7303 matches found
Linux Execute Command
Execute an arbitrary command or just a /bin/sh shell This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework Exec ---- Executes an arbitrary command. module MetasploitModule CachedSize = 43 include Msf::Payload::Single includ...
FreeBSD : zip -- long path buffer overflow (40549bbf-43b5-11d9-a9e7-0001020eed82)
A HexView security advisory reports : When zip performs recursive folder compression, it does not check for the length of resulting path. If the path is too long, a buffer overflow occurs leading to stack corruption and segmentation fault. It is possible to exploit this vulnerability by embedding...
linux/x86 chroot & standart 66 bytes
Exploit for linux/x86 platform in category shellcode ==================================== linux/x86 chroot & standart 66 bytes ==================================== Linux/x86 chroot and standart shellcode. By Okti http://okti.nm.ru...
linux/x86 chroot & standart 66 bytes
No description provided by source. Linux/x86 chroot and standart shellcode. By Okti http://okti.nm.ru ---------------------------------------------------------------------------------------------- / Mkdir and Chroot are written in C: / includestdio.h includeunistd.h includesys/types.h...
linux/x86 chroot & standart 66 bytes
linux/x86 chroot & standart 66 bytes. Shellcode exploit for linx86 platform / Linux/x86 chroot and standart shellcode. By Okti http://okti.nm.ru ---------------------------------------------------------------------------------------------- / / Mkdir and Chroot are written in C: / include include...
Internet Download Manager <= 4.05 Input URL Stack Overflow Exploit
No description provided by source. / Title : Internet Download Manager = 4.05 universal remote overflow Exploit bug analyse and exploit code by : c0d3r "Kaveh Razavi" [email protected] my advisory : http://www.ihsteam.com/advisory/downloadmanageradv.txt this bug is differnt from what was found in...
Internet Download Manager 4.0.5 - Input URL Stack Overflow
/ Title : Internet Download Manager = 4.05 universal remote overflow Exploit bug analyse and exploit code by : c0d3r "Kaveh Razavi" [email protected] my advisory : http://www.ihsteam.com/advisory/downloadmanageradv.txt this bug is differnt from what was found in application called altnet download...
Local Root exploit (Fedora Core 4)
Local Root Exploit under Fedora Core 4 stable Advisory Florian Strankowski [email protected] www.bildunxxluecke.de/usr/florian/advisory/advisory-05-048.txt Vulnerable System : This vulnerability affects Fedora Core 4.0 stable with the kernelversion 2.6.11-1.1369FC4 1 Thu Jun 2 22:53:35...
PeerCast <= 0.1211 Remote Format String Exploit
Exploit for linux platform in category remote exploits =============================================== PeerCast \ / by Darkeagle darkeagle at linkin-park dot cc \ / uKt researcherz http://unl0ck.org \ / greetz goes to: uKt researcherz. \ / \ - smallest code - better code!!! / / include include...
linux/x86 upload & exec 189 bytes
Exploit for linux/x86 platform in category shellcode ================================= linux/x86 upload & exec 189 bytes ================================= UPLOAD & EXEC SHELLCODE 1 converting asm to hex 2 asm code 3 hex output 4 upload function This is an 'upload and exec' shellcode for the x86...
linux/x86 upload & exec 189 bytes
linux/x86 upload & exec 189 bytes. Shellcode exploit for linx86 platform UPLOAD & EXEC SHELLCODE 1 converting asm to hex 2 asm code 3 hex output 4 upload function This is an 'upload and exec' shellcode for the x86 platform. File has to be in executable format, cool if you know the distribution of...
linux/x86 upload & exec 189 bytes
No description provided by source. UPLOAD & EXEC SHELLCODE 1 converting asm to hex 2 asm code 3 hex output 4 upload function This is an 'upload and exec' shellcode for the x86 platform. File has to be in executable format, cool if you know the distribution of the target, otherwise it is useless...
AIX 5.2 ipl_varyon Local Elevated Privileges Exploit
Exploit for aix platform in category local exploits ==================================================== AIX 5.2 iplvaryon Local Elevated Privileges Exploit ==================================================== / IBM AIX iplvaryon elevated privileges exploit I just wanted to play with PowerPC Test...
AIX 5.2 - netpmon Local Privilege Escalation
AIX 5.2 - netpmon Local Privilege Escalation / IBM AIX netpmon elevated privileges exploit I just wanted to play with PowerPC Tested on 5.2 intropy intropy caughq.org / include include include include define DEBUG 1 define BUFFERSIZE 2048 define EGGSIZE 2048 define NOP 0x60 define ADDRESS...
AIX 5.2 - 'netpmon' Local Privilege Escalation
/ IBM AIX netpmon elevated privileges exploit I just wanted to play with PowerPC Tested on 5.2 intropy intropy caughq.org / include include include include define DEBUG 1 define BUFFERSIZE 2048 define EGGSIZE 2048 define NOP 0x60 define ADDRESS 0x2ff22fff-BUFFERSIZE/2 char shellcodebinsh =...
AIX 5.2 - paginit Local Privilege Escalation
AIX 5.2 - paginit Local Privilege Escalation / IBM AIX paginit root exploit I just wanted to play with PowerPC Tested on 5.2 intropy intropy caughq.org / include include include include define DEBUG 1 define BUFFERSIZE 8000 define EGGSIZE 4003 define NOP 0x60 define ADDRESS 0x2ff22fff-EGGSIZE / l...
AIX 5.2 - 'ipl_varyon' Local Privilege Escalation
/ IBM AIX iplvaryon elevated privileges exploit I just wanted to play with PowerPC Tested on 5.2 intropy intropy caughq.org / include include include include define DEBUG 1 define BUFFERSIZE 2048 define EGGSIZE 2048 define NOP 0x60 define ADDRESS 0x2ff22fff-BUFFERSIZE/2 / lsd / char shellcodebins...
WinZIP <= 8.1 Command Line Local Buffer Overflow Exploit
Exploit for unknown platform in category local exploits ======================================================== WinZIP include define NOP 0x90 void main // create crafted command line char tmpfile = "c:\wzs45.tmp"; char winzippath = "C:\Program Files\WINZIP\winzip32.exe"; char zipandmailpar =...
ePSXe 1.6.0 - nogui() Local Privilege Escalation
ePSXe 1.6.0 - nogui Local Privilege Escalation / epsxe-e.c ePSXe v1. local exploit By: Qnix e-mail: q-nixathotmaildotcom ePSXe-website: www.epsxe.com EXP-Sample: root@Qnix:/epsxe gcc -o epsxe-e epsxe-e.c root@Qnix:/epsxe ./epsxe-e ePSXe v1. local exploit by Qnix | Q-nixathotmaildotcom Stack point...
ePSXe <= 1.6.0 nogui() Local Exploit
No description provided by source. / epsxe-e.c ePSXe v1. local exploit By: Qnix e-mail: q-nixathotmaildotcom ePSXe-website: www.epsxe.com EXP-Sample: root@Qnix:/epsxe gcc -o epsxe-e epsxe-e.c root@Qnix:/epsxe ./epsxe-e ePSXe v1. local exploit by Qnix | Q-nixathotmaildotcom Stack pointer ESP :...