PlayMeNow 7.37.4 - .M3U Playlist File Buffer

PlayMeNow 7.37.4 - .M3U Playlist File Buffer / + Vulnerability: PlayMeNow Malformed M3U Playlist File Buffer Overflow + Product: PlayMeNow - media player. + Versions affected: Tested with 7.3 and 7.4 + Tested on: Windows XP Professional with Service Pack 2 + Author: Gr33nG0bL1n + Software Link:...

PlayMeNow Malformed M3U Playlist WinXP Universal BOF

Exploit for unknown platform in category local exploits ==================================================== PlayMeNow Malformed M3U Playlist WinXP Universal BOF ==================================================== Title: PlayMeNow Malformed M3U Playlist WinXP Universal BOF CVE-ID: OSVDB-ID:...

PlayMeNow Malformed M3U Playlist File Buffer

No description provided by source. / + Vulnerability: PlayMeNow Malformed M3U Playlist File Buffer Overflow + Product: PlayMeNow - media player. + Versions affected: Tested with 7.3 and 7.4 + Tested on: Windows XP Professional with Service Pack 2 + Author: Gr33nG0bL1n + Software Link:...

PlayMeNow (Windows XP Universal) - '.M3U' Playlist Buffer Overflow

!/usr/bin/python Vulnerability: PlayMeNow Malformed M3U Playlist WinXP Universal BoF Product: PlayMeNow - media player. Versions affected: Tested with 7.3 and 7.4 Tested on: Windows XP Pro SP2/3 & Home SP3 Author: loneferret Original Author: Gr33nG0bL1n Reference:...

PlayMeNow 7.3/7.4 - '.M3U' Playlist File Buffer

/ + Vulnerability: PlayMeNow Malformed M3U Playlist File Buffer Overflow + Product: PlayMeNow - media player. + Versions affected: Tested with 7.3 and 7.4 + Tested on: Windows XP Professional with Service Pack 2 + Author: Gr33nG0bL1n + Software Link: http://playmenow.gooofull.com/ + Date:...

TFTP Server Buffer Overflow

!/usr/bin/env python This vuln is already owned by Muts , but i want to add the second methode Note: we don't have more space for shellcode or Skape egghunter 23 bytes only after SEH option I used the jumpback because is the best and easiest way for exploiting a SEH overwrite option Reference:...

TFTP SERVER Buffer Overflow remote exploit

No description provided by source. !/usr/bin/env python This vuln is already owned by Muts , but i want to add the second methode Note: we don't have more space for shellcode or Skape egghunter 23 bytes only after SEH option I used the jumpback because is the best and easiest way for exploiting a...

TFTP Server 1.4 - Remote Buffer Overflow (2)

TFTP Server 1.4 - Remote Buffer Overflow 2 !/usr/bin/env python This vuln is already owned by Muts , but i want to add the second methode Note: we don't have more space for shellcode or Skape egghunter 23 bytes only after SEH option I used the jumpback because is the best and easiest way for...

Adobe FlateDecode Stream Predictor 02 Integer Overflow

This module exploits an integer overflow vulnerability in Adobe Reader and Adobe Acrobat Professional versions before 9.2. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'zlib' class MetasploitModule 'Adobe...

HP OpenView NNM 7.53, 7.51 OVAS.EXE Pre-Authentication Stack Buffer Overflow

This module exploits a stack buffer overflow in HP OpenView Network Node Manager versions 7.53 and earlier. Specifically this vulnerability is caused by a failure to properly handle user supplied input within the HTTP request including headers and the actual URL GET request. Exploitation is trick...

Linux - setuid(0) and cat /etc/shadow

No description provided by source. include stdio.h / linux/x86 ; setuid0 & execve/bin/cat /etc/shadow 49 bytes written by ka0x - ka0x01alt+64gmail.com lun sep 21 16:40:16 CEST 2009 greets: an0de, Piker, xarnuz, NullWave07, Pepelux, JosS, sch3m4, Trancek and others! / int main char shellcode =...

Linux - setuid(0) & execve("/sbin/poweroff -f")

No description provided by source. include stdio.h / linux/x86 ; setuid0 & execve"/sbin/poweroff -f" 47 bytes written by ka0x - ka0x01alt+64gmail.com lun sep 21 16:40:16 CEST 2009 greets: an0de, Piker, xarnuz, NullWave07, Pepelux, JosS, sch3m4, Trancek, Hendrix and others! / int main char shellco...

Linux - linux/x86 execve() - 51bytes

No description provided by source. / linux/x86 execve51bytes 08048080 start: 8048080: eb 1a jmp 804809c 08048082 : 8048082: 5e pop %esi 8048083: 31 c0 xor %eax,%eax 8048085: 88 46 07 mov %al,0x7%esi 8048088: 8d 1e lea %esi,%ebx 804808a: 89 5e 08 mov %ebx,0x8%esi 804808d: 89 46 0c mov %eax,0xc%esi...

win xp sp2 PEB ISbeingdebugged shellcode

No description provided by source. name: win xp sp2 PEB ISbeingdebugged shellcode Date: 14.12.2009. here is the ASM code made using masm32 if program is being run under debugger the shellcode wil start beeping :D //////////////////////begin/////////////////////////////////////// .386 .model flat,...

win32/xp sp2 PEB ISbeingdebugged shellcode

Exploit for win32 platform in category shellcode ================================ win32/xp sp2 PEB ISbeingdebugged ================================ name: win xp sp2 PEB ISbeingdebugged shellcode Date: 14.12.2009. here is the ASM code made using masm32 if program is being run under debugger the...

win xp sp2 PEB ISbeingdebugged shellcode

win xp sp2 PEB ISbeingdebugged shellcode. Shellcode exploit for windows platform name: win xp sp2 PEB ISbeingdebugged shellcode Author: Anonymous Date: 14.12.2009. here is the ASM code made using masm32 if program is being run under debugger the shellcode wil start beeping :D...

HP OpenView Network Node Manager (OV NNM) 7.53 - ovalarm.exe CGI Remote Buffer Overflow

HP OpenView Network Node Manager OV NNM 7.53 - ovalarm.exe CGI Remote Buffer Overflow !/usr/bin/python HP NNP ovalarm.exe CGI Remote Buffer Overflow - Pre Authentication Tested on XP SP3 + IIS + NNM Release B.07.50 Authors: muts & sinn3r x90.sinner a.t gmail.c0m Reference:...

Easy RM to MP3 Converter 2.7.3.700

No description provided by source. import sys print "\n============================" print " Easy RM to MP3 Converter 2.7.3.700 .m3u File Buffer Overflow Exploit " print " Tested on Windows XP SP3 " print "============================\n" calc.exe - 85 bytes shellcode...

Audio Workstation 6.4.2.4.0 Buffer Overflow

!/usr/bin/python Audio Workstation v6.4.2.4.0 .pls Universal Local BoF Exploit Credits: germayax Coded by: mrme Tested on Windows XP SP3 Note: For educational purposes only mrme@home:$ nc -v 192.168.0.6 4444 192.168.0.6: inverse host lookup failed: Unknown server error : Connection timed out...

Audio Workstation 6.4.2.4.0 - .pls Universal Local Buffer Overflow

Audio Workstation 6.4.2.4.0 - .pls Universal Local Buffer Overflow !/usr/bin/python Audio Workstation v6.4.2.4.0 .pls Universal Local BoF Exploit Credits: germayax Coded by: mrme Tested on Windows XP SP3 Note: For educational purposes only mrme@home:$ nc -v 192.168.0.6 4444 192.168.0.6: inverse...