bsd/x86 - portbind + fork shellcode (111 bytes)

Exploit for bsd/x86 platform in category shellcode / -------------- FreeBSD/x86 - portbind shell + fork 111 bytes-------------------- AUTHOR : Tosh OS : BSDx86 Tested on FreeBSD 8.1 EMAIL : email protected / include include include char shellcode =...

bsd/x86 - connect back Shellcode (81 bytes)

Exploit for bsd/x86 platform in category shellcode / -------------- FreeBSD/x86 - connect back /bin/sh. 81 bytes ---------------- AUTHOR : Tosh OS : BSDx86 Tested on FreeBSD 8.1 EMAIL : email protected / include include include char shellcode =...

BSD x86 portbind + fork shellcode 111 bytes

BSD x86 portbind + fork shellcode 111 bytes. Shellcode exploit for bsdx86 platform / -------------- FreeBSD/x86 - portbind shell + fork 111 bytes-------------------- AUTHOR : Tosh OS : BSDx86 Tested on FreeBSD 8.1 EMAIL : [email protected] / include include include char shellcode =...

A-PDF All to MP3 Converter 2.0.0 - .wav Local Buffer Overflow

A-PDF All to MP3 Converter 2.0.0 - .wav Local Buffer Overflow Exploit Title: A-PDF All to MP3 Converter v.2.0.0 stack based buffer overflow Software Link: http://www.a-pdf.com/all-to-mp3/download.htm Version: = 2.0.0 Tested on: Win XP SP3 French Date: 17/01/2011 Author: h1ch4m Email: h1ch4m@live....

eXtremeMP3 Player Buffer Overflow

+Exploit Title: Exploit Bufer Overflow eXtremeMP3 PlayerSEH +Date: 01\15\2010 +Author: C4SS!0 G0M3S +Software Link: http://ukms.tucows.com/files2/xtremv20RC1.exe +Version: 2.0 +Tested on: WIN-XP SP3 BRAZILIAN +CVE: N/A Create by C4SS!0 G0M3S WWW.INVASAO.COM.BR [email protected] / Note: To...

MS10-073: Win32k Keyboard Layout Vulnerability

Exploit for windows platform in category local exploits // My koala is staring at you CºgºD // Source: http://reversemode.com/index.php?option=comcontent&task=view&id=71&Itemid=1 include include include define MAGICOFFSET 0x6261 define InitializeUnicodeStrp,s \ p-Length= wcslens2; ...

Nokia Multimedia Player 1.0 SEH Unicode

Exploit Title: Nokia Multimedia player SEH Unicode Date: January 11 2011 Author: Carlos Mario Penagos Hollmann Software Link: http://www.brothersoft.com/nokia-multimedia-player-download-46238.html Version: 1.00.55.5010 Tested on: Windows xp sp3 running on VMware Fusion 3.1 and VirtualBox 3.2.8...

Nokia MultiMedia Player 1.0 - Local Overflow (SEH Unicode)

Nokia MultiMedia Player 1.0 - Local Overflow SEH Unicode Exploit Title: Nokia Multimedia player SEH Unicode Date: January 11 2011 Author: Carlos Mario Penagos Hollmann Software Link: http://www.brothersoft.com/nokia-multimedia-player-download-46238.html Version: 1.00.55.5010 Tested on: Windows xp...

Solar FTP Server 2.1 Buffer Overflow

------------------------------------------------------------------------ Software................Solar FTP Server 2.1 Vulnerability...........Buffer Overflow Download................http://www.solarftp.com/ Release Date............1/10/2011 Tested On...............Windows XP SP3 EN...

MS10-081: Windows Common Control Library (Comctl32) Heap Overflow

Exploit for windows platform in category remote exploits !/usr/bin/env ruby http://breakingpointsystems.com/community/blog/microsoft-vulnerability-proof-of-concept Nephi Johnson require 'socket' def httpsendsock, data, opts= defaults = :code="200", :message="OK", :type="text/html", :desc="content...

