Xitami Web Server 2.5 - Remote Buffer Overflow (SEH + Egghunter)

Exploit Title: Xitami Web Server 2.5 Remote Buffer Overflow SEH + Egghunter Date: May 4, 2019 Author: ElSoufiane Version: 2.5b4 Tested on: Windows Vista Ultimate Build 6000 and Windows XP SP3 Professional Discovered by: Krystian Kloskowski Set up a multi handler listener in MSFConsole then run...

Arm Whois 3.11 - Buffer Overflow (ASLR)

Exploit Title: Arm Whois 3.11 - Buffer Overflow ASLR Google Dork: if applicable Date: 23/11/2018 Exploit Author: zephyr Vendor Homepage: http://www.armcode.com Software Link: http://www.armcode.com/downloads/arm-whois.exe Version: 3.11 Tested on: Windows Vista Ultimate SP1 x86 unpatched CVE : nSE...

TFTP Server 1.4 - 'WRQ' Remote Buffer Overflow (Egghunter)

Exploit Title: TFTP Server 1.4 - WRQ Buffer Overflow Exploit Egghunter Exploit Author: Karn Ganeshen Vendor Homepage: http://sourceforge.net/projects/tftp-server/ Version: 1.4 Tested on: Windows Vista SP2 Coded this for Vista Ultimate, Service Pack 2 3-byte overwrite + short jump + Egghunter...

OtsTurntables Free 1.00.047 - Overwrite (SEH) (PoC)

OtsTurntables Free 1.00.047 - Overwrite SEH PoC Exploit Title: OtsTurntables Free v1.00.047 SEH Overwrite POC Date: 14-01-2010 Author: Darkb0x Software Link: http://www.otsturntables.com/download-otsturntables-free/ Version: 1.00.047 Tested on: Windows Vista Ultimate English exploit code print...

EleCard MPEG PLAYER (.m3u file) Local Stack Overflow Exploit

!/usr/bin/perl By ALpHaNiX NullArea.Net THanks EAX 00000000 ECX 41414141 EDX 775A104D EBX 00000000 ESP 0012C280 EBP 0012C2A0 ESI 00000000 EDI 00000000 EIP 41414141 system"color 5"; if @ARGV != 1 exit; sub help print "X Usage : ./exploit.pl filename n"; $file = $ARGV0; print "n Xn"; print " XEleCa...

EleCard MPEG Player Stack Overflow

!/usr/bin/perl By ALpHaNiX NullArea.Net THanks EAX 00000000 ECX 41414141 EDX 775A104D EBX 00000000 ESP 0012C280 EBP 0012C2A0 ESI 00000000 EDI 00000000 EIP 41414141 system"color 5"; if @ARGV != 1 exit; sub help print "X Usage : ./exploit.pl filename \n"; $file = $ARGV0; print "\n X\n"; print "...

FreeSSHD 1.2.1 (Post Auth) Remote Seh Overflow Exploit

!/usr/bin/perl FreeSSHD 1.2.1 Post Auth Remote Seh Overflow http://freeddsshd.com/ Exploit based on securfrog Poc http://www.milw0rm.com/exploits/5709 Coded by Matteo Memelli aka ryujin Spaghetti & PwnSauce http://www.be4mind.com http://www.gray-world.net Tested on Windows XPSp2 EN / Windows Vist...

freeSSHd 1.2.1 (Post Auth) Remote SEH Overflow Exploit

Exploit for unknown platform in category remote exploits ====================================================== freeSSHd 1.2.1 Post Auth Remote SEH Overflow Exploit ====================================================== !/usr/bin/perl FreeSSHD 1.2.1 Post Auth Remote Seh Overflow...

freeSSHd 1.2.1 - (Authenticated) Remote Overflow (SEH)

!/usr/bin/perl FreeSSHD 1.2.1 Post Auth Remote Seh Overflow http://freeddsshd.com/ Exploit based on securfrog Poc http://www.milw0rm.com/exploits/5709 Coded by Matteo Memelli aka ryujin Spaghetti & PwnSauce http://www.be4mind.com http://www.gray-world.net Tested on Windows XPSp2 EN / Windows Vist...

freesshd-sehoverflow.txt

!/usr/bin/perl FreeSSHD 1.2.1 Post Auth Remote Seh Overflow http://freeddsshd.com/ Exploit based on securfrog Poc http://www.milw0rm.com/exploits/5709 Coded by Matteo Memelli aka ryujin Spaghetti & PwnSauce http://www.be4mind.com http://www.gray-world.net rm thisJunk use strict; use Net::SSH2; my...