CVE-2008-5416

This repository contains a functional Metasploit exploit for CVE-2008-5416, targeting a heap-based buffer overflow in Microsoft SQL Server's undocumented 'sp_replwritetovarbin' stored procedure. The exploit uses return-oriented programming (ROP) to achieve reliable remote code execution across multiple SQL Server versions.

This Metasploit module exploits a heap-based buffer overflow in Microsoft SQL Server's undocumented 'sp_replwritetovarbin' stored procedure (CVE-2008-5416). It uses return-oriented programming (ROP) to achieve reliable remote code execution by smashing vtable pointers and hijacking the stack.

This is a Metasploit module exploiting a heap-based buffer overflow in Microsoft SQL Server via the undocumented 'sp_replwritetovarbin' stored procedure. It uses return-oriented programming (ROP) to achieve reliable remote code execution on various versions of MSSQL 2000 and 2005.

This is a Metasploit module exploiting a heap-based buffer overflow in Microsoft SQL Server's undocumented 'sp_replwritetovarbin' stored procedure (CVE-2008-5416). It uses return-oriented programming (ROP) to achieve reliable remote code execution on various versions of MSSQL 2000 and 2005.

This Metasploit module exploits a heap-based buffer overflow in Microsoft SQL Server's undocumented 'sp_replwritetovarbin' stored procedure via SQL injection, achieving remote code execution through return-oriented programming (ROP) techniques. It targets multiple versions of MSSQL 2000 and MSDE, leveraging precise memory corruption to hijack execution flow.

This is a functional exploit for CVE-2008-4270, targeting a heap overflow in Microsoft SQL Server's sp_replwritetovarbin function. It uses a series of crafted T-SQL queries to overwrite memory and execute a reverse shell payload.