Linux/x86 Read /etc/passwd Shellcode 58 bytes

/ Shellcode Title: Linux/x86 - Read File /etc/passwd 58 bytes. NULL byte free Author: Kiewicz @Kiewicz Homepage: https://0xkiewicz.github.io Tested on: Debian/x86 gcc -o shellcode -z execstack -fno-stack-protector shellcode.c PA-7854 / / $ objdump -d -M intel readfile readfile: file format...

UltraISO 9.7.1.3519 - 'Output FileName' Local Buffer Overflow (SEH)

!/usr/bin/python Exploit Title: UltraISO 9.7.1.3519 - Local Buffer Overflow SEH Date: 30/01/2019 Exploit Author: Dino Covotsos - Telspace Systems Vendor Homepage: https://www.ultraiso.com/ Version: 9.7.1.3519 Software Link: https://www.ultraiso.com/download.html Contact: [email protected]...

HTML Video Player 1.2.5 Local Buffer Overflow

!/usr/bin/python Exploit Title: HTML Video Player 1.2.5 - Local Buffer Overflow - Non SEH Date: 27/01/2019 Exploit Author: Dino Covotsos - Telspace Systems Vendor Homepage: http://www.html5videoplayer.net/download.html Software: http://www.html5videoplayer.net/html5videoplayer-setup.exe Contact:...

Easy Video To iPod Converter 1.6.20 Buffer Overflow

Exploit Title: Easy Video to iPod Converter - Local Buffer Overflow SEH Date: 2019-01-26 Exploit Author: Nawaf Alkeraithe Twitter: @Alkeraithe1 Vulnerable Software: Easy Video to iPod Converter 1.6.20 Vendor Homepage: http://www.divxtodvd.net/ Version: 1.6.20 Software Link:...

HTML5 Video Player 1.2.5 - Local Buffer Overflow (Non SEH)

!/usr/bin/python Exploit Title: HTML5 Video Player 1.2.5 - Local Buffer Overflow - Non SEH Date: 27/01/2019 Exploit Author: Dino Covotsos - Telspace Systems Vendor Homepage: http://www.html5videoplayer.net/download.html Software: http://www.html5videoplayer.net/html5videoplayer-setup.exe Contact:...

Linux/x86 exit(0) Shellcode (5 bytes)

/ Exit.asm Author: Daniele Votta Description: Exit with no nulls. Tested on: i686 GNU/Linux Shellcode Length: 5 / include include / Disassembly of section .text: 00000000 : 0: 31 c0 xor eax,eax 2: 40 inc eax 3: cd 80 int 0x80 ======================= POC Daniele Votta ======================= /...

CloudMe Sync 1.11.2 Buffer Overflow - WoW64 (DEP Bypass)

CloudMe Sync 1.11.2 Buffer Overflow - WoW64 DEP Bypass Exploit Title: CloudMe Sync v1.11.2 Buffer Overflow - WoW64 - DEP Bypass Date: 24.01.2019 Exploit Author: Matteo Malvica Vendor Homepage:https://www.cloudme.com/en Software: https://www.cloudme.com/downloads/CloudMe1112.exe Category: Remote...

R 3.4.4 Local Buffer Overflow

!/usr/bin/python Exploit Title: R 3.4.4 - Local Buffer Overflow Windows XP SP3 Date: 21/01/2019 Exploit Author: Dino Covotsos - Telspace Systems Vendor Homepage: https://cloud.r-project.org/bin/windows/ Contact: [email protected] Twitter: @telspacesystems Version: 3.4.4 Tested on: Windows X...

CloudMe Sync 1.11.2 Buffer Overflow

Exploit Title: CloudMe Sync v1.11.2 Buffer Overflow + Egghunt Date: 23.04.2018 Exploit Author:T3jv1l Vendor Homepage:https://www.cloudme.com/en Software: https://www.cloudme.com/downloads/CloudMe1112.exe Category:Local Contact:https://twitter.com/T3jv1l Version: CloudMe Sync 1.11.2 - Buffer...

