC version)
No description provided by source. / ld.so.1 exploit SPARC coded by: osker178 bjr213 psu.edu Alright, so this exploits a fairly standard buffer overflow in the default Solaris runtime linker ld.so.1 discovery by Jouko Pynnonen Only real deviation here from the standard overflow and return into li...
WinZIP MIME Parsing Overflow Proof of Concept Exploit
No description provided by source. / Author: snooq Date: 14 April 2004 This is a PoC exploit for WinZip32 MIME Parsing Overflow bug reported by iDefense on 27 February 2004. The original advisory is found here: http://www.idefense.com/application/poi/display?id=76 This version is SP dependent bec...
rsync <= 2.5.7 Local stack overflow Root Exploit
No description provided by source. / rsync = 2.5.7 Local Exploit Saved EIP on stack is overwritten with address of shellcode in memory Generally rsync is not setuid or setgid so just a local shell is of no use So i used a portbinding shellcode as a PoC of a different attack vector. RET is...
AOL Instant Messenger AIM "Away" Message Local Exploit
No description provided by source. / subject: local PoC exploit for AIM 5.5.3595 vendor: http://www.aim.com cve: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0636 credits: Matt Murphy date: 10 August 2004 notes: exploits localy if an argument is supplied, otherwise prints the url...
Solaris 7/8/9 CDE LibDTHelp Local Buffer Overflow Exploit
No description provided by source. / $Id: raptorlibdthelp.c,v 1.1 2004/12/04 14:44:38 raptor Exp $ raptorlibdthelp.c - libDtHelp.so local, Solaris/SPARC 7/8/9 Copyright c 2003-2004 Marco Ivaldi [email protected] Buffer overflow in CDE libDtHelp library allows local users to execute arbitrary...
TerminatorX <= 3.81 stack overflow local root exploit
No description provided by source. / TerminatorX V. = 3.81 local root exploit by Li0n7 Typical local stack-based overflow Bugs discovered by c0wboy from 0x333 Contact Li0n7 voila fr Usage: ./terminatorX-exp -r RET-b -s STARTINGRET -r RET: no bruteforcing, try to execute shellcode with RET as retu...
WinRAR 1.0 Local Buffer Overflow Exploit
No description provided by source. / WinRar local buffer overflow exploit V1.0 Coded By ATmaCA Copyright ? 2004 ProGroup Software, Inc. E-Mail:[email protected] Web:www.prohack.net Usage:\r\nexploit Target OutputPath Targets: 1 - WinXP SP1 user32.dll 0x77D718FC 2 - WinXP SP2 user32.dll...
MS Windows 2K/XP Task Scheduler .job Exploit (MS04-022)
No description provided by source. // // Microsoft Windows 2K/XP Task Scheduler Vulnerability MS04-022 // Proof-of-Concept Exploit for English WinXP SP1 // 15 Jul 2004 // // Running this will create a file "j.job". When explorer.exe or any // file-open dialog box accesses the directory containing...
ollydbg-overflow.txt
;-------------------------------------------------------------------------; ; OllyDBG v1.10 and ImpREC v1.7f export name buffer overflow vulnerability ; PoC probably older versions affected too, not tested though. ; ; Included shellcode shows a messagebox WinXP SP2 and is configured for ; OllyDBG...
FreeSSHD 1.2.1 (Post Auth) Remote Seh Overflow
No description provided by source. !/usr/bin/perl FreeSSHD 1.2.1 Post Auth Remote Seh Overflow http://freeddsshd.com/ Exploit based on securfrog Poc http://www.milw0rm.com/exploits/5709 Coded by Matteo Memelli aka ryujin Spaghetti & PwnSauce http://www.be4mind.com http://www.gray-world.net Tested...
dap-overflow.txt
!/usr/bin/python Download Accelerator Plus - DAP 8.x m3u 0day Local Buffer Overflow Exploit Bug discovered by Krystian Kloskowski h07 Tested on: Download Accelerator Plus 8.6 / XP SP2 Polish Shellcode: Windows Execute Command calc Just for fun ; from struct import pack shellcode =...
Download Accelerator Plus - DAP 8.x (m3u) Local BOF Exploit 0day
No description provided by source. !/usr/bin/python Download Accelerator Plus - DAP 8.x m3u 0day Local Buffer Overflow Exploit Bug discovered by Krystian Kloskowski h07 [email protected] Tested on: Download Accelerator Plus 8.6 / XP SP2 Polish Shellcode: Windows Execute Command calc Just for fun ;...
OllyDBG v1.10 and ImpREC v1.7f (export name) BOF PoC
No description provided by source. ;-------------------------------------------------------------------------; ; OllyDBG v1.10 and ImpREC v1.7f export name buffer overflow vulnerability ; PoC probably older versions affected too, not tested though. ; ; Included shellcode shows a messagebox WinXP...
Download Accelerator Plus - DAP 8.x (m3u) Local BOF Exploit 0day
Exploit for unknown platform in category local exploits ================================================================ Download Accelerator Plus - DAP 8.x m3u Local BOF Exploit 0day ================================================================ !/usr/bin/python Download Accelerator Plus - DAP...
OllyDBG v1.10 and ImpREC v1.7f (export name) BOF PoC
Exploit for unknown platform in category local exploits ==================================================== OllyDBG v1.10 and ImpREC v1.7f export name BOF PoC ==================================================== ;-------------------------------------------------------------------------; ; OllyDB...
OllyDBG 1.10 and ImpREC 1.7f - Export Name Buffer Overflow
;-------------------------------------------------------------------------; ; OllyDBG v1.10 and ImpREC v1.7f export name buffer overflow vulnerability ; PoC probably older versions affected too, not tested though. ; ; Included shellcode shows a messagebox WinXP SP2 and is configured for ; OllyDBG...
Download Accelerator Plus DAP 8.x - .m3u Local Buffer Overflow
Download Accelerator Plus DAP 8.x - .m3u Local Buffer Overflow !/usr/bin/python Download Accelerator Plus - DAP 8.x m3u 0day Local Buffer Overflow Exploit Bug discovered by Krystian Kloskowski h07 Tested on: Download Accelerator Plus 8.6 / XP SP2 Polish Shellcode: Windows Execute Command calc Jus...
OllyDBG 1.10 and ImpREC 1.7f - Export Name Buffer Overflow
OllyDBG 1.10 and ImpREC 1.7f - Export Name Buffer Overflow ;-------------------------------------------------------------------------; ; OllyDBG v1.10 and ImpREC v1.7f export name buffer overflow vulnerability ; PoC probably older versions affected too, not tested though. ; ; Included shellcode...
linux/x86 snoop /dev/dsp shellcode 172 bytes
No description provided by source. / Placed the listener here http://www.milw0rm.com/down.php?id=1293 /str0ke / / hey folks, this is snoopshell, short and simply it snoops on /dev/dsp and after attempting to lower the audio quality will stream any data read on this device over a udp stream to a...