Windows Exploits

root@HORUS-NETBOOK:/opt/framework/msf3/modules/exploits/windows# ls -R
.:
antivirus   ftp      motorola  smb
arkeia      games    mssql     smtp
backdoor    http     mysql     ssh
backupexec  iis      nfs       ssl
brightstor  imap     nntp      telnet
browser     isapi    novell    tftp
dcerpc      ldap     oracle    unicenter
driver      license  pop3      vnc
email       lotus    postgres  vpn
emc         lpd      proxy     wins
fileformat  misc     scada
firewall    mmsp     sip

./antivirus:
ams_hndlrsvc.rb
ams_xfr.rb
symantec_iao.rb
symantec_rtvscan.rb
trendmicro_serverprotect_createbinding.rb
trendmicro_serverprotect_earthagent.rb
trendmicro_serverprotect.rb

./arkeia:
type77.rb

./backdoor:
energizer_duo_payload.rb

./backupexec:
name_service.rb  remote_agent.rb

./brightstor:
ca_arcserve_342.rb
discovery_tcp.rb
discovery_udp.rb
etrust_itm_alert.rb
hsmserver.rb
lgserver_multi.rb
lgserver.rb
lgserver_rxrlogin.rb
lgserver_rxssetdatagrowthscheduleandfilter.rb
lgserver_rxsuselicenseini.rb
license_gcr.rb
mediasrv_sunrpc.rb
message_engine_72.rb
message_engine_heap.rb
message_engine.rb
sql_agent.rb
tape_engine_8A.rb
tape_engine.rb
universal_agent.rb

./browser:
adobe_cooltype_sing.rb
adobe_flashplayer_avm.rb
adobe_flashplayer_flash10o.rb
adobe_flashplayer_newfunction.rb
adobe_flatedecode_predictor02.rb
adobe_geticon.rb
adobe_jbig2decode.rb
adobe_media_newplayer.rb
adobe_shockwave_rcsl_corruption.rb
adobe_utilprintf.rb
aim_goaway.rb
amaya_bdo.rb
aol_ampx_convertfile.rb
aol_icq_downloadagent.rb
apple_itunes_playlist.rb
apple_quicktime_marshaled_punk.rb
apple_quicktime_rtsp.rb
apple_quicktime_smil_debug.rb
ask_shortformat.rb
athocgov_completeinstallation.rb
autodesk_idrop.rb
aventail_epi_activex.rb
awingsoft_web3d_bof.rb
awingsoft_winds3d_sceneurl.rb
baofeng_storm_onbeforevideodownload.rb
barcode_ax49.rb
blackice_downloadimagefileurl.rb
ca_brightstor_addcolumn.rb
chilkat_crypt_writefile.rb
cisco_anyconnect_exec.rb
citrix_gateway_actx.rb
communicrypt_mail_activex.rb
creative_software_cachefolder.rb
dxstudio_player_exec.rb
ea_checkrequirements.rb
ebook_flipviewer_fviewerloading.rb
enjoysapgui_comp_download.rb
enjoysapgui_preparetoposthtml.rb
facebook_extractiptc.rb
gom_openurl.rb
greendam_url.rb
hp_easy_printer_care_xmlsimpleaccessor.rb
hp_loadrunner_addfile.rb
hp_loadrunner_addfolder.rb
hpmqc_progcolor.rb
hyleos_chemviewx_activex.rb
ibmegath_getxmlvalue.rb
ibmlotusdomino_dwa_uploadmodule.rb
ie_createobject.rb
ie_iscomponentinstalled.rb
