7549 matches found
AIX 5.2 - 'netpmon' Local Privilege Escalation
/ IBM AIX netpmon elevated privileges exploit I just wanted to play with PowerPC Tested on 5.2 intropy intropy caughq.org / include include include include define DEBUG 1 define BUFFERSIZE 2048 define EGGSIZE 2048 define NOP 0x60 define ADDRESS 0x2ff22fff-BUFFERSIZE/2 char shellcodebinsh =...
AIX 5.2 - paginit Local Privilege Escalation
AIX 5.2 - paginit Local Privilege Escalation / IBM AIX paginit root exploit I just wanted to play with PowerPC Tested on 5.2 intropy intropy caughq.org / include include include include define DEBUG 1 define BUFFERSIZE 8000 define EGGSIZE 4003 define NOP 0x60 define ADDRESS 0x2ff22fff-EGGSIZE / l...
AIX 5.2 - 'ipl_varyon' Local Privilege Escalation
/ IBM AIX iplvaryon elevated privileges exploit I just wanted to play with PowerPC Tested on 5.2 intropy intropy caughq.org / include include include include define DEBUG 1 define BUFFERSIZE 2048 define EGGSIZE 2048 define NOP 0x60 define ADDRESS 0x2ff22fff-BUFFERSIZE/2 / lsd / char shellcodebins...
WinZIP <= 8.1 Command Line Local Buffer Overflow Exploit
Exploit for unknown platform in category local exploits ======================================================== WinZIP include define NOP 0x90 void main // create crafted command line char tmpfile = "c:\wzs45.tmp"; char winzippath = "C:\Program Files\WINZIP\winzip32.exe"; char zipandmailpar =...
ePSXe 1.6.0 - nogui() Local Privilege Escalation
ePSXe 1.6.0 - nogui Local Privilege Escalation / epsxe-e.c ePSXe v1. local exploit By: Qnix e-mail: q-nixathotmaildotcom ePSXe-website: www.epsxe.com EXP-Sample: root@Qnix:/epsxe gcc -o epsxe-e epsxe-e.c root@Qnix:/epsxe ./epsxe-e ePSXe v1. local exploit by Qnix | Q-nixathotmaildotcom Stack point...
ePSXe <= 1.6.0 nogui() Local Exploit
No description provided by source. / epsxe-e.c ePSXe v1. local exploit By: Qnix e-mail: q-nixathotmaildotcom ePSXe-website: www.epsxe.com EXP-Sample: root@Qnix:/epsxe gcc -o epsxe-e epsxe-e.c root@Qnix:/epsxe ./epsxe-e ePSXe v1. local exploit by Qnix | Q-nixathotmaildotcom Stack pointer ESP :...
Exim <= 4.41 dns_build_reverse Local Exploit
No description provided by source. / ripped straight off iDEFENSE advisory - so lazy I just picked up GDB... bored on a weeknight : nothing to write home to mother about due to the fact that you need a local user account on a server and all you get is to read other people's emails .... not even m...
Exim 4.41 - dns_build_reverse Local Read Emails
Exim 4.41 - dnsbuildreverse Local Read Emails / ripped straight off iDEFENSE advisory - so lazy I just picked up GDB... bored on a weeknight : nothing to write home to mother about due to the fact that you need a local user account on a server and all you get is to read other people's emails...
Exim 4.41 - 'dns_build_reverse' Local Read Emails
/ ripped straight off iDEFENSE advisory - so lazy I just picked up GDB... bored on a weeknight : nothing to write home to mother about due to the fact that you need a local user account on a server and all you get is to read other people's emails .... not even my own shellcode. aleph1 shellcode -...
Picasm 1.101.12 - Error Generation Remote Buffer Overflow
Picasm 1.101.12 - Error Generation Remote Buffer Overflow // source: https://www.securityfocus.com/bid/13698/info Picasm is affected by a remote buffer overflow vulnerability. An attacker can exploit this issue by supplying an excessive 'error' directive. If successfully exploited, this issue can...
Picasm 1.10/1.12 - Error Generation Remote Buffer Overflow
// source: https://www.securityfocus.com/bid/13698/info Picasm is affected by a remote buffer overflow vulnerability. An attacker can exploit this issue by supplying an excessive 'error' directive. If successfully exploited, this issue can allow a remote attacker to gain access to the affected...
4D WebStar Tomcat Plugin Remote Buffer Overflow Exploit
Exploit for unknown platform in category remote exploits ======================================================= 4D WebStar Tomcat Plugin Remote Buffer Overflow Exploit ======================================================= / 4d buffer overflow Braden Thomas the buffer is copied byte by byte...
dSMTP Mail Server 3.1b (Linux) - Format String
/ dSMTP - SMTP Mail Server 3.1b Linux Remote Root Format String Exploit cybertronicatgmxdotnet 05/05/2005 This exploits the "xtellmail" command! bindc0de breaks somehow, cb works fine! remote buffer space is about 256 bytes bad chars: 0x00, 0x20, 0x0a and prolly more NOTE: before you start, chang...
dSMTP Mail Server 3.1b Linux Remote Root Format String Exploit
No description provided by source. / dSMTP - SMTP Mail Server 3.1b Linux Remote Root Format String Exploit cybertronicatgmxdotnet 05/05/2005 This exploits the "xtellmail" command! bindc0de breaks somehow, cb works fine! remote buffer space is about 256 bytes bad chars: 0x00, 0x20, 0x0a and prolly...
Solaris 10.x - ESRI Arcgis Format String Privilege Escalation
/ ESRI 9.x Arcgis local root format string exploit Copyright Kevin Finisterre and John H. Bug found by Kevin Finisterre Exploit by John H. We overwrite the thrjmptable Tested on solaris 10 / include include include include include include include include include define VULPROG...
Solaris 10.x - ESRI Arcgis Format String Privilege Escalation
Solaris 10.x - ESRI Arcgis Format String Privilege Escalation / ESRI 9.x Arcgis local root format string exploit Copyright Kevin Finisterre and John H. Bug found by Kevin Finisterre Exploit by John H. We overwrite the thrjmptable Tested on solaris 10 / include include include include include...
Snmppd SNMP Proxy Daemon Remote Format String Exploit
Exploit for linux platform in category remote exploits ===================================================== Snmppd SNMP Proxy Daemon Remote Format String Exploit ===================================================== / Snmppd SNMP proxy daemon format string exploit cybertronicatgmxdotnet 04/29/20...
Golden FTP Server Pro 2.52 Remote Buffer Overflow Exploit (3rd)
No description provided by source. / \ golden ftp 2.52.0.0 remote r00t exploit / \ remote r00t exploit binds 4444 port on remote machine. / tested on: winxp sp0 rus \ / simple stack overflow in golden ftpd. \ if retaddr isn't right, ftpd will crash, and admin will be in big shit / 'coz ftpd won't...
Golden FTP Server Pro 2.52 - Remote Buffer Overflow (3)
/ \ golden ftp 2.52.0.0 remote r00t exploit / \ remote r00t exploit binds 4444 port on remote machine. / tested on: winxp sp0 rus \ / simple stack overflow in golden ftpd. \ if retaddr isn't right, ftpd will crash, and admin will be in big shit / 'coz ftpd won't start later ; \ / code to be...
MySQL MaxDB Webtool 7.5.00.23 - Remote Stack Overflow
MySQL MaxDB Webtool 7.5.00.23 - Remote Stack Overflow / MySQL MaxDB Webtool Remote Stack Overflow Exploit cybertronicatgmxdotnet 04/27/2005 / / / / / / / / / / / / / / / / / / / // // / // / / / / // / / // / / / / / / /, /./// // // //// // -- exploit by : cybertronic -...