linux/ppc - connect back execve /bin/sh 240 bytes

linux/ppc connect back execve /bin/sh 240 bytes. Shellcode exploit for linuxppc platform / connect-core5.c by Charles Stevenson / char hellcode = / connect back & execve /bin/sh linux/ppc by core / "\x7c\x3f\x0b\x78" /mr r31,r1/ "\x3b\x40\x01\x0e" /li r26,270/ "\x3b\x5a\xfe\xf4" /addi r26,r26,-26...

x_dtsuids.pl.txt

!/usr/bin/perl Solaris 10 DtPrintinfo/Session Exploit x86 EDUCATIONAL purposes only.... :- by Charles Stevenson core greetz to raptor for sharing this vulnerability and in no specific order just want to show love for: nemo, andrewg, jduck, bannedit, runixd, charbuff, sloth, ktha, KF, akt0r, MRX,...

gpsdrive <= 2.09 (friendsd2) Remote Format String Exploit (ppc)

Exploit for linux platform in category remote exploits =============================================================== gpsdrive = 2.09 friendsd2 Remote Format String Exploit ppc =============================================================== !/usr/bin/perl -w Heh - Code by KF...

Solaris 10 DtPrintinfo/Session Local Root Exploit (x86)

Exploit for solaris platform in category local exploits ======================================================= Solaris 10 DtPrintinfo/Session Local Root Exploit x86 ======================================================= !/usr/bin/perl Solaris 10 DtPrintinfo/Session Exploit x86 EDUCATIONAL...

Solaris 10 (x86) - DtPrintinfoSession Privilege Escalation

Solaris 10 x86 - DtPrintinfoSession Privilege Escalation !/usr/bin/perl Solaris 10 DtPrintinfo/Session Exploit x86 EDUCATIONAL purposes only.... :- by Charles Stevenson core greetz to raptor for sharing this vulnerability and in no specific order just want to show love for: nemo, andrewg, jduck,...

Solaris 10 (x86) - DtPrintinfo/Session Privilege Escalation

!/usr/bin/perl Solaris 10 DtPrintinfo/Session Exploit x86 EDUCATIONAL purposes only.... :- by Charles Stevenson core greetz to raptor for sharing this vulnerability and in no specific order just want to show love for: nemo, andrewg, jduck, bannedit, runixd, charbuff, sloth, ktha, KF, akt0r, MRX,...

Operator Shell (osh) 1.7-13 Local Root Exploit

Exploit for linux platform in category local exploits ============================================== Operator Shell osh 1.7-13 Local Root Exploit ============================================== You must be groupoperator for permissions /str0ke !/usr/bin/perl OSH 1.7 Exploit 2 Gonna bang away at th...

USN-142-1: sudo vulnerability

Charles Morris discovered a race condition in sudo which could lead to privilege escalation. If /etc/sudoers allowed a user the execution of selected programs, and this was followed by another line containing the pseudo-command "ALL", that user could execute arbitrary commands with sudo by creati...

CVE-2003-1137

Charles Steinkuehler sh-httpd 0.3 and 0.4 allows remote attackers to read files or execute arbitrary CGI scripts via a GET request that contains an asterisk wildcard character...

CVE-2003-1137

CVE-2003-1137 affects sh-httpd versions 0.3 and 0.4. The issue allows remote attackers to read files or execute arbitrary CGI scripts via a GET request containing an asterisk (*) wildcard character, indicating improper handling of wildcards in input. The provided documents do not specify a fix or...

pileup 1.2

Attached you will find pileup-1.2 which fixes the scanf buffer overflows, allowing root access as demonstrated by Charles Stevenson. The fix was written by Richard Everitt [email protected], the author of pileup. Regards, Joop -- Joop Stakenborg - Debian GNU/Linux developer...

glibc-resolve-tr.sh

Charles Stevenson glibc-2.2 and openssh-2.3.0p1 Debian 2.3 , Redhat 7.0 This exploits is for glibc = 2.1.9x. [email protected] Edit this if you have a problem with path ssh=/usr/bin/ssh traceroute=/usr/sbin/traceroute FILE=/etc/shadow File to read echo "$ssh" echo " Checking permisions..." if...