ie_unsafe_scripting.rb
java_basicservice_impl.rb
java_codebase_trust.rb
java_docbase_bof.rb
java_ws_arginject_altjvm.rb
juniper_sslvpn_ive_setupdll.rb
kazaa_altnet_heap.rb
logitechvideocall_start.rb
lpviewer_url.rb
macrovision_downloadandexecute.rb
macrovision_unsafe.rb
mcafee_mcsubmgr_vsprintf.rb
mcafeevisualtrace_tracetarget.rb
mirc_irc_url.rb
mozilla_interleaved_write.rb
mozilla_mchannel.rb
mozilla_nstreerange.rb
mozilla_reduceright.rb
ms03_020_ie_objecttype.rb
ms06_001_wmf_setabortproc.rb
ms06_013_createtextrange.rb
ms06_055_vml_method.rb
ms06_057_webview_setslice.rb
ms06_067_keyframe.rb
ms06_071_xml_core.rb
ms07_017_ani_loadimage_chunksize.rb
ms08_041_snapshotviewer.rb
ms08_053_mediaencoder.rb
ms08_070_visual_studio_msmask.rb
ms08_078_xml_corruption.rb
ms09_002_memory_corruption.rb
ms09_043_owc_htmlurl.rb
ms09_043_owc_msdso.rb
ms09_072_style_object.rb
ms10_002_aurora.rb
ms10_018_ie_behaviors.rb
ms10_018_ie_tabular_activex.rb
ms10_022_ie_vbscript_winhlp32.rb
ms10_026_avi_nsamplespersec.rb
ms10_042_helpctr_xss_cmd_exec.rb
ms10_046_shortcut_icon_dllloader.rb
ms10_090_ie_css_clip.rb
ms11_003_ie_css_import.rb
ms11_050_mshtml_cobjectelement.rb
msvidctl_mpeg2.rb
mswhale_checkforupdates.rb
nctaudiofile2_setformatlikesample.rb
nis2004_antispam.rb
nis2004_get.rb
novelliprint_callbackurl.rb
novelliprint_datetime.rb
novelliprint_executerequest_dbg.rb
novelliprint_executerequest.rb
novelliprint_getdriversettings_2.rb
novelliprint_getdriversettings.rb
novelliprint_target_frame.rb
oracle_dc_submittoexpress.rb
orbit_connecting.rb
pcvue_func.rb
persits_xupload_traversal.rb
real_arcade_installerdlg.rb
realplayer_cdda_uri.rb
realplayer_console.rb
realplayer_import.rb
realplayer_qcp.rb
realplayer_smil.rb
roxio_cineplayer.rb
safari_xslt_output.rb
sapgui_saveviewtosessionfile.rb
softartisans_getdrivename.rb
sonicwall_addrouteentry.rb
symantec_altirisdeployment_downloadandinstall.rb
symantec_altirisdeployment_runcmd.rb
symantec_appstream_unsafe.rb
symantec_backupexec_pvcalendar.rb
symantec_consoleutilities_browseandsavefile.rb
systemrequirementslab_unsafe.rb
teechart_pro.rb
trendmicro_extsetowner.rb
trendmicro_officescan.rb
tumbleweed_filetransfer.rb
ultraoffice_httpupload.rb
verypdf_pdfview.rb
vlc_amv.rb
webdav_dll_hijacker.rb
webex_ucf_newobject.rb
winamp_playlist_unc.rb
winamp_ultravox.rb
windvd7_applicationtype.rb
winzip_fileview.rb
wmi_admintools.rb
xmplay_asx.rb
yahoomessenger_fvcom.rb
yahoomessenger_server.rb
zenturiprogramchecker_unsafe.rb

