| File
Name |
Description |
| rpc_wks_bo.c |
->
2003-12-10 rpc_wks_bo.c exploits/remote/rpc_wks_bo.c Remote exploit for the Microsoft Windows WKS vulnerability that allows a specially crafted network message the ability to trigger a buffer overflow. |
| m00-apache-w00t.c |
->
2003-12-8 m00-apache-w00t.c exploits/remote/m00-apache-w00t.c Apache 1.3.*-2.0.48 mod_userdir remote users disclosure Exploit |
| f.c |
->
2003-12-3 f.c exploits/local/f.c F.c is a local root exploit for the the SuSEconfig.vmware symbolic link vulnerability. Tested on SuSE 8.2. |
| brk_poc.asm |
->
.... brk_poc.asm exploits/brk_poc.asm Linux Kernel 2.4.22 "do_brk()" local Root Exploit (PoC) |
| appliedsnatch.c |
->
2003-11-30 appliedsnatch.c exploits/appliedsnatch.c Applied Watch adding new User or Rule Exploit |
| epic4-exp.c |
->
.... epic4-exp.c exploits/remote/epic4-exp.c EPIC4 remote exploit that acts as an IRC server and makes use of a stack-based overflow in EPIC4 versions later than pre2.003. Upon success, this exploit yields a shell with the privileges of the user id connecting into the server. |
| Operace.c |
->
2003-11-26 Operace.c exploits/remote/Operace.c Opera 7.22 File Creation and Execution Exploit (Malicious Webserver) |
| kill-Taidu.c |
->
.... kill-Taidu.c exploits/remote/kill-Taidu.c webfs 1.7.x remote root exploit that binds a shell to port 26112 and makes use of a User-Agent buffer overflow. |
| 85mod_gzip.c |
->
.... 85mod_gzip.c exploits/remote/85mod_gzip.c Remote exploit for mod_gzip when in debug mode for versions 1.2.26.1a and below. Yields user id of the webserver. Tested against RedHat 8.0 and FreeBSD 4.7. Related advisory |
| BSDeicpz.c |
->
2003-11-20 BSDeicpz.c exploits/BSDeicpz.c OpenBSD 2.x - 3.3 exec_ibcs2_coff_prep_zmagic() kernel Exploit |
| msuxobsd2.c |
->
.... msuxobsd2.c exploits/local/msuxobsd2.c OpenBSD 3.3 local root and v3.4 local denial of service exploit which uses a kernel based stack overflow vulnerability in ICBS. Patch available for v3.3 here and v3.4 here. |
| iawebmail.pl |
->
.... iawebmail.pl exploits/remote/iawebmail.pl IA WebMail Server v3.1 and below (iaregdll.dll version 1.0.0.5) remote exploit in perl. Tested against Windows XP Home SP1 and Windows 2000 Pro SP4. Included shellcode downloads netcat and spawns a shell |
| WKSSVC.c |
->
2003-11-19 WKSSVC.c exploits/remote/WKSSVC.c Microsoft Workstation Service WKSSVC Remote Exploit (MS03-049) |
| MS03-045.c |
->
.... MS03-045.c exploits/local/MS03-045.C Windows ListBox/ComboBox Control Local Exploit (MS03-045) |
| fp30reg.c |
->
.... fp30reg.c exploits/remote/fp30reg.c Frontpage Server Extensions remote exploit which creates a shell on tcp port 9999 and uses the bug described in ms03-051. Tested on Windows 2000 Professional SP3 English version, fp30reg.dll ver 4.0.2.5526. Bug discovered by Brett Moore. |
| FBHterminator.c |
->
2003-11-16 FBHterminator.c exploits/local/FBHterminator.c Local root exploit for terminatorX version 3.81 and below that makes use of LADSPA_PATH environment variable vulnerability. Related advisory |
| gEEk-0verkill.c |
->
.... gEEk-0verkill.c exploits/local/gEEk-0verkill.c 0verkill version 0.16 local proof of concept exploit that makes use of a stack overflow when reading in the HOME environment variable |
| gEEk-unace.c |
->
.... gEEk-unace.c exploits/local/gEEk-unace.c UnAce version 2.20 local proof of concept exploit. Original vulnerability discovery made by Andreas Constantinides. Tested on Debian 3.0. |
| unace-exp.c |
->
.... unace-exp.c exploits/local/unace-exp.c UnAce version 2.20 local proof of concept exploit. Original vulnerability discovery made by Andreas Constantinides. Bruteforcing option included. |
| execdror5-Demo.zip |
->
.... execdror5-Demo.zip exploits/execdror5-Demo.zip Six step cache attach for Internet Explorer v6sp1 (up to date on 10/30/2003) which combines several older unpatched and recently discovered vulnerabilities to execute code remotely by viewing a web page or HTML email. More information available |
| sp-myserver0.5-dos.c |
->
.... sp-myserver0.5-dos.c exploits/remote/sp-myserver.c Remote denial of service exploit for MyServer 0.5. Malicious payload crashes the server giving a runtime error. Tested on Windows XP Pro SP1 and Windows 2000 SP3 |
| boomerang.tgz |
->
.... boomerang.tgz exploits/local/boomerang.tgz Local exploit for the ListBox/ComboBox vulnerabilities in Win32 platforms. Included is an example of a vulnerable program. Related advisory is available |
| o_wks.c |
->
.... o_wks.c exploits/remote/o_wks.c Remote exploit for the Microsoft Windows Workstation server (WKSSVC) buffer overflow. Related advisory available |
| chemtrailX.c |
->
.... chemtrailX.c exploits/local/chemtrailX.c |
| iw-config.c |
->
.... iw-config.c exploits/local/iw-config.c Proof of concept local root exploit for iwconfig, which is not setuid by default. |
| |
|<
<<
202
203
204
205
206
>>
>|
-- total:212
|
| | | |