Winamp 5.5.8 (in_mod plugin) Stack Overflow Exploit (SEH)

Exploit for windows platform in category local exploits !/usr/bin/python finally got time to finish what I started... Winamp 5.5.8.2985 inmod plugin Stack Overflow SEH WINDOWS XP SP3 EN Fully Patched Bug found by http://www.exploit-db.com/exploits/15248/ POC and Exploit by fdisk This POC was...

Winamp 5.5.8 Stack Overflow

!/usr/bin/python finally got time to finish what I started... Winamp 5.5.8.2985 inmod plugin Stack Overflow SEH WINDOWS XP SP3 EN Fully Patched Bug found by http://www.exploit-db.com/exploits/15248/ POC and Exploit by fdisk This POC was already been released here without proper shellcode:...

Winamp 5.5.8 (in_mod plugin) - Local Stack Overflow (SEH)

!/usr/bin/python finally got time to finish what I started... Winamp 5.5.8.2985 inmod plugin Stack Overflow SEH WINDOWS XP SP3 EN Fully Patched Bug found by http://www.exploit-db.com/exploits/15248/ POC and Exploit by @fdiskyou e-mail: rui at deniable.org This POC was already been released here...

Winamp 5.5.8 (in_mod plugin) - Local Stack Overflow (SEH)

Winamp 5.5.8 inmod plugin - Local Stack Overflow SEH !/usr/bin/python finally got time to finish what I started... Winamp 5.5.8.2985 inmod plugin Stack Overflow SEH WINDOWS XP SP3 EN Fully Patched Bug found by http://www.exploit-db.com/exploits/15248/ POC and Exploit by @fdiskyou e-mail: rui at...

BS.Player 2.57 Buffer Overflow

+Exploit Title: Exploit Buffer Overfloe Bsplayer 2.57UNICODE-SEH +Date: 01\07\2010 +Author: C4SS!0 G0M3S +Software Link: http://www.bsplayer.com/services/downlad-free-bsplayer.php?type=2 +Version: 2.57 +Tested on: WIN-XP SP3 PORTUGUESE BRAZILIAN +CVE: N/A / Created By C4SS!0 G0M3S...

Enzip 3.00 - Local Buffer Overflow

Enzip 3.00 - Local Buffer Overflow +Exploit Title: Exploit Buffer Overflow Enzip 3.00 +Date: 01\06\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.bcuc.ac.uk/files/enzip300.exe +Version: 3.00 +Tested on: WIN-XP SP3 PORTUGUESE BRAZILIAN +CVE: N/A Create BY C4SS!0 G0M3S [email protected]...

CoolPlayer 2.18 DEP Bypass

Exploit for windows platform in category local exploits Exploit Title: CoolPlayer 2.18 DEP Bypass Date: January 2, 2011 Author: Blake Version: 2.18 Tested on: Windows XP SP3 running in Virtualbox Uses SetProcessDEPPolicy to disable DEP for the process Thanks to mrme for the encouragement Exploit-...

Bywifi 2.8.1 Stack Buffer Overflow

Exploit Title: bywifi 2.8.1 stack buffer overflow Author: Anonymous Software Link: bywifi.com Version: 2.8.1 Tested on: windows xp Professional French CVE : N/a include include include int main //file name char exploit700="bywifi.exe "; //ret addr char ret = "x5D\x38\x82\x7C"; //junk data char...

CoolPlayer 2.18 - DEP Bypass

CoolPlayer 2.18 - DEP Bypass Exploit Title: CoolPlayer 2.18 DEP Bypass Date: January 2, 2011 Author: Blake Version: 2.18 Tested on: Windows XP SP3 running in Virtualbox Uses SetProcessDEPPolicy to disable DEP for the process Thanks to mrme for the encouragement Exploit-DB Notes: May not work on a...

CoolPlayer 2.18 - DEP Bypass

Exploit Title: CoolPlayer 2.18 DEP Bypass Date: January 2, 2011 Author: Blake Version: 2.18 Tested on: Windows XP SP3 running in Virtualbox Uses SetProcessDEPPolicy to disable DEP for the process Thanks to mrme for the encouragement Exploit-DB Notes: May not work on all Win XP SP3 machines print...