鬼仔's Blog

来源：gyzy's Blog

Microsoft Office Word 0day Poc

在打齐补丁的Word2003上可以导致Dos

出错的代码是 mov eax,[ecx]，假如ecx可控的话改写四字节获得控制权并非没有可能

下载地址：270184437-word-poc.rar

来源：milw0rm

MSN messenger 7.x (8.0?) VIDEO Remote Heap Overflow Exploit

thanks ole andre again, His ospy is perfect.

1.compile the dll.
2.inject the dll to msn messenger 7.0.777.0 's process.
3. choose "send my webcam" to a contact id who is online using 7.x (8.0?).
4.when the otherside accept the invatation , the otherside's msn will be 阅读全文 »

来源:7jdg's blog

已经测试成功,不卡,就是关IE

阅读全文 »

来源：milw0rm

阅读全文 »