linux/x86 execve /bin/sh setreuid(12 12) 50 bytes

No description provided by source. / Linux/x86 An example of setregid, execve /bin/sh I used this in practise, hence the setregid12, 12; / include stdio.h char c0de = / main: / / setregid12, 12; / "\x29\xc0" / subl %eax, %eax / "\xb0\x47" / movb $71, %al / "\x29\xdb" / subl %ebx, %ebx / / Here's...

linux/x86 execve /bin/sh xor encrypted 55 bytes

No description provided by source. / .file "xor-encrypted shellcode" .version "1.0" .text .align 4 .globl main .type main,@function start: xorl %eax,%eax jmp 0x22 popl %ebx movl 8%ebx,%edx xor %edx,%ebx xor %edx,4%ebx xor %edx,%edx movl %ebx,0x8%esp movl %edx,0xc%esp movb $0xb,%al leal 0x8%esp,%e...

linux/x86 unix/SPARC irix/mips execve /bin/sh irx.mips 141 bytes

No description provided by source. / Shellcode ejecuta execve /bin/sh en Irix/mips, Linux/x86, Unix/sparc by dymitr1 [email protected] / include stdio.h char code= "\x37\x37\xeb\x2f\x30\x80\x00\x12\x04\x10\xff\xff\x24\x02\x03\xf3\x23\xff\x02\x14\x23\xe4\xfe\x08"...

linux/x86 unix/SPARC irix/mips execve /bin/sh irx.mips 141 bytes

Exploit for multiple platform in category shellcode ================================================================ linux/x86 unix/SPARC irix/mips execve /bin/sh irx.mips 141 bytes ================================================================ / Shellcode ejecuta execve /bin/sh en Irix/mips,...

sh-httpd.txt

======================================== INetCop Security Advisory 2003-0x82-019 ======================================== Title: sh-httpd wildcard character' vulnerability 0x01. Description About: sh-httpd is a shell script-based Web server that supports GET and HEAD methods, and a CGI 1.1...

CVE-2003-1137

Charles Steinkuehler sh-httpd 0.3 and 0.4 allows remote attackers to read files or execute arbitrary CGI scripts via a GET request that contains an asterisk wildcard character...

SH-HTTPD 0.30.4 - Character Filtering Remote Information Disclosure

SH-HTTPD 0.30.4 - Character Filtering Remote Information Disclosure source: https://www.securityfocus.com/bid/8897/info A problem has been identified in the handling of some characters by sh-httpd. Because of this, an attacker may be able to gain unauthorized access to information. GET GET...

[Full-Disclosure] sh-httpd `wildcard character' vulnerability

======================================== INetCop Security Advisory 2003-0x82-019 ======================================== Title: sh-httpd wildcard character' vulnerability 0x01. Description About: sh-httpd is a shell script-based Web server that supports GET and HEAD methods, and a CGI 1.1...

sh-httpd shell characters

wildcard metacharacter allows to access any file...

SH-HTTPD 0.3/0.4 - Character Filtering Remote Information Disclosure

source: https://www.securityfocus.com/bid/8897/info A problem has been identified in the handling of some characters by sh-httpd. Because of this, an attacker may be able to gain unauthorized access to information. GET GET ../../../sh-httpd/p GET /../../etc/s GET ../../root/.b...

CVE-2001-0444: Undefined Security Weakness

Cisco CBOS 2.3.0.053 sends output of the "sh nat" aka "show nat" command to the terminal of the next user who attempts to connect to the router via telnet, which could allow that user to obtain sensitive information...

CVE-2000-1134: Undefined Security Weakness

Multiple shell programs on various Unix systems, including 1 tcsh, 2 csh, 3 sh, and 4 bash, follow symlinks when processing redirects aka here-documents or in-here documents, which allows local users to overwrite files of other users via a symlink attack...

linux/x86 break chroot setuid0 + /bin/sh 132 bytes

linux/x86 break chroot setuid0 + /bin/sh 132 bytes. Shellcode exploit for linx86 platform / Linux/x86 - setreuid0, 0; - chroot-break make a temp dir with mkdir, chroot to tempdir, go through a loop of chdir".."; then a final chroot"."; - execve of /bin/sh used in several wu-ftpd, beroftpd and...

Linux news 09.05.00

FOR ALL Поздравляю всех с Днем Победы ! Всего вам хорошего ... и давайте все-таки не забывать наших предков ... Kernel Traffic 66 Вышел очередной выпуск Linux Kernel Traffic, обзора обсуждаемых тем в списке разработчиков ядра. Подробнее: http://kt.linuxcare.com/kernel-traffic/kt2000050766print.ep...

CVE-1999-0509

CVE-1999-0509 describes remote arbitrary-command execution when shell interpreters (Perl, sh, csh, etc.) are installed in the web server’s /cgi-bin directory. The underlying issue is CGI scripts running with the server’s privileges, enabling attackers to execute commands. Affected scenario: a WWW...

CVE-1999-0509: Improper Control of Generation of Code

Perl, sh, csh, or other shell interpreters are installed in the cgi-bin directory on a WWW site, which allows remote attackers to execute arbitrary commands...