Microsoft Windows - LNK Shortcut File Code Execution Exploit

Exploit for windows platform in category local exploits !/usr/bin/python -- coding: utf-8 -- Title : CVE-2017-8464 | LNK Remote Code Execution Vulnerability CVE : 2017-8464 Authors : ykoster, nixawk Notice : Only for educational purposes. Support : python2 import struct def generateSHELLLINKHEADE...

Google Researcher Finds Link Between WannaCry Attacks and North Korea

So far, nobody had an idea that who was behind WannaCry ransomware attacks? But now there is a clue that lies in the code. Neel Mehta, a security researcher at Google, found evidence that suggests the WannaCry ransomware, that infected 300,000 machines in 150 countries over the weekend, is linked...

Use after free in ANGLE — Mozilla

A use-after-free can occur during Buffer11 API calls within the ANGLE graphics library, used for WebGL content. This can lead to a potentially exploitable crash. Note: This issue is in libGLES, which is only in use on Windows. Other operating systems are not affected...

PowerStager - A payload stager using PowerShell

This script creates an executable stager that downloads a selected powershell payload, loads it into memory and executes it using obfuscated EC methods. The script will also encrypt the stager for dynamic signatures and some additional obfuscation. This enables the actual payload to be executed...

APT29 Domain Fronting With TOR

Mandiant has observed Russian nation-state attackers APT29 employing domain fronting techniques for stealthy backdoor access to victim environments for at least two years. There has been considerable discussion about domain fronting following the release of a paper detailing these techniques...

APT29 Domain Fronting With TOR

Mandiant has observed Russian nation-state attackers APT29 employing domain fronting techniques for stealthy backdoor access to victim environments for at least two years. There has been considerable discussion about domain fronting following the release of a paper detailing these techniques...

Windows Exploit Suggester

Windows Exploit Suggester This tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on the target. It also notifies the user if there are public exploits and Metasploit modules available for the missing bulletins. Windows...

Windows-Exploit-Suggester - Tool To Compares A Targets Patch Levels Against The Microsoft Vulnerability Database

This tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on the target. It also notifies the user if there are public exploits and Metasploit modules available for the missing bulletins. It requires the 'systeminfo' comman...

Details Surface on Stuxnet Patch Bypass

It took 10 hours to find what had eluded others for close to five years. German computer science student Michael Heerklotz spent the Christmas holiday reading Countdown to Zero Day, a narrative on the discovery and impact of Stuxnet, the computer worm considered one of the first cyberweapons, and...

JAD java decompiler 1.5.8g (argument) Local Crash

No description provided by source. !/usr/bin/env python JAD java decompiler 1.5.8g argument Local Crash Tested on Windows Software Link: http://www.varaneckas.com/jad Author: l3D Site: http://xraysecurity.blogspot.com IRC: irc://irc.nix.co.il Email: [email protected] The software crashes when i...

Quicksilver Forums <= 1.4.2 RCE Exploit (windows only)

No description provided by source. Author: GiReX Homepage: girex.altervista.org Date: 24/11/2008 CMS: Quicksilver Forums = 1.4.2 Site: http://www.quicksilverforums.com/ Bug: Local File Inclusion Exploit: Remote Command Execution Note: Works with windows servers only Works regardless php.ini...

Easy File Sharing FTP Server 3.5 - Remote Stack Buffer Overflow

!/usr/bin/env python Exploit Title: Easy File Sharing FTP Server 3.5 stack buffer overflow Date: 27 May 2014 Exploit Author: superkojiman - http://www.techorganic.com Vulnerability discovered by: h07 CVE: CVE-2006-3952 OSVDB: 27646 Vendor Homepage: http://www.efssoft.com Software Link:...

XAMPP 3.2.1跨站脚本漏洞

No description provided by source. Title : XAMPP 3.2.1 Cross Site Scripting Author : DevilScreaM Date : 15 January 2014 Category : Web Applications Vendor : http://sourceforge.net/projects/xampp Version : 3.2.1 Type : PHP Greetz : 0day-id.com | newbie-security.or.id | Borneo Security | Indonesian...

Upgrade Attack

Added: 09/30/2013 Background The LLMNR Local Link Multicast Name Resolution protocol is used to answer wpad requests sent by Microsoft Windows. A rogue WPAD server delivers a wpad.dat file to poisoned hosts forcing them to proxy web requests through the SAINT server. In addition, HTTP requests ar...

.NET Runtime Optimization Service - Local Privilege Escalation

.NET Runtime Optimization Service - Local Privilege Escalation / Exploit Title: .NET Runtime Optimization Service Privilege Escalation Date: 03-07-2011 Author: XenoMuta Version: v2.0.50727 Tested on: Windows XP sp3, 2003 R2, 7 CVE : n/a | |/ / / |/ / / / | / / / / /|/ / / / / / / / / / / / / //...

New Remote Flaw in Apple QuickTime Bypasses ASLR and DEP

A Spanish security researcher has discovered a new vulnerability in Apple’s QuickTime software that can be used to bypass both ASLR and DEP on current versions of Windows and give an attacker control of a remote PC. The flaw apparently results from a parameter from an older version of QuickTime...

Immunity Canvas: MS_NTVDM

Name| msntvdm ---|--- CVE| CVE-2010-0232 Exploit Pack| CANVAS Description| NtVdmControl-KiTrap0d local Notes| CVE Name: CVE-2010-0232 VENDOR: Microsoft Notes: This exploit gets you LOCAL/SYSTEM on vulnerable versions of Windows which is essentially all of them. It needs a writable directory to...

PHPhotoalbum 0.5 - SQL Injection

PHPhotoalbum 0.5 - SQL Injection Title: PHPhotoalbum Remote sql injection Vulnerability Tested on: windows http://server/PHPhotoalbum/thumbnails.php?album=-1+union+select+user+from+mysql.user-- http://server/PHPhotoalbum/thumbnails.php?album=-1+union+select+loadfile/directory...

gAlan - .galan Universal Buffer Overflow

gAlan - .galan Universal Buffer Overflow !/usr/bin/python gAlan .galan file Universal Buffer Overflow Exploit Author : DzAttacker Mail : [email protected] Original : http://www.exploit-db.com/exploits/10339 win32exec - EXITFUNC=process CMD=calc Size=343 Encoder=PexAlphaNum http://metasploit.c...

win32/xp sp2 Shellcode cmd.exe 57 bytes

No description provided by source. / win32/xp sp2 cmd.exe 57 bytes Author : Mountassif Moad Big Thnx : Houssamix :d Assembly Code : Secret Changed by : Stack Description : It is 57 Byte Shellcode which Execute Cmd.exe Tested Under Windows Xp SP2 / include stdlib.h include string.h unsigned char...