DATAC RealWin SCADA 1.06 Buffer Overflow Exploit

Exploit for windows platform in category remote exploits ================================================ DATAC RealWin SCADA 1.06 Buffer Overflow Exploit ================================================ Exploit Title: RealWin SCADA System SEH Overwrite Date: 10-27-10 Author: Blake Software Link:...

linux/ARM - Bindshell port 0x1337 Shellcode

Exploit for linux/x86 platform in category shellcode =========================================== linux/ARM - Bindshell port 0x1337 Shellcode =========================================== / Title: arm-bind-listen Brief: Bind a shell to port 0x1337 on any local address and wait for connections Author...

linux/ARM - Bind Connect UDP Port 68 Shellcode

Exploit for linux/x86 platform in category shellcode ============================================== linux/ARM - Bind Connect UDP Port 68 Shellcode ============================================== / Title: arm-bind-connect-udp Brief: Bind to port 68 on any local address and plug a udp shell onto to...

linux/ARM - Loader Port 0x1337 Shellcode

Exploit for linux/x86 platform in category shellcode ======================================== linux/ARM - Loader Port 0x1337 Shellcode ======================================== / Title: arm-loader Brief: Bind port 0x1337 on any local interface, listen for a connection receive a payload, and pass...

DATAC RealWin SCADA Server 1.06 - Remote Buffer Overflow

Exploit Title: RealWin SCADA System SEH Overwrite Date: 10-27-10 Author: Blake Software Link: http://www.realflex.com/products/realwin/realwin.php Version: 1.06 Tested on: Windows XP SP3 running in VMware Workstation rfx import socket, sys if lensys.argv!= 3: print "\n Usage: %s \n" % sys.argv0...

Winamp 5.5.8 (in_mod plugin) Stack Overflow Exploit

Exploit for windows platform in category local exploits =================================================== Winamp 5.5.8 inmod plugin Stack Overflow Exploit =================================================== !/usr/bin/python Pwn And Beans by Mighty-D presents: Winamp 5.5.8.2985 inmod plugin Stac...

Winamp 5.5.8.2985 Stack Overflow

!/usr/bin/python Pwn And Beans by Mighty-D presents: Winamp 5.5.8.2985 inmod plugin Stack Overflow WINDOWS XP SP3 FULLY PATCHED - NO ASLR OR DEP BYPASS... yet Bug found by http://www.exploit-db.com/exploits/15248/ POC by fdisk Exploit by Mighty-D Special thanks to: fdisk: Who wrote the skeleton o...

Microsoft Office Excel RTD Topic String Buffer Overflow

Added: 10/20/2010 CVE: CVE-2010-1246 BID: 40524 OSVDB: 65238 Background Microsoft Excel, part of the Microsoft Office product suite, is a spreadsheet application for Windows platforms. Problem Microsoft Office Excel 2002 is vulnerable to a buffer overflow when parsing Real Time Data RTD Future...

EasyFTP version 1.7.0.11 and version 1.7.0.2 Crash PoC

Exploit for windows platform in category dos / poc ====================================================== EasyFTP version 1.7.0.11 and version 1.7.0.2 Crash PoC ====================================================== sub banner print q PoC EasyFTP 1.7.0.X Crash Author: Inj3cti0n P4ck3t e-mail:...

MOXA MediaDBPlayback ActiveX Control Buffer Overflow

This module exploits a stack buffer overflow in MOXAActiveXSDK. When sending an overly long string to the PlayFileName of MediaDBPlayback.DLL 2.2.0.5 an attacker may be able to execute arbitrary code. Module Options msf use exploit/windows/fileformat/moxa/mediadbplayback msf...

Seagull FTP v3.3 build 409 Stack Buffer Overflow

$Id: seagulllistreply.rb 10661 2010-10-12 18:40:13Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

AoA Audio Extractor v2.x ActiveX ROP exploit

Exploit for windows platform in category remote exploits ============================================ AoA Audio Extractor v2.x ActiveX ROP exploit ============================================ AoA Audio Extractor v2.x ActiveX ROP exploit Hadji Samir - s-dzhotmail.fr & mrme - mrmenet-ninja.net ' RO...

AoA Audio Extractor 2.x - ActiveX ROP

AoA Audio Extractor v2.x ActiveX ROP exploit Hadji Samir - s-dzhotmail.fr & mrme - mrmenet-ninja.net ' ROP magic begins here: Stack pivot seh = unescape"%72%2a%02%10"' 0x10022a72 == ADD ESP,604; RETN 4 ' VirtualProtect placeholders ; vp = "AAAA" vp = vp + "BBBB" vp = vp + "CCCC" vp = vp + "DDDD" ...

Microsoft IIS FTP Server NLST Response Overflow

$Id: ms09053ftpdnlst.rb 10558 2010-10-05 23:39:14Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

win32 generic - add new local administrator 326 bytes

Exploit for win32 platform in category shellcode ===================================================== win32 generic - add new local administrator 326 bytes ===================================================== / Title: generic win32 - add new local administrator 326 bytes Author: Anastasios...

generic win32 - add new local administrator 326 bytes

generic win32 - add new local administrator 326 bytes. Shellcode exploit for windows platform / Title: generic win32 - add new local administrator 326 bytes Author: Anastasios Monachos secuid0 - anastasiosmatgmaildotcom Method: Dynamic opcode, encoded shellcode Tested on: WinXP Pro SP3 EN 32bit -...

win32/xp sp3 (Tr) cmd.exe Shellcode 42 bytes

Exploit for win32 platform in category shellcode ============================================ win32/xp sp3 Tr cmd.exe Shellcode 42 bytes ============================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ ...

win32/xp sp3 (Tr) About Box Shellcode 77 bytes

Exploit for win32 platform in category shellcode ============================================== win32/xp sp3 Tr About Box Shellcode 77 bytes ============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, ...

win32 9x/NT/2k/XP Generic cmd.exe Shellcode 159 bytes

Exploit for win32 platform in category shellcode ===================================================== win32 9x/NT/2k/XP Generic cmd.exe Shellcode 159 bytes ===================================================== ; Windows 9x/NT/2k/XP Generic cmd.exe Shellcode ; 159 bytes ; ; free of null bytes \x0...

Quick Player 1.3 Unicode SEH Exploit

Quick Player 1.3 Unicode SEH Exploit Author Abhishek Lyall and Puneet Jain [email protected] , abhilyallatgmaildotcom, infoataslitsecuritydotcom Web - http://www.aslitsecurity.com/ Blog - http://www.aslitsecurity.blogspot.com/ Download Vulnerable application from...