what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 2 of 2

Files from ChaoYi Huang

Syslog Server 1.2.3 Denial Of Service

Posted Jul 4, 2016

Authored by ChaoYi Huang

Syslog Server version 1.2.3 for windows suffers from a remote denial of service vulnerability.

tags | exploit, remote, denial of service

systems | windows

SHA-256 | eb46422ac777aa5dbb0a485572f6eef92724300a3e1e4ce51efb6b9d7f377572

Download | Favorite | View

ComSndFTP 1.3.7 Beta USER Format String (Write4)

Posted Jun 14, 2012

Authored by Rick, corelanc0d3r, mr_me, ChaoYi Huang | Site metasploit.com

This Metasploit module exploits the ComSndFTP FTP Server version 1.3.7 beta by sending a specially crafted format string specifier as a username. The crafted username is sent to to the server to overwrite the hardcoded function pointer from Ws2_32.dll!WSACleanup. Once this function pointer is triggered, the code bypasses dep and then repairs the pointer to execute arbitrary code. The SEH exit function is preferred so that the administrators are not left with an unhandled exception message. When using the meterpreter payload, the process will never die, allowing for continuous exploitation.

tags | exploit, arbitrary

SHA-256 | 8ca8af4598071a83d2552f14b027f3fdb8f361c95b01bacf03d39857c306caea

Download | Favorite | View