[Full-disclosure] Persits Software XUpload Control AddFolder() Buffer Overflow Exploit

I took a shot at writing an exploit for this, so here goes. Choice of WinExecthe calculator, what else? or a bindshell. ------------------------------- !-- written by e.b. Persits Software XUpload Control AddFolder Buffer Overflow Exploit Exploit Tested on Windows XP SP2fully patched English, IE6...

Persits Software XUpload Control AddFolder() Buffer Overflow Exploit

No description provided by source. !-- written by e.b. Persits Software XUpload Control AddFolder Buffer Overflow Exploit Tested on Windows XP SP2fully patched English, IE6 and IE7 Thanks to h.d.m. and the Metasploit crew -- html head titlePersits Software XUpload Control AddFolder BoF...

[Full-disclosure] Persits Software XUpload Control Buffer Overflow Exploit

I tried posting this yesterday, don't know what happened, anyhow, my advance apologies for any double posts. I took a shot at writing an exploit for this, so here goes. Code is inline and attached. ------------------------- !-- written by e.b. Persits Software XUpload Control AddFolder Buffer...

persists-addfolder.txt

I took a shot at writing an exploit for this, so here goes. Choice of WinExecthe calculator, what else? or a bindshell. ------------------------------- Persits Software XUpload Control AddFolder BoF Exploit function Check var buf = 'A'; while buf.length = 1387 buf = buf + 'A'; // win32exec -...

Persits Software XUpload Control - AddFolder() Remote Buffer Overflow

Persits Software XUpload Control - AddFolder Remote Buffer Overflow Persits Software XUpload Control AddFolder BoF Exploit function Check var buf = 'A'; while buf.length = 1387 buf = buf + 'A'; // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2...

persists-overflow.txt

There is a buffer overflow in the AddFolder method of the Persists Software XUpload control, version 2.1.0.1. This object is marked safe for scripting. Version 3.0latest is not vulnerablethrows an error if the parameter is more than 256 characters, I have not tested any other versions. A quick...

Persits Software XUpload Control - 'AddFolder()' Remote Buffer Overflow

Persits Software XUpload Control AddFolder BoF Exploit function Check var buf = 'A'; while buf.length = 1387 buf = buf + 'A'; // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 =...