Linux/x86 TCP/4444 Bindshell Shellcode (100 bytes)

; Title : Linux/x86 - Bind 4444/TCP Shell /bin/bash Shellcode 100 bytes ; Date : Jan, 2019 ; Author : Joao Batista ; Website : overflw.wordpress.com ; Twitter : @x42x42x42x42 ; SLAE-ID : 1420 ; Tested on : i686 GNU/Linux global start section .text start: xor eax,eax xor ebx,ebx ; socket push ebx...

Router exploitation of the Stack Overflow entry a-vulnerability warning-the black bar safety net

MIPS instruction set is mainly used in some embedded IOT devices, such as Router, camera. To these devices for binary vulnerability mining you need to have the MIPS to have a certain familiar. The MIPS instruction set of Stack Overflow and the x86 instruction set is different, so the exploits is...

exploitdbddd

This is an official repository of The Exploit Database, a project sponsored by Offensive Security. The repository contains a collection of public exploits and corresponding vulnerable software, developed for use by penetration testers and vulnerability researchers. The Exploit Database is an...

The vulnerability of the atlcore_.dll library in the enterprise resource management system Galaktika ERP allows a hacker to execute arbitrary code.

The vulnerability of the atlcore.dll library in the enterprise resource management system Galaktika ERP is related to architectural weaknesses in the processing components that handle remote procedure calls. This means that when addresses are transferred between the client and the server, it is...

Dokany 1.2.0.1000 Buffer Overflow / Privilege Escalation

/ Exploit Title - Dokany Stack-based Buffer Overflow Privilege Escalation Date - 14th January 2019 Discovered by - Parvez Anwar @parvezghh Vendor Homepage - http://dokan-dev.github.io Tested Version - 1.2.0.1000 Driver Version - 1.2.0.1000 - dokan1.sys Software package -...

Windows/x86 - Download With TFTP And Execute Shellcode (Generator) (51-60 bytes)

!/bin/python Author: Semen Alexandrovich Lyhin. https://www.linkedin.com/in/semenlyhin/ This script generates x86 shellcode to download and execute .exe file via tftp. File name should be equal to: "1.exe" Lenght: 51-56 bytes, zero-free. import sys def GetOpcodesip,addr: command = r"tftp -i " + i...

Ayukov NFTP FTP Client 2.0 - Buffer Overflow Exploit

Exploit for windows platform in category local exploits Exploit Title: Ayukov NFTP FTP Client 2.0 - Buffer Overflow Exploit Author: Uday Mittal Vendor Homepage: http://www.ayukov.com/nftp/ Software Link: ftp://ftp.ayukov.com/pub/src/nftp-1.72.zip Version : below 2.0 Tested on: Microsoft Windows X...

Ayukov NFTP FTP Client 2.0 Buffer Overflow

Exploit Title: Ayukov NFTP FTP Client 2.0 - Buffer Overflow Date: 2018-12-29 Exploit Author: Uday Mittal Vendor Homepage: http://www.ayukov.com/nftp/ Software Link: ftp://ftp.ayukov.com/pub/src/nftp-1.72.zip Version : below 2.0 Tested on: Microsoft Windows XP SP3 CVE: CVE-2017-15222 EIP Location:...

Smap - Shellcode Mapper

Handy tool for shellcode analysis. Requirements objdump Installation and execution Then you can download smap by cloning the Git repository: git clone https://github.com/suraj-root/smap.git cd smap/ python smap.py -h get shellcodes @ http://shell-storm.org/shellcode/,...

Linux/x64 - Disable ASLR Security Shellcode (93 Bytes)

/ ASLR Address Space Layout Randomization Disable Shellcode Language C & ASM - Linux/x8664 Author : Kağan Çapar contact: email protected shellcode len : 93 bytes compilation: gcc -fno-stack-protector -z execstack .c -o Test: run shellcode ./aslr etc. check : cat /proc/sys/kernel/randomizevaspace...

Linux/x86 - Kill All Processes Shellcode (14 bytes)

Exploit Title: Linux/x86 - Kill All Processes Shellcode 14 bytes Exploit Author: strider Vendor Homepage: None Software Link: None Tested on: Debian 9 Stretch i386/ Kali Linux i386 CVE : None Shellcode Length: 14 Description: Linux/x86 kill 9 -1 14 bytes...