Linux - chmod(/etc/shadow 0666) & exit() - 33 bytes

No description provided by source. include stdio.h / linux/x86 ; chmod/etc/shadow, 0666 & exit 33 bytes written by ka0x - ka0x01alt+64gmail.com lun sep 21 17:13:25 CEST 2009 greets: an0de, Piker, xarnuz, NullWave07, Pepelux, JosS, sch3m4, Trancek and others! / int main char shellcode = "\x31\xc0"...

linux/x86 setuid(0) & execve("/sbin/poweroff -f") 47 bytes

Exploit for linux/x86 platform in category shellcode ========================================================== linux/x86 setuid0 & execve"/sbin/poweroff -f" 47 bytes ========================================================== include / linux/x86 ; setuid0 & execve"/sbin/poweroff -f" 47 bytes...

Linux - linux/x86 execve - 51bytes

Linux - linux/x86 execve - 51bytes. Shellcode exploit for linx86 platform / linux/x86 execve51bytes 08048080 : 8048080: eb 1a jmp 804809c 08048082 : 8048082: 5e pop %esi 8048083: 31 c0 xor %eax,%eax 8048085: 88 46 07 mov %al,0x7%esi 8048088: 8d 1e lea %esi,%ebx 804808a: 89 5e 08 mov %ebx,0x8%esi...

SMB NTLMv1 Login Request Corruption

This module sends a series of SMB login requests using the NTLMv1 protocol with corrupted bytes. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SMB NTLMv1 Login Request Corruption',...

AOL 9.1 SuperBuddy ActiveX Control SetSuperBuddy() remote code execution exploit

!-- AOL 9.1 SuperBuddy ActiveX Control SetSuperBuddy remote code execution exploit IE7/heap spray version by nine:situations:group::trotzkista Is possible to execute arbitrary code by setting the first argument to an overlong url and the second argument to a 16 bytes long string which overwrite...

linux/x86 Self-modifying shellcode for IDS evasion 64 bytes

No description provided by source. / | |/ / / |/ / / / | / / / / /|/ / / / / / / / / / / / / // / / / / // / // // / //|// //// //,//,/ xenomuta\x40phreaker\x2enet http://xenomuta.tuxfamily.org/ - Methylxantina 256mg Description: linux/x86 Self-modifying ShellCode for IDS evasion creates...

linux/x86 shellcode that forks a HTTP Server on port tcp/8800 166 bytes

No description provided by source. / | |/ / / |/ / / / | / / / / /|/ / / / / / / / / / / / / // / / / / // / // // / //|// //// //,//,/ xenomuta\x40phreaker\x2enet http://xenomuta.tuxfamily.org/ - Methylxantina 256mg Description: a linux/x86 shellcode that forks a HTTP Server on port...

linux/x86 shellcode that forks a HTTP Server on port tcp/8800 166 bytes

Exploit for linux/x86 platform in category shellcode ======================================================================= linux/x86 shellcode that forks a HTTP Server on port tcp/8800 166 bytes ======================================================================= / Description: a linux/x86...

linux/x86 Self-modifying shellcode for IDS evasion 64 bytes

Exploit for linux/x86 platform in category shellcode =========================================================== linux/x86 Self-modifying shellcode for IDS evasion 64 bytes =========================================================== / Description: linux/x86 Self-modifying ShellCode for IDS evasio...

linux/x86 - Self-modifying shellcode for IDS evasion 64 bytes

linux/x86 Self-modifying shellcode for IDS evasion 64 bytes. Shellcode exploit for linx86 platform / | |/ / / |/ / / / | / / / / /|/ / / / / / / / / / / / / // / / / / // / // // / //|// //// //,//,/ xenomuta\x40phreaker\x2enet http://xenomuta.tuxfamily.org/ - Methylxantina 256mg...

SAP Player 0.9 - '.pla' Universal Local Buffer Overflow (SEH)

!/usr/bin/python SAP player 0.9 .pla Universal Local BoF Exploit SEH Download: http://www.sorinara.com/sap/sap09.exe Credits go to: PLATEN Coded by: Steven Seeley aka mrme Tested on Windows XP SP3 Its not dead till its buried ; windows/shell/reversetcp - 617 bytes stage 1 http://www.metasploit.co...

kernel: information leak in sigaltstack

The dosigaltstack function in kernel/signal.c in Linux kernel 2.4 through 2.4.37 and 2.6 before 2.6.31-rc5, when running on 64-bit systems, does not clear certain padding bytes from a structure, which allows local users to obtain sensitive information from the kernel stack via the sigaltstack...

win32/xp sp3 (FR) Sleep 14 bytes

Exploit for win32 platform in category shellcode =============================== win32/xp sp3 FR Sleep 14 bytes =============================== / win32/xp sp3 FR Sleep 14 bytes Author : optix hacker notice Tested Under Windows XP SP3 fr this shellcode makes a sleep for 90000ms=90s=1,5min this is...

linux/x86 /bin/sh polymorphic shellcode 48 bytes

No description provided by source. / Title: Polymorphic Shellcode /bin/sh - 48 bytes Author: Jonathan Salwan Mail: submit ! shell-storm.org ! DataBase of shellcode : http://www.shell-storm.org/shellcode/ Original Informations ===================== Disassembly of section .text: 08048060 .text:...

Out-of-Bounds

Overview Affected versions of this package are vulnerable to Out-of-Bounds. Stack consumption vulnerability in validators/DTD/DTDScanner.cpp in Apache Xerces C++ 2.7.0 and 2.8.0 allows context-dependent attackers to cause a denial of service application crash via vectors involving nested...

linux/x86 /bin/sh polymorphic shellcode 48 bytes

Exploit for linux/x86 platform in category shellcode ================================================ linux/x86 /bin/sh polymorphic shellcode 48 bytes ================================================ / Title: Polymorphic Shellcode /bin/sh - 48 bytes Author: Jonathan Salwan Original Informations...

Linux Kernel <= 2.6.31-rc5 sigaltstack 4-Byte Stack Disclosure Exploit

Exploit for linux platform in category local exploits ====================================================================== Linux Kernel include include include include include include include include const int randcalls = 0, 1, 2, 3, 4, 5, 6, 8, 9, 10, 11, 13, 14, 16, 21, 22, 24, 25, 32, 33, 36...

Cisco IOS BGP DoS

Few denial of service conditions on BGP updates with 4-bytes AS numbers...

Millenium MP3 Studio 1.0 .mpf File Local Stack Overflow Exploit #2

Exploit for unknown platform in category local exploits ================================================================== Millenium MP3 Studio 1.0 .mpf File Local Stack Overflow Exploit 2 ================================================================== + Vulnerability : .mpf File Local Stack...

win32/xp sp2 (En) cmd.exe 23 bytes

No description provided by source. / win32/xp sp2 En cmd.exe 23 bytes Author : Mountassif Moad A.K.A : Stack Description : It's a 23 Byte Shellcode which Execute Cmd.exe Tested Under Windows Xp SP2 En get the following if we disassemle this code compiled with olly debugger 00402000 8BEC MOV EBP,E...