Broadcom Wi-Fi device KR00K information disclosure proof of concept exploit. It works on WPA2 AES CCMP with Frequency 2.4GHz WLANs.
98b594cbe4b6ceea6d1932367e850f97Proof of concept exploit for a Microsoft VSCode python extension code execution vulnerability.
24626a525ed32f6f124ca3a15f0bb0a7Microtik SSH Daemon version 6.44.3 denial of service proof of concept exploit.
99df04febb71231588ca4e6c22252925CoronaBlue aka SMBGhost proof of concept exploit for Microsoft Windows 10 (1903/1909) SMB version 3.1.1. This script connects to the target host, and compresses the authentication request with a bad offset field set in the transformation header, causing the decompresser to buffer overflow and crash the target.
1985601c3425137b5192e7a3b81a3253Counter Strike: GO .bsp memory control proof of concept exploit.
5547c4c340e256937565d6a91fa070acProof of concept crash exploit for pppd versions 2.4.2 through 2.4.8. It leverages a rhostname buffer overflow in the eap_request and eap_response functions in eap.c.
694ecff0fb2c7aa589655a4edc33f057Qualys discovered a minor vulnerability in OpenSMTPD, OpenBSD's mail server. An unprivileged local attacker can read the first line of an arbitrary file (for example, root's password hash in /etc/master.passwd) or the entire contents of another user's file (if this file and /var/spool/smtpd/ are on the same filesystem). A proof of concept exploit is included in this archive.
56573da09e74bf6cccffa5506e80c6d3Whitepaper called The Shellshock Attack. It covers all of the required topics for understanding the Shellshock vulnerability. The proof of concept will help visualize and perform the attack in a virtual scenario to understand the attack vector and the process of exploitation.
4600ed628f8ef50e450bf87a055b884eSWAPGS attack proof of concept exploit that demonstrates an information disclosure in the windows kernel.
bc36cf27bccf91e98ad52d648c1882e1DVD Photo Slideshow Professional version 8.07 Name and Key buffer overflow proof of concept exploits.
9cf04c9595c85915c72fc26abdb57453Socat version 1.7.3.4 heap-based overflow proof of concept exploit.
62c72cfd95355e04f3ccb057807bcdabVerodin Director Web Console version 3.5.4.0 remote authenticated password disclosure proof of concept exploit.
b80441f581b37ec759191c45b35f987aF-Secure Internet Gatekeeper version 5.40 heap overflow proof of concept exploit.
b0cd17f1336dc6d8241a723f6857e010BOOTP Turbo version 2.0 SEH denial of service proof of concept exploit.
18bc50dca3e649d4b9eb74b35ddb2a9aThis is a proof of concept for CVE-2018-8413 where the Microsoft Windows Theme API had a file parsing vulnerability.
4660771539305d0ceceb493e5e089a53Proof of concept exploit for the Microsoft Windows CurveBall vulnerability where the signature of certificates using elliptic curve cryptography (ECC) is not correctly verified. ECC relies on different parameters. These parameters are standardized for many curves. However, Microsoft did not check all these parameters. The parameter G (the generator) was not checked, and the attacker can therefore supply his own generator, such that when Microsoft tries to validate the certificate against a trusted CA, it will only look for matching public keys, and then use then use the generator of the certificate.
e2fb60e1e15f840f86c3c095bba4a104This is a proof of concept exploit that demonstrates the Microsoft Windows CryptoAPI spoofing vulnerability as described in CVE-2020-0601 and disclosed by the NSA.
d2c133f541a9d87a0a3240f578df147dAllok Video Converter version 4.6.1217 SEH stack overflow proof of concept exploit.
42c4417774f7c851b0cfe5980482b96cCitrix Application Delivery Controller and Citrix Gateway remote code execution proof of concept exploit.
d66a21078f9eb16928f3695e481e9298Tomcat version 9.0.0.M1 proprietaryEvaluate sandbox escape proof of concept.
d33e30810a886a7412766894d0f80db3Django versions prior to 3.0, 2.2, and 1.11 account hijack proof of concept exploit.
2a8eda1ae3f5319be7fbeb030e9bbf52Sony Playstation 4 (PS4) versions prior to 6.72 webkit code execution proof of concept exploit.
d95daaeee630a6ac3ddc9516ea9e0aabDuplicate Cleaner Pro 4 denial of service proof of concept exploit.
92a91b60ba6ba38581539d7fbe7dc61dFTPGetter Professional version 5.97.0.223 null pointer dereference denial of service proof of concept exploit.
7075de9a8e1c61f20efa618be87432d8FTP Navigator version 8.03 stack overflow SEH proof of concept exploit.
78426da5d3b6949020b7975d56c68d3f
© 2020 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed