Tout cela ne vaut pas le terrible prodige de ta salive qui mord, qui plonge dans l'oubli mon âme sans remords, et charriant le vertige, la roule défaillante aux rives de la mort! - Charles Baudelaire

## Exploits

I’m a young enthusiastic exploit developer, I don’t know everything but I know a thing or two. Overflows are a common occurrence in software developed by both large and small companies. In my opinion there are a couple of simple reasons for these overflows: (1) Software Developers are geared towards functionality and rapid development or (2) the bugs are so complex they are overlooked during the testing phase. These overflows, in general, can lead to ”Code Execution” or ”Denial Of Service” conditions. I will publish the exploits I develop here as I make them. These are for educational purposes and admittedly for my own enjoyment. Time to make these programs phone home!!

## Personal Conquests

Date
20/11/2014
27/10/2012
03/10/2012
19/08/2012
12/07/2012
07/06/2012
02/04/2012
20/02/2012
29/01/2012
10/01/2012
08/01/2012
08/06/2011
01/06/2011

Description
MS14-064 OLE Automation Array Remote Code Execution
Aladdin Knowledge System Ltd - PrivAgent.ocx (Heap Spray)
NCMedia Sound Editor Pro v7.5.1 SEH&DEP&ASLR
ALLMediaServer 0.8 SEH&DEP&ASLR
ZipItFast PRO v3.0 Heap-Overflow
Lattice Semiconductor PAC-Designer 6.21 (*.PAC)
BlazeVideo HDTV Player 6.6 Professional SEH&DEP&ASLR
Blade API Monitor Unicode Bypass (Serial Number BOF)
WMA MP3 Converter v1.5 (.wav) Local BOF
TFTP Server 1.4 ST (RRQ) Buffer Overflow Exploit
Microsoft Office 2003 Home/Pro 0day
ActFax Server FTP Remote BOF (post auth)
Easy Ftp Server v1.7.0.2 Post-Authentication BoF

## Universal ROP-Chains / Shellcode

Date
01/11/2012
03/10/2012

Description
Windows XP PRO SP3 - Full ROP calc shellcode
Universal ROP-Chain: MSVCR70.dll (v7.00.9466.0)

## Exploit Development Tutorials

Date
10/02/2012
15/02/2012
29/02/2012
15/03/2012
26/04/2012
21/10/2012
05/01/2013
27/05/2013

Description
Saved Return Pointer Overflows: FreeFloat FTP (MKD BOF)
Structured Exception Handler: DVD X Player 5.5 Pro (*.plf BOF)
Egg Hunters: Kolibri v2.0 HTTP Server HEAD (egghunter)
Unicode: Triologic Media Player 8 (.m3u) SEH Unicode
Writing W32 shellcode: FreeFloat FTP (custom shellcode)
Return Oriented Programming: Mini-stream RM-MP3 Converter (*.m3u)
Heap Spraying [Part 1]: RSP MP3 Player OCX (Heap Spray)
Heap Spraying [Part 2]: MS13-009 Use-After-Free IE8 (DEP)