QBik WinGate WWW Proxy Server 6.1.1.1077 - 'POST' Remote Buffer Overflow

Proof of concept not for "in the wild" kiddies QBik Wingate version 6.1.1.1077 remote exploit for Win2k SP4 german by kcope in 2006 use IO::Socket; if $ARGV0 eq "" print "param1 = remote host"; exit; win32bind - EXITFUNC=seh LPORT=4444 Size=709 Encoder=PexAlphaNum http://metasploit.com my...

Microsoft Windows - Telephony Service Command Execution (MS05-040)

Microsoft Windows - Telephony Service Command Execution MS05-040 // by Cesar Cerrudo - Argeniss - www.argeniss.com // // TAPI Vulnerability- MS05-040 // // Should work on Win2k sp0,sp1,sp2,sp3,sp4 any language // If Telephony Service is not running you can start it by net start "Telephony Service...

Microsoft Windows - Telephony Service Command Execution (MS05-040)

// by Cesar Cerrudo - Argeniss - www.argeniss.com // // TAPI Vulnerability- MS05-040 // // Should work on Win2k sp0,sp1,sp2,sp3,sp4 any language // If Telephony Service is not running you can start it by net start "Telephony Service" include "windows.h" include "stdio.h" include "tapi.h" typedef...

Ms05039 worms in the VC achieve-vulnerability warning-the black bar safety net

Article author: Zhang GE（nickchang） Information source: evil octal information security teamwww.eviloctal.com to This year 8 month, a new worm sniper wave using a ms05039 PnP service vulnerability because ms05039 exploit online is public, please see, you can use this exploit to get the other...

mailenable-imap-examine.py.txt

!/usr/bin/python Remote Mailenable Enterprise 1.1 EXAMINE buffer Overflow Discovered and exploited by [email protected] This vulnerability affects Mailenable Enterprise 1.1 without the ME-10009.EXE patch. Details: SEH gets overwritten at 965 968 in VMWare bytes in the EXAMINE command. Filteri...

MailEnable Enterprise Edition 1.1 - 'EXAMINE' Remote Buffer Overflow

!/usr/bin/python Remote Mailenable Enterprise 1.1 EXAMINE buffer Overflow Discovered and exploited by [email protected] This vulnerability affects Mailenable Enterprise 1.1 without the ME-10009.EXE patch. Details: SEH gets overwritten at 965 968 in VMWare bytes in the EXAMINE command. Filteri...

Mercury Mail Transport System 4.01b - PH SERVER Remote Overflow

mercurysexywarez Okayokay THiS iS 0DAY!!! Mercury Mail Transport System 4.01b REMOTE ROOT EXPLOIT PH SERVER since me and my folks didn't find enough wild targets, i release this pretty warez to the public :PP kcope kingcopeatgmx.net in 2005! JUUAREZ! Big thanx to...

Mercury Mail Transport System 4.01b Remote Exploit (PH SERVER)

No description provided by source. mercurysexywarez Okayokay THiS iS 0DAY!!! Mercury Mail Transport System 4.01b REMOTE ROOT EXPLOIT PH SERVER since me and my folks didn't find enough wild targets, i release this pretty warez to the public :PP kcope kingcopeatgmx.net in 2005! JUUAREZ! Big thanx t...

Checks for MS HOTFIX for snmp buffer overruns

There is an Unchecked Buffer in SNMP Service and this checks to see if the Microsoft Patch has been applied only checks NT/Win2k and XP Pro. SPDX-FileCopyrightText: 2002 Michael Scheidell Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

Veritas NetBackup <= 6.0 (bpjava-msvc) Remote Exploit (win32)

No description provided by source. !C:\Perl\bin\perl.exe -w Vertias Netbackup Win32 format string exploit Code By: johnhatdigitalmunitiondotcom & kfatdigitalmunitiondotcom For win2k/xp pre sp2 we overwrote PEBFastlock - rtlentercritical For win xp sp2 we overwrote SEH...

