# IIS 5.0 FTPd / Remote r00t exploit
# Win2k SP4 targets
# bug found & exploited by Kingcope, kcope2<at>googlemail.com
# Affects IIS6 with stack cookie protection
# August 2009 - KEEP THIS 0DAY PRIV8
fly_flash — Jump/XSS/CSRF in Flash
Author: lake2@80sec.com
Site: http://www.80sec.com
Date: 2009-8-26
From: http://www.80sec.com/release/fly_flash.txt
80SEC — know it then hack it !
> Linux NULL pointer dereference due to incorrect proto_ops initializations
> > -------------------------------------------------------------------------
Quick and dirty exploit for this one:
http://www.frasunek.com/proto_ops.tgz
back: http://milw0rm.com/sploits/2009-proto_ops.tgz
# milw0rm.com [2009-08-14]
/* dedicated to my best friend in the whole world, Robin Price
the joke is in your hands
just too easy -- some nice library functions for reuse here though
credits to julien tinnes/tavis ormandy for the bug
may want to remove the __attribute__((regparm(3))) for 2.4 kernels, I have no time to test