Tuesday, December 9, 2014

BulletProof FTP Client 2010 - Buffer Overflow (SEH) Exploit

Local exploit for BulletProof FTP Client 2010 - Buffer Overflow (SEH) Exploit, this exploit store 2nd shellcode on heap and use egghunter to locate and copy 2nd shellcode back to stack before executing the shellcode.

https://gist.github.com/mfadzilr/c8980087db10c47bdfb6

Advantech AdamView (.gni) SEH Buffer Overflow

Local exploit for Advantech AdamView (.gni) SEH Buffer Overflow, the vulnerability does not allow lower alpha character (a to z) so i encode the shellcode with custom encoder.

https://gist.github.com/mfadzilr/7a45a7c6900ef0e86bc3