Microsoft Outlook Express - NNTP Buffer Overflow (MS05-030)

Microsoft Outlook Express - NNTP Buffer Overflow MS05-030 include include include include pragma commentlib,"ws232" / win32bind - EXITFUNC=process LPORT=4444 Size=344 Encoder=PexFnstenvSub http://metasploit.com / unsigned char scode =...

MS Outlook Express NNTP Buffer Overflow Exploit (MS05-030)

Exploit for unknown platform in category remote exploits ========================================================== MS Outlook Express NNTP Buffer Overflow Exploit MS05-030 ========================================================== include include include include pragma commentlib,"ws232" /...

Microsoft Windows - SMB Transaction Response Handling (MS05-011)

Microsoft Windows - SMB Transaction Response Handling MS05-011 / Windows SMB Client Transaction Response Handling MS05-011 CAN-2005-0045 This works against Win2k cybertronicatgmxdotnet http://www.livejournal.com/users/cybertronic/ usage: gcc -o mssmbpoc mssmbpoc.c ./mssmbpoc connect via \ip and...

e-Post SPA-PRO 4.01 (imap) Remote Buffer Overflow Exploit

No description provided by source. // // e-Post SPA-PRO Mail @Solomon SPA-IMAP4S 4.01 Service Buffer Overflow // Vulnerability // // Bind Shell POC Exploit for Japanese Win2K SP4 // 31 May 2005 // // This POC code binds shell on port 2001 of a vulnerable e-Post // SPA-PRO Mail @Solomon IMAP serve...

e-Post SPA-PRO 4.01 - imap Remote Buffer Overflow

e-Post SPA-PRO 4.01 - imap Remote Buffer Overflow // // e-Post SPA-PRO Mail @Solomon SPA-IMAP4S 4.01 Service Buffer Overflow // Vulnerability // // Bind Shell POC Exploit for Japanese Win2K SP4 // 31 May 2005 // // This POC code binds shell on port 2001 of a vulnerable e-Post // SPA-PRO Mail...

e-Post SPA-PRO 4.01 - 'imap' Remote Buffer Overflow

// // e-Post SPA-PRO Mail @Solomon SPA-IMAP4S 4.01 Service Buffer Overflow // Vulnerability // // Bind Shell POC Exploit for Japanese Win2K SP4 // 31 May 2005 // // This POC code binds shell on port 2001 of a vulnerable e-Post // SPA-PRO Mail @Solomon IMAP server. // // This POC assumes default...

MS Windows (WINS) Remote Buffer Overflow Exploit (v.3)

No description provided by source. / Windows Internet Name Service WINS Remote Heap Buffer Overflow ------------------------------------ ------------------------------------ Advisory credits: ---------------- Nicolas Waisman of Immunity Inc. www.immunitysec.com Advisory link: ----------------...

BakBone NetVault 6.x7.x - Local Stack Buffer Overflow

BakBone NetVault 6.x7.x - Local Stack Buffer Overflow / for more informations class101.org/netv-locsbof.pdf / include include ifdef WIN32 include "winsock2.h" pragma commentlib, "ws232" else include include include include include include include include include include endif char scode1= /add...

NotmuchG.pl.txt

A nice exploit : Hope you like it. !/usr/bin/perl LoWNOISE NotmuchG.pl v.1.5 ================================================ IPSWITCH WhatsUp Gold ver8.03 Remote Buffer Overflow Exploit ================================================ Exploit by ET LoWNOISE Colombia etatcyberspace.org Oct/2004...

eMule 0.42d - IRC Remote Buffer Overflow

!/usr/bin/perl eMule = 0.42d Remote Exploit by kcope exploits the DecodeBase16 buffer overflow tested on WinXP SP1 / Win2k SP4 bindport/connectback shellcode thanks Kostya Kortchinsky for his posting to bugtraq greetings to sander, blackzero, beginna, adize, A-cru and wY :p have fun! kcope,...