./dcerpc:
ms03_026_dcom.rb
ms05_017_msmq.rb
ms07_029_msdns_zonename.rb
ms07_065_msmq.rb

./driver:
broadcom_wifi_ssid.rb
dlink_wifi_rates.rb
netgear_wg111_beacon.rb

./email:
ms07_017_ani_loadimage_chunksize.rb
ms10_045_outlook_ref_only.rb
ms10_045_outlook_ref_resolve.rb

./emc:
alphastor_agent.rb

./fileformat:
acdsee_fotoslate_string.rb
acdsee_xpm.rb
activepdf_webgrabber.rb
adobe_collectemailinfo.rb
adobe_cooltype_sing.rb
adobe_flashplayer_button.rb
adobe_flashplayer_newfunction.rb
adobe_flatedecode_predictor02.rb
adobe_geticon.rb
adobe_illustrator_v14_eps.rb
adobe_jbig2decode.rb
adobe_libtiff.rb
adobe_media_newplayer.rb
adobe_pdf_embedded_exe_nojs.rb
adobe_pdf_embedded_exe.rb
adobe_u3d_meshdecl.rb
adobe_utilprintf.rb
altap_salamander_pdb.rb
aol_desktop_linktag.rb
aol_phobos_bof.rb
a-pdf_wav_to_mp3.rb
apple_quicktime_pnsize.rb
audiotran_pls.rb
audio_wkstn_pls.rb
bacnet_csv.rb
blazedvd_plf.rb
ca_cab.rb
cain_abel_4918_rdp.rb
cytel_studio_cy3.rb
deepburner_path.rb
destinymediaplayer16.rb
digital_music_pad_pls.rb
djvu_imageurl.rb
dvdx_plf_bof.rb
emc_appextender_keyworks.rb
esignal_styletemplate_bof.rb
etrust_pestscan.rb
ezip_wizard_bof.rb
fatplayer_wav.rb
fdm_torrent.rb
feeddemon_opml.rb
foxit_reader_filewrite.rb
foxit_title_bof.rb
galan_fileformat_bof.rb
gta_samp.rb
hhw_hhp_compiledfile_bof.rb
hhw_hhp_contentfile_bof.rb
hhw_hhp_indexfile_bof.rb
ht_mp3player_ht3_bof.rb
ideal_migration_ipj.rb
lotusnotes_lzh.rb
magix_musikmaker_16_mmm.rb
mcafee_hercules_deletesnapshot.rb
mediajukebox.rb
microp_mppl.rb
millenium_mp3_pls.rb
mjm_coreplayer2011_s3m.rb
mjm_quickplayer_s3m.rb
moxa_mediadbplayback.rb
ms09_067_excel_featheader.rb
ms10_004_textbytesatom.rb
ms10_087_rtf_pfragments_bof.rb
ms11_006_createsizeddibsection.rb
ms11_021_xlb_bof.rb
ms_visual_basic_vbp.rb
msworks_wkspictureinterface.rb
mymp3player_m3u.rb
nuance_pdf_launch_overflow.rb
orbital_viewer_orb.rb
proshow_cellimage_bof.rb
real_networks_netzip_bof.rb
safenet_softremote_groupname.rb
sascam_get.rb
scadaphone_zip.rb
somplplayer_m3u.rb
subtitle_processor_m3u_bof.rb
tugzip.rb
ultraiso_ccd.rb
ultraiso_cue.rb
ursoft_w32dasm.rb
varicad_dwb.rb
videolan_tivo.rb
videospirit_visprj.rb
visio_dxf_bof.rb
visiwave_vwr_type.rb
vlc_modplug_s3m.rb
vlc_smb_uri.rb
vlc_webm.rb
vuplayer_cue.rb
vuplayer_m3u.rb
wireshark_packet_dect.rb
wm_downloader_m3u.rb
xenorate_xpl_bof.rb
xion_m3u_sehbof.rb
zinfaudioplayer221_pls.rb

./firewall:
blackice_pam_icq.rb  kerio_auth.rb

./ftp:
32bitftp_list_reply.rb
3cdaemon_ftp_user.rb
aasync_list_reply.rb
cesarftp_mkd.rb
dreamftp_format.rb
easyfilesharing_pass.rb
easyftp_cwd_fixret.rb
easyftp_list_fixret.rb
easyftp_mkd_fixret.rb
filecopa_list_overflow.rb
filewrangler_list_reply.rb
freeftpd_user.rb
ftpgetter_pwd_reply.rb
ftppad_list_reply.rb
ftpshell51_pwd_reply.rb
ftpsynch_list_reply.rb
gekkomgr_list_reply.rb
globalscapeftp_input.rb
goldenftp_pass_bof.rb
httpdx_tolog_format.rb
leapftp_list_reply.rb
leapftp_pasv_reply.rb
ms09_053_ftpd_nlst.rb
netterm_netftpd_user.rb
odin_list_reply.rb
oracle9i_xdb_ftp_pass.rb
oracle9i_xdb_ftp_unlock.rb
proftp_banner.rb
sami_ftpd_user.rb
sasser_ftpd_port.rb
scriptftp_list.rb
seagull_list_reply.rb
servu_mdtm.rb
slimftpd_list_concat.rb
trellian_client_pasv.rb
vermillion_ftpd_port.rb
warftpd_165_pass.rb
warftpd_165_user.rb
wftpd_size.rb
wsftp_server_503_mkd.rb
wsftp_server_505_xmd5.rb
xftp_client_pwd.rb
xlink_client.rb
xlink_server.rb

./games:
mohaa_getinfo.rb   ut2004_secure.rb
racer_503beta5.rb

./http:
adobe_robohelper_authbypass.rb
altn_securitygateway.rb
altn_webadmin.rb
amlibweb_webquerydll_app.rb
apache_chunked.rb
apache_modjk_overflow.rb
apache_mod_rewrite_ldap.rb
badblue_ext_overflow.rb
badblue_passthru.rb
bea_weblogic_jsessionid.rb
bea_weblogic_transfer_encoding.rb
belkin_bulldog.rb
ca_arcserve_rpc_authbypass.rb
ca_igateway_debug.rb
ca_totaldefense_regeneratereports.rb
coldfusion_fckeditor.rb
easyftp_list.rb
edirectory_host.rb
edirectory_imonitor.rb
efs_easychatserver_username.rb
fdm_auth_header.rb
hp_nnm_getnnmdata_hostname.rb
hp_nnm_getnnmdata_icount.rb
hp_nnm_getnnmdata_maxage.rb
hp_nnm_nnmrptconfig_nameparams.rb
hp_nnm_nnmrptconfig_schdparams.rb
hp_nnm_openview5.rb
hp_nnm_ovalarm_lang.rb
hp_nnm_ovas.rb
hp_nnm_ovwebhelp.rb
hp_nnm_ovwebsnmpsrv_main.rb
hp_nnm_ovwebsnmpsrv_ovutil.rb
hp_nnm_ovwebsnmpsrv_uro.rb
hp_nnm_snmp.rb
hp_nnm_snmpviewer_actapp.rb
hp_nnm_toolbar_01.rb
hp_nnm_toolbar_02.rb
hp_nnm_webappmon_execvp.rb
hp_nnm_webappmon_ovjavalocale.rb
hp_openview_insight_backdoor.rb
hp_power_manager_filename.rb
hp_power_manager_login.rb
httpdx_handlepeer.rb
httpdx_tolog_format.rb
ia_webmail.rb
ibm_tivoli_endpoint_bof.rb
ibm_tpmfosd_overflow.rb
ibm_tsm_cad_header.rb
icecast_header.rb
integard_password_bof.rb
intersystems_cache.rb
ipswitch_wug_maincfgret.rb
kolibri_http.rb
mailenable_auth_header.rb
manageengine_apps_mngr.rb
maxdb_webdbm_database.rb
maxdb_webdbm_get_overflow.rb
mcafee_epolicy_source.rb
mdaemon_worldclient_form2raw.rb
minishare_get_overflow.rb
navicopa_get_overflow.rb
novell_imanager_upload.rb
novell_messenger_acceptlang.rb
nowsms.rb
oracle9i_xdb_pass.rb
osb_uname_jlist.rb
peercast_url.rb
privatewire_gateway.rb
psoproxy91_overflow.rb
sambar6_search_results.rb
sapdb_webtools.rb
sap_mgmt_con_osexec_payload.rb
savant_31_overflow.rb
servu_session_cookie.rb
shoutcast_format.rb
shttpd_post.rb
steamcast_useragent.rb
sybase_easerver.rb
trackercam_phparg_overflow.rb
trendmicro_officescan.rb
webster_http.rb
xitami_if_mod_since.rb
zenworks_uploadservlet.rb

./iis:
iis_webdav_upload_asp.rb
ms01_023_printer.rb
ms01_026_dbldecode.rb
ms01_033_idq.rb
ms02_018_htr.rb
ms03_007_ntdll_webdav.rb

./imap:
eudora_list.rb
imail_delete.rb
ipswitch_search.rb
mailenable_login.rb
mailenable_status.rb
mailenable_w3c_select.rb
mdaemon_cram_md5.rb
mdaemon_fetch.rb
mercur_imap_select_overflow.rb
mercur_login.rb
mercury_login.rb
mercury_rename.rb
novell_netmail_append.rb
novell_netmail_auth.rb
novell_netmail_status.rb
novell_netmail_subscribe.rb

./isapi:
ms00_094_pbserver.rb
ms03_022_nsiislog_post.rb
ms03_051_fp30reg_chunked.rb
rsa_webagent_redirect.rb
w3who_query.rb

./ldap:
imail_thc.rb  pgp_keyserver7.rb

./license:
calicclnt_getconfig.rb
calicserv_getconfig.rb
sentinel_lm7_udp.rb

./lotus:
domino_http_accept_language.rb
domino_icalendar_organizer.rb
domino_sametime_stmux.rb
lotusnotes_lzh.rb

