b33f_exploits

Exploits created based on FuzzySecurity's Windows Exploit Development tutorials.

Part 2 - Saved Return Pointer Overflows

• Exploit: FreeFloat FTP 1.0 MKD BOF
• OS: Windows XP Professional SP3 Build 2600
• Architecture: x86

Part 3 - Structured Exception Handler (SEH)

• Exploit: SoriTong MP3 Player 1.0 UI.txt BOF (SEH)
• OS: Windows XP Professional SP3 Build 2600
• Architecture: x86

Part 4 - Egg Hunters

• Exploit: Kolibri v2.0 HTTP Server Head (Egg Hunter)
• OS: Windows XP Professional SP3 Build 2600
• Architecture: x86

Part 5 - Unicode 0x00410041

• Exploit: Triologic Media Player 8 (Unicode SEH)
• OS: Windows XP Professional SP3 Build 2600
• Architecture: x86

Part 6 - Writing W32 Shellcode

• Exploit: FreeFloat FTP 1.0 MKD BOF
• OS: Windows XP Professional SP3 Build 2600
• Architecture: x86

Part 7 - Return-Oriented Programming (ROP)

• Exploit: Mini-stream RM-MP3 Converter 3.1.2.1 ROP (*.m3u)
• OS: Windows 7 Enterprise SP1 Build 7601
• Architecture: x86

Part 8 - Spraying the Heap

• Exploit: RSP MP3 Player OCX ActiveX Heap Spray
• OS: Windows XP Professional SP3 Build 2600
• Architecture: x86
• Browser: Internet Explorer (IE) <= 7.00