198 matches found
win32 telnetbind by winexec 111 bytes
Exploit for win32 platform in category shellcode ===================================== win32 telnetbind by winexec 111 bytes ===================================== ; payload:add admin acount & Telnet Listening ; Author: DATASNIPER ; size:111 bytes ; platform:WIN32/XP SP2 FR ; thanks:Arab4services...
Windows/x86 (XP Professional SP2) (English) - Wordpad.exe Shellcode (15 bytes)
Windows/x86 XP Professional SP2 English - Wordpad.exe Shellcode 15 bytes. Shellcode exploit for Windowsx86 platform. Tags: Metasploit Framework MSF +-------------------------------------------------+ | Windows XP Pro Sp2 English "Wordpad" Shellcode. |...
Opera 9.62 file:// Local Heap Overflow Exploit
No description provided by source. html headtitleuh?/title/head body script // ksOSe 11/15/2008 // tested on Windows XP SP3, opera 9.62 international version // vulnerability found by send9 // there are many ways to achieve code execution, tons of function pointers to overwrite. // maybe there's...
Bea Weblogic Apache Connector Code Exec / Denial of Service Exploit
No description provided by source. // Bea Weblogic -- Apache Connector Remote Exploit +-1day // Should stack break latest Windows Server 2003 address space randomization // BIG THANKS TO // "dong-hun you"Xpl017Elz in INetCop - for his paper // "Title: Advanced exploitation in exec-shield Fedora...
Bea Weblogic Apache Connector Code Exec / Denial of Service Exploit
Exploit for unknown platform in category remote exploits =================================================================== Bea Weblogic Apache Connector Code Exec / Denial of Service Exploit =================================================================== // Bea Weblogic -- Apache Connector...
Foxmail 5.0 PunyLib.dll Remote Stack Overflow Exploit
No description provided by source. / fmx.c - x86/win32 Foxmail 5.0 PunyLib.dll remote stack buffer overflow exploit C COPYRIGHT XFOCUS Security Team, 2004 All Rights Reserved ----------------------------------------------------------------------- Author : xfocus [email protected]...
persists-addfolder.txt
I took a shot at writing an exploit for this, so here goes. Choice of WinExecthe calculator, what else? or a bindshell. ------------------------------- Persits Software XUpload Control AddFolder BoF Exploit function Check var buf = 'A'; while buf.length = 1387 buf = buf + 'A'; // win32exec -...
win32 WinExec() Command Parameter 104+ bytes
No description provided by source. ; ; relocateable dynamic runtime assembly code example using hash lookup ; ; WinExec with ExitThread ; 104 bytes ; ; for testing: ; ; ml /c /coff /Cp wexec2.asm ; link /subsystem:windows /section:.text,w wexec2.obj ; ; wyse101 at gmail.com ; ; October 2006 ; .38...
PHP FFI Extension 5.0.5 Local Safe_mode Bypass Exploit
No description provided by source. ?php ---------------------------------------------------- -----PHP FFI Extension Safemode Bypass Exploit----- ---------------------------------------------------- -Tested on 5.0.5------------------------------------...
Cross site scripting
The Foreign Function Interface ffi extension in PHP 5.0.5 does not follow safemode restrictions, which allows context-dependent attackers to execute arbitrary code by loading an arbitrary DLL and calling a function, as demonstrated by kernel32.dll and the WinExec function. NOTE: this issue does n...
CVE-2007-4528
The Foreign Function Interface ffi extension in PHP 5.0.5 does not follow safemode restrictions, which allows context-dependent attackers to execute arbitrary code by loading an arbitrary DLL and calling a function, as demonstrated by kernel32.dll and the WinExec function. NOTE: this issue does n...
CVE-2007-4528
CVE-2007-4528 concerns PHP’s Foreign Function Interface (ffi) extension in PHP 5.0.5, which does not enforce safe_mode restrictions. This can let context-dependent attackers load an arbitrary DLL and call a function (e.g., kernel32.dll and WinExec), yielding arbitrary code execution in affected c...
CVE-2007-4528
The Foreign Function Interface ffi extension in PHP 5.0.5 does not follow safemode restrictions, which allows context-dependent attackers to execute arbitrary code by loading an arbitrary DLL and calling a function, as demonstrated by kernel32.dll and the WinExec function. NOTE: this issue does n...
phpffi-bypass.txt
?php ---------------------------------------------------- -----PHP FFI Extension Safemode Bypass Exploit----- ---------------------------------------------------- -Tested on 5.0.5------------------------------------ ----------------------------------------------------...
PHP 'FFI' Extension 5.0.5 - 'Safe_mode' Local Bypass
WinExec"cmd.exe /c $command "$...
PHP FFI Extension 5.0.5 - Safe_mode Local Bypass
PHP FFI Extension 5.0.5 - Safemode Local Bypass ?php ---------------------------------------------------- -----PHP FFI Extension Safemode Bypass Exploit----- ---------------------------------------------------- -Tested on 5.0.5------------------------------------...
Not dead shellcode-exploit warning-the black bar safety net
HEE HEE,today the computer some of the things transferred to the mobile hard disk,find yourself previously voted over the few manuscript,crude see an article but there are a few articles or a little heat,simply submit to the evil eight,hope can be a friend in need some help...rookie write the dis...
win32 Tiny Download and Exec Shellcode 192 bytes
Exploit for win32 platform in category shellcode ================================================ win32 Tiny Download and Exec Shellcode 192 bytes ================================================ ;Tiny Download&&Exec ShellCode codz czy 2007.6.1 ;header 163=6116+8+9+28+9568+27+17 ;163+19=192 comme...
win32 download and execute 124 bytes
Exploit for win32 platform in category shellcode ==================================== win32 download and execute 124 bytes ==================================== ; ; relocateable dynamic runtime assembly code example using hash lookup for IE exploits only ; the URLMON.DLL must already be loaded int...
win32 download and execute 124 bytes
No description provided by source. ; ; relocateable dynamic runtime assembly code example using hash lookup for IE exploits only ; the URLMON.DLL must already be loaded into the process space for this to work, so do not run on its own!! ; ; to test use /DTESTCODE in ml command line ; ;...