./lpd:
hummingbird_exceed.rb
niprint.rb
saplpd.rb
wincomlpd_admin.rb

./misc:
agentxpp_receive_agentx.rb
apple_quicktime_rtsp_response.rb
asus_dpcproxy_overflow.rb
bakbone_netvault_heap.rb
bcaaa_bof.rb
bigant_server_250.rb
bigant_server.rb
bigant_server_usv.rb
bomberclone_overflow.rb
bopup_comm.rb
borland_interbase.rb
borland_starteam.rb
citrix_streamprocess.rb
doubletake.rb
eiqnetworks_esa.rb
eiqnetworks_esa_topology.rb
eureka_mail_err.rb
fb_isc_attach_database.rb
fb_isc_create_database.rb
fb_svc_attach.rb
hp_omniinet_1.rb
hp_omniinet_2.rb
hp_omniinet_3.rb
hp_omniinet_4.rb
hp_ovtrace.rb
ib_isc_attach_database.rb
ib_isc_create_database.rb
ibm_tsm_cad_ping.rb
ibm_tsm_rca_dicugetidentify.rb
ib_svc_attach.rb
landesk_aolnsrvr.rb
mercury_phonebook.rb
mini_stream.rb
mirc_privmsg_server.rb
ms07_064_sami.rb
netcat110_nt.rb
nettransport.rb
poppeeper_date.rb
poppeeper_uidl.rb
pxexploit.rb
realtek_playlist.rb
sap_2005_license.rb
shixxnote_font.rb
splayer_content_type.rb
talkative_response.rb
tiny_identd_overflow.rb
ufo_ai.rb
windows_rsh.rb
wireshark_packet_dect.rb

./mmsp:
ms10_025_wmss_connect_funnel.rb

./motorola:
timbuktu_fileupload.rb

./mssql:
lyris_listmanager_weak_pass.rb
ms02_039_slammer.rb
ms02_056_hello.rb
ms09_004_sp_replwritetovarbin.rb
ms09_004_sp_replwritetovarbin_sqli.rb
mssql_payload.rb
mssql_payload_sqli.rb

./mysql:
mysql_payload.rb  mysql_yassl_hello.rb

./nfs:
xlink_nfsd.rb

./nntp:
ms05_030_nntp.rb

./novell:
groupwisemessenger_client.rb
nmap_stor.rb
zenworks_desktop_agent.rb

./oracle:
osb_ndmp_auth.rb  tns_auth_sesskey.rb
tns_arguments.rb  tns_service_name.rb

./pop3:
seattlelab_pass.rb

./postgres:
postgres_payload.rb

./proxy:
bluecoat_winproxy_host.rb
ccproxy_telnet_ping.rb
proxypro_http_get.rb
qbik_wingate_wwwproxy.rb

./scada:
citect_scada_odbc.rb
daq_factory_bof.rb
factorylink_csservice.rb
factorylink_vrn_09.rb
iconics_genbroker.rb
iconics_webhmi_setactivexguid.rb
igss9_igssdataserver_listall.rb
igss9_igssdataserver_rename.rb
igss9_misc.rb
moxa_mdmtool.rb
procyon_core_server.rb
realwin_on_fc_binfile_a.rb
realwin_on_fcs_login.rb
realwin.rb
realwin_scpc_initialize.rb
realwin_scpc_initialize_rf.rb
realwin_scpc_txtevent.rb
scadapro_cmdexe.rb
winlog_runtime.rb

./sip:
aim_triton_cseq.rb   sipxphone_cseq.rb
sipxezphone_cseq.rb

./smb:
ms03_049_netapi.rb
ms04_007_killbill.rb
ms04_011_lsass.rb
ms04_031_netdde.rb
ms05_039_pnp.rb
ms06_025_rasmans_reg.rb
ms06_025_rras.rb
ms06_040_netapi.rb
ms06_066_nwapi.rb
ms06_066_nwwks.rb
ms06_070_wkssvc.rb
ms07_029_msdns_zonename.rb
ms08_067_netapi.rb
ms09_050_smb2_negotiate_func_index.rb
ms10_061_spoolss.rb
netidentity_xtierrpcpipe.rb
psexec.rb
smb_relay.rb
timbuktu_plughntcommand_bof.rb

./smtp:
mailcarrier_smtp_ehlo.rb
mercury_cram_md5.rb
ms03_046_exchange2000_xexch50.rb
njstar_smtp_bof.rb
wmailserver.rb
ypops_overflow1.rb

./ssh:
freeftpd_key_exchange.rb
freesshd_key_exchange.rb
putty_msg_debug.rb
securecrt_ssh1.rb

./ssl:
ms04_011_pct.rb

./telnet:
gamsoft_telsrv_username.rb
goodtech_telnet.rb

./tftp:
attftp_long_filename.rb
dlink_long_filename.rb
futuresoft_transfermode.rb
quick_tftp_pro_mode.rb
tftpd32_long_filename.rb
tftpdwin_long_filename.rb
threectftpsvc_long_mode.rb

./unicenter:
cam_log_security.rb

./vnc:
realvnc_client.rb   winvnc_http_get.rb
ultravnc_client.rb

./vpn:
safenet_ike_11.rb

./wins:
ms04_045_wins.rb