35 matches found
Apple iOS 5.1.1 Safari Browser - JS match() search() Crash (PoC)
Apple iOS 5.1.1 Safari Browser - JS match search Crash PoC !/usr/bin/env ruby - Title iOS \n\ Crash PoC\n\ \n\ var s = "poc";\n\ s.match"chrbufferlen";\n\ \n\ "; def help puts "iOS = v5.1.1 Safari Browser JS match, search Crash PoC" puts "$0 -p bindport -h bindaddress --verbose" end Parsing...
Internet Explorer 8 CSS Parser Exploit
!/usr/bin/env ruby Source: http://www.breakingpointsystems.com/community/blog/ie-vulnerability/ Author: Nephi Johnson d0cs4vage require 'socket' def httpsendsock, data, opts= defaults = :code="200", :message="OK", :type="text/html" opts = defaults.mergeopts code = opts:code message = opts:message...
Talkative IRC 0.4.4.16 - Response Buffer Overflow (Metasploit)
$Id: talkativeresponse.rb 10998 2010-11-11 22:43:22Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
RealVNC 3.3.7 - Client Buffer Overflow (Metasploit)
$Id: realvncclient.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...
Eureka Email 2.2q ERR Remote Buffer Overflow Exploit (meta)
No description provided by source. class Metasploit3 Msf::Exploit::Remote Rank = NormalRanking include Msf::Exploit::Remote::TcpServer include Msf::Exploit::Egghunter def initializeinfo = superupdateinfoinfo, 'Name' = 'Eureka Email 2.2q ERR Remote Buffer Overflow Exploit', 'Description' = %q This...
mIRC <= 6.34 PRIVMSG Handling Stack Overflow
$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ class Metasploit3 'mIRC %q This module exploits a...
Apple Quicktime RTSP 10.4.0 - 10.5.0 Content-Type Overflow (OS X)
No description provided by source. require 'msf/core' class Metasploit3 Msf::Exploit::Remote include Exploit::Remote::TcpServer def initializeinfo = superupdateinfoinfo, 'Name' = 'MacOS X QuickTime RTSP Content-Type Overflow', 'Platform' = 'osx', 'Targets' = 'Mac OS X 10.4.0 PowerPC, QuickTime...
Apple QuickTime RTSP 10.4.0 - 10.5.0 Content-Type Overflow (OS X)
Exploit for unknown platform in category remote exploits ================================================================= Apple QuickTime RTSP 10.4.0 - 10.5.0 Content-Type Overflow OS X ================================================================= Title: Apple Quicktime RTSP 10.4.0 - 10.5.0...
mDNSResponder 10.4.0/10.4.8 (OSX) - UPnP Location Overflow (Metasploit)
require 'msf/core' class Metasploit3 'Mac OS X mDNSResponder UPnP Location Overflow', 'Platform' = 'osx', 'DefaultOptions' = 'SRVPORT' = 1900, 'RPORT' = 0 , 'Targets' = '10.4.8 x86', mDNSResponder-108.2 'Arch' = ARCHX86, Offset to mDNSStorage structure 'Offset' = 21000, 'Magic' = 0x8fe510a0,...
Apple QuickTime RTSP 10.4.0 < 10.5.0 (OSX) - Content-Type Overflow (Metasploit)
require 'msf/core' class Metasploit3 'MacOS X QuickTime RTSP Content-Type Overflow', 'Platform' = 'osx', 'Targets' = 'Mac OS X 10.4.0 PowerPC, QuickTime 7.0.0', 'Arch' = ARCHPPC, 'Ret' = 0x8fe3f88c, 'RetOffset' = 551, 'PayloadOffset' = 879 , 'Mac OS X 10.5.0 PowerPC, QuickTime 7.2.1', 'Arch' =...
ProFTP 2.9 (welcome message) Remote Buffer Overflow Exploit (meta)
Exploit for windows platform in category remote exploits ================================================================== ProFTP 2.9 welcome message Remote Buffer Overflow Exploit meta ================================================================== This file is part of the Metasploit Framewo...
Unix Command Shell, Bind TCP (via Ruby)
Continually listen for a connection and spawn a command shell via Ruby This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 137 include Msf::Payload::Single include...
Apple CFNetwork - HTTP Response Denial of Service (Ruby)
Apple CFNetwork - HTTP Response Denial of Service Ruby !/usr/bin/ruby c Copyright 2007 Lance M. Havok Proof of concept for MOAB-25-01-2007. require 'socket' webport = ARGV0 || 80.toi puts "++ Starting HTTP server at port webport." webserver = TCPServer.newnil, webport while session =...
Apple CFNetwork - HTTP Response Denial of Service
!/usr/bin/ruby c Copyright 2007 Lance M. Havok Proof of concept for MOAB-25-01-2007. require 'socket' webport = ARGV0 || 80.toi puts "++ Starting HTTP server at port webport." webserver = TCPServer.newnil, webport while session = webserver.accept randclen = rand80 useragent =...
Apple Quicktime <= 7.1.3 (HREFTrack) Cross-Zone Scripting Exploit
Exploit for macOS platform in category remote exploits ================================================================= Apple Quicktime Original scripting and POC by Aviv Raff http://aviv.raffon.net. Description: Exploit for MOAB-03-01-2007. If argument 'serve' is passed, it uses port 21 for...