Linux/x86 - pwrite(/etc/shadow, (md5 hash of agix), 32, 8) Shellcode (89 bytes)

Linux/x86 - pwrite/etc/shadow, md5 hash of agix, 32, 8 Shellcode 89 bytes. Shellcode exploit for Linuxx86 platform / | Title: Linux/x86 pwrite"/etc/shadow", hash, 32, 8 Shellcode 89 Bytes | Description: replace root's password with hash of "agix" in MD5 | Type: Shellcode | Author: agix | Platform...

Solaris/x86 - setuid(0) + /bin/cat /etc/shadow Shellcode (61 bytes)

Solaris/x86 - setuid0 + /bin/cat /etc/shadow Shellcode 61 bytes. Shellcode exploit for Solarisx86 platform. Tags: Metasploit Framework MSF Name = John Babio Twitter = 3vi1john SunOS opensolaris 10 5.11 i86pc i386 i86pc setuid0 /bin/cat //etc/shadow char code=...

Linux/x86 - chmod(/etc/shadow, 0666) + ASCII Shellcode (443 bytes)

Linux/x86 - chmod/etc/shadow, 0666 + ASCII Shellcode 443 bytes. Shellcode exploit for Linuxx86 platform / | Title: Linux/x86 chmod/etc/shadow, 0666 ASCII Shellcode 443 Bytes | Type: Shellcode | Author: agix | Platform: Linux X86 / include char shellcode = "LLLLhHEY!X5HEY!"...

Linux/x86 - execve(/bin/cat, /etc/shadow, NULL) Shellcode (42 bytes)

Linux/x86 - execve/bin/cat, /etc/shadow, NULL Shellcode 42 bytes. Shellcode exploit for Linuxx86 platform / Title: linux/x86 execve/bin/cat, /etc/shadow, NULL - 42 bytes Type: Shellcode Author: antrhacks Platform: Linux X86 / / ASSembly 31 c0 xor %eax,%eax 50 push %eax 68 2f 63 61 74 push...

solaris/x86 setuid0, execve/bin/cat, /etc/shadow, exit0 59 bytes

solaris/x86 setuid0, execve/bin/cat, /etc/shadow, exit0 59 bytes. Shellcode exploit for solarisx86 platform / ; sm4x 2008 ; /bin/cat /etc/shadow ; 59 bytes ; SunOS sol01 5.11 snv86 i86pc i386 i86pc Solaris ; port to SunOS to pwn a b0x - thank god for that default unix CRYPTDEFAULT!!!! ; this is...

solaris/x86 setuid(0), execve(/bin/cat, /etc/shadow), exit(0) 59 bytes

Exploit for solaris/x86 platform in category shellcode ====================================================================== solaris/x86 setuid0, execve/bin/cat, /etc/shadow, exit0 59 bytes ====================================================================== / ; sm4x 2008 ; /bin/cat /etc/shado...

solaris/x86 setuid(0) execve(/bin/cat /etc/shadow) exit(0) 59 bytes

No description provided by source. / ; sm4x 2008 ; /bin/cat /etc/shadow ; 59 bytes ; SunOS sol01 5.11 snv86 i86pc i386 i86pc Solaris ; port to SunOS to pwn a b0x - thank god for that default unix CRYPTDEFAULT!!!! ; this is what happens when ur work takes away root pirv on a SunOS box :-/ global...

CVE-2008-4192

The pservershutdown function in fenceegenera in cman 2.20080629 and 2.20080801 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/eglog temporary file...

linux/x86 - connect back.send.exit /etc/shadow 155 bytes

linux/x86 connect back.send.exit /etc/shadow 155 bytes. Shellcode exploit for linx86 platform ; CoDed by 0in ; Dark-Coders Group Productions ; Linux x86 connect back&send&exit /etc/shadow 155 byte shellcode ; www.dark-coders.pl nc -v -l -p 8192 ; 2nd console ;Connection from 127.0.0.1:48820...

linux/x86 connect back.send.exit /etc/shadow 155 bytes

Exploit for linux/x86 platform in category shellcode ====================================================== linux/x86 connect back.send.exit /etc/shadow 155 bytes ====================================================== ; CoDed by 0in ; Dark-Coders Group Productions ; Linux x86 connect back&send&ex...

Debian: Security Advisory (DSA-844-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 015-1 (sash)

The remote host is missing an update to sash announced via advisory DSA 015-1. OpenVAS Vulnerability Test $Id: deb0151.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 015-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 844-1 (mod-auth-shadow)

The remote host is missing an update to mod-auth-shadow announced via advisory DSA 844-1. A vulnerability in modauthshadow, an Apache module that lets users perform HTTP authentication against /etc/shadow, has been discovered. The module runs for all locations that use the 'require group' directi...

RHEL 5 : pam (RHSA-2007:0555)

Updated pam packages that fix two security flaws, resolve several bugs, and add enhancements are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Pluggable Authentication Modules PAM provide a system...

Directory traversal

Directory traversal vulnerability in the BlueCat Networks Proteus IPAM appliance 2.0.2.0 Adonis DNS/DHCP appliance 5.0.2.8 allows remote authenticated administrators, with certain TFTP privileges, to create and overwrite arbitrary files via a .. dot dot in a pathname. NOTE: this can be leveraged...

CVE-2007-4226

Directory traversal vulnerability in the BlueCat Networks Proteus IPAM appliance 2.0.2.0 Adonis DNS/DHCP appliance 5.0.2.8 allows remote authenticated administrators, with certain TFTP privileges, to create and overwrite arbitrary files via a .. dot dot in a pathname. NOTE: this can be leveraged...

[Full-disclosure] Yoggie Pico Pro Remote Code Execution

This vulnerability affects the Yoggie Pico Pro and most certainly the Yoggie Pico, due to them being effectively identical security appliance. They expose a 'ping' function in their web interface for diagnostic purposes, which passes the IP/hostname given directly to ping in the form of 'ping -c ...

Yoggie Pico and Pico Pro Backticks - Remote Code Execution

source: https://www.securityfocus.com/bid/24743/info Yoggie Pico and Pico Pro are prone to a remote code-execution vulnerability because the device fails to sufficiently sanitize user-supplied input. An attacker can exploit this issue to execute arbitrary code with superuser privileges. A...

Sun Microsystems Solaris SRSEXEC 3.2.x - Arbitrary File Read Local Information Disclosure

source: https://www.securityfocus.com/bid/23915/info Sun Microsystems Solaris is prone to a local information-disclosure vulnerability due to a design error. A local attacker may exploit this issue to access sensitive information, including superuser password information, that may lead to further...

CVE-2007-0003

pamunix.so in Linux-PAM 0.99.7.0 allows context-dependent attackers to log into accounts whose password hash, as stored in /etc/passwd or /etc/shadow, has only two characters...