eIQnetworks License Manager - Remote Buffer Overflow (Metasploit) (3)

!/usr/bin/perl -w package Msf::Exploit::EiQLicense; use base "Msf::Exploit"; use strict; use Pex::Text; my $advanced = ; my $info = 'Name' = 'EIQ License Manager Overflow', 'Authors' = 'ri0t [email protected] KF [email protected]' , 'Arch' = 'x86' , 'OS' = 'win32', 'win2000', 'winxp' ,...

gdiplus.pl.txt

!/bin/perl 0-day crash poc gdiplus.dll by Mr.Niega Check out hex offset 2e play with the 2byte's, set it to 20 if you want a non crashing ico file Division by zero this POC tested with: win XP ENG sp2 And for SYS 49152 im that 0daysec guy ; Rename Poc.ico to Poc.png and have it as display picture...

Gdiplus.dll division by 0

!/bin/perl 0-day crash poc gdiplus.dll by Mr.Niega Check out hex offset 2e play with the 2byte's, set it to 20 if you want a non crashing ico file Division by zero this POC tested with: win XP ENG sp2 And for SYS 49152 im that 0daysec guy ; Rename Poc.ico to Poc.png and have it as display picture...

eIQnetworks License Manager Remote Buffer Overflow Exploit (1262)

Exploit for unknown platform in category remote exploits ================================================================= eIQnetworks License Manager Remote Buffer Overflow Exploit 1262 ================================================================= !/usr/bin/perl -w metasploit module for EIQ...

Microsoft Word 20002003 - Hlink Local Buffer Overflow

Microsoft Word 20002003 - Hlink Local Buffer Overflow !/bin/perl Microsoft Word hlink 0-day by SYS 49152 this POC works only with: win 2ksp4 ENG + word 2000/XP all versions. win XP ENG sp1/sp2 + word XP 2002 SP3. Word 2003 is not vulnerable. bindshell on port 49152 hey kids.. I hope you know how ...

flockd0s.txt

Credit's to n00b..Round 2 of the marquee tag's bug... ive found a dos in flock web browser and crash's the browser ive provided a proof of concept :P... thnx tested on win xp pro service pack 1.. http://www.flock.com/ flox web browser remote dos exploit by n00b :: http://www.flock.com/ ::...

excelExploit.txt

/--------------------------------------------------------------------- Microsoft Excel Remote Code Execution Proof Of Concept. Tested against : Excel 2000 on Win XP SP1 , and Win2000 SP4 Description: Microsoft Excel is prone to a remote code execution issue which may be triggered when a malformed...

Microsoft Excel - Code Execution

Microsoft Excel - Code Execution // This is an easy compilation version by phar include include /--------------------------------------------------------------------- Microsoft Excel Remote Code Execution Proof Of Concept. Tested against : Excel 2000 on Win XP SP1 , and Win2000 SP4 Description:...

Microsoft Excel Unspecified Remote Code Execution Exploit

Exploit for unknown platform in category local exploits ========================================================= Microsoft Excel Unspecified Remote Code Execution Exploit ========================================================= // This is an easy compilation version by phar include include...

[BuHa-Security] DoS Vulnerability in MS IE 6 SP2

-----BEGIN PGP SIGNED MESSAGE----- Hash: RIPEMD160 --------------------------------------------------- | BuHa Security-Advisory 12 | May 25th, 2006 | --------------------------------------------------- | Vendor | MS Internet Explorer 6.0 | | URL | http://www.microsoft.com/windows/ie/ | | Version ...

[Full-disclosure] Privilege Scalation for Windows Networks using weak Service restrictions v2.0 exploit

Proof of concept of Sudhakar Govindavajhala and Andrew Appel paper http://www.cs.princeton.edu/sudhakar/papers/winval.pdf Running as an unprivileged user you can test if your services are vulnerable and can be used to install a backdoor. Both source code and binary included Microsoft advisory:...

Microsoft HTML Help Workshop (.hhp file) Buffer Overflow Exploit (new)

No description provided by source. / Microsoft HTML Help Workshop .hhp file Compiled File Header Buffer Overflow Exploit The Buffer Overlfow in Compiled File in Options in a HHP file. Bug found by:darkeagle Exploit coded by:k3xji Mail:[email protected] Web: www.guvenliklab.com Tested:Win XP SP2 /...

Microsoft HTML Help Workshop - .hhp Local Buffer Overflow (2)

Microsoft HTML Help Workshop - .hhp Local Buffer Overflow 2 / Microsoft HTML Help Workshop .hhp file Compiled File Header Buffer Overflow Exploit The Buffer Overlfow in Compiled File in Options in a HHP file. Bug found by:darkeagle Exploit coded by:k3xji Mail:[email protected] Web:...

Microsoft HTML Help Workshop - '.hhp' Local Buffer Overflow (2)

/ Microsoft HTML Help Workshop .hhp file Compiled File Header Buffer Overflow Exploit The Buffer Overlfow in Compiled File in Options in a HHP file. Bug found by:darkeagle Exploit coded by:k3xji Mail:[email protected] Web: www.guvenliklab.com Tested:Win XP SP2 / include include include define BUFL...

Winamp 5.12 - .pls Remote Buffer Overflow (1)

Winamp 5.12 - .pls Remote Buffer Overflow 1 / Winamp 5.12 Remote Buffer Overflow Universal Exploit Zero-Day Bug discovered & exploit coded by ATmaCA Web: http://www.spyinstructors.com && http://www.atmacasoft.com E-Mail: [email protected] Credit to Kozan / / Tested with : Winamp 5.12 on Win XP P...

Windows mem leakage

Desc : Windows Dos emulation allows dumping of first 1 Mo of RAM with no particular privilege. Tested under : Win 2000, XP SP2, 2003 Code : ;---------------- dumper.asm ----------------------------------------- ; Dump first 1 Mo of memory under any MS product ; 1 Mo is the maximum quantity of...

MS02-039 Microsoft SQL Server Resolution Overflow

This is an exploit for the SQL Server 2000 resolution service buffer overflow. This overflow is triggered by sending a udp packet to port 1434 which starts with 0x04 and is followed by long string terminating with a colon and a number. This module should work against any vulnerable SQL Server 200...

freeFTPd 1.0.10 (Dos,Exploit)

Author: Stefan Lochbihler Date: 24. November 2005 Software: freeFTPd Version: 1.0.10 URL: http://freeftpd.com/ Attack: Denial of service about: freeFTPd is a FTP/FTPS/SFTP server that enables user to access remote files over TCP/IP network such as Internet. Unlike FTP, FTPS and SFTP protocols...

freeFTPd 1.0.10 - 'PORT' Denial of Service

// freeFTPd Denial of Service Attack // Tested on a Win XP Sp1 Box include "stdio.h" include "winsock2.h" pragma comment lib,"ws232" define PORT 21 define USER "root" define PASS "root" define L "--------------------------------------------------" define HL "freeFTPd 1.0.10 DoS Exploit by...

Mirabilis ICQ 2003a - Remote Buffer Overflow Download Shellcode

Mirabilis ICQ 2003a - Remote Buffer Overflow Download Shellcode / Mirabilis ICQ 2003a Buffer Overflow Download Shellcoded Exploit Bug discovered & exploit coded by ATmaCA Web: http://www.spyinstructors.com && http://www.atmacasoft.com E-Mail: [email protected] Credit to Kozan and delicon / /...