Skip to content

Instantly share code, notes, and snippets.

View synap5e's full-sized avatar

Simon Pinfold synap5e

View GitHub Profile
@synap5e
synap5e / eureka_email_2_2q_err_exploit.py
Created November 10, 2012 21:28
Eureka Email 2.2q - "-ERR" Exploit
import sys, socket, struct
# Eureka Email 2.2q - Exploit (non egghunter)
# Version 2.2q - DEP + ASLR disabled
# Tested: Windows XP SP3 - English
# Author: Simon Pinfold
#
# windows/messagebox - 287 bytes
# http://www.metasploit.com
@synap5e
synap5e / eureka_email_2_2q_egghunter_err_egghunter_exploit.py
Created November 10, 2012 21:27
Eureka Email 2.2q - "-ERR" Egghunter Exploit
import sys, socket, struct
# Eureka Email 2.2q - "-ERR" Egghunter Exploit
# Version 2.2q - DEP + ASLR disabled
# Tested: Windows XP SP3 - English
# Author: Simon Pinfold
#
# windows/messagebox - 287 bytes
# http://www.metasploit.com
@synap5e
synap5e / millennium_mp3_studio_2_mpf_exploit.py
Created November 10, 2012 21:25
Millennium mp3 studio 2 SEH
#!/usr/bin/python
import os
# Millennium mp3 studio 2 SEH ".mpf" client side exploit
# Version 2.0 - DEP + ASLR disabled
# Tested: Windows XP SP3 - English
# Author: Simon Pinfold
#badchars 00,1a,0d,0e,0f
space = 1280
@synap5e
synap5e / soritong_1_m3u_exploit.py
Created November 10, 2012 21:23
Soritong 1.0 Client side exploit (SEH)
#!/usr/bin/python
import os
# Soritong 1.0 Client side exploit (SEH)
# Author: Simon Pinfold
#
# windows/messagebox - 287 bytes
# http://www.metasploit.com
# Encoder: x86/shikata_ga_nai
@synap5e
synap5e / freefloat_ftp_1_lcd_exploit.py
Created November 9, 2012 23:52
Freefloat FTP Server - "lcd" command stack overflow
import sys, socket, struct
# Freefloat FTP Server - "lcd" command stack overflow
# Version 1.0 - DEP + ASLR disabled
# Tested: Windows XP SP3 - English
# Author: Simon Pinfold
#
# windows/messagebox - 287 bytes