linux/x86 - /etc/passwd Reader - 58 bytes

Linux/x86 - /etc/passwd Reader - 58 bytes Greetz : BombermanLeader,wiremask.eu Author : B3mB4m Concat : Do not disturb - Bomberman Bu adamı geçmeden konuşmaya iznim yok.Iki yıl sonra görüşmek üzre : Info File descriptor on EBX Buffer on ECX Bytes to read on EDX Disassembly of section .text:...

Linux/x86 - /etc/passwd Reader 58 bytes

Linux/x86 - /etc/passwd Reader 58 bytes. Shellcode exploit for linux platform Linux/x86 - /etc/passwd Reader - 58 bytes Greetz : BombermanLeader,wiremask.eu Author : B3mB4m Concat : Do not disturb - Bomberman Bu adamı geçmeden konuşmaya iznim yok.Iki yıl sonra görüşmek üzre : Info File descriptor...

Linux/x86 - chmod 777 /etc/shadow & exit 33 bytes

Linux/x86 - chmod 777 /etc/shadow & exit 33 bytes. Shellcode exploit for linx86 platform Linux/x86 - chmod 777 /etc/shadow & exit - 33 bytes Greetz : BombermanLeader Author : B3mB4m Concat : [email protected] Disassembly of section .text: 08048060 : 8048060: 31 c0 xor %eax,%eax 8048062: 50 push %e...

ceph-deploy admin command copies keyring file to /etc/ceph which is world readable

It was discovered that ceph-deploy, a utility for deploying Red Hat Ceph Storage, would create the keyring file with world readable permissions, which could possibly allow a local user to obtain authentication credentials from the keyring file...

WordPress RobotCPA Plugin V5 - Local File Inclusion Vulnerability

Exploit for php platform in category web applications Exploit Title: Wordpress Plugin RobotCPA V5 - Local File Include Google Dork: inurl:"/wp-content/plugins/robotcpa/" Date: 09.06.2015 Exploit Author: T3N38R15 Vendor Homepage: http://robot-cpa.good-info.co/ Version: 5V Tested on: Windows Firefo...

SUSE SLES11 Security Update : glibc (SUSE-SU-2014:1129-1)

This glibc update fixes a critical privilege escalation problem and two additional issues : - bnc892073: An off-by-one error leading to a heap-based buffer overflow was found in gconvtranslitfind. An exploit that targets the problem is publicly available. CVE-2014-5119 - bnc836746: Avoid race...

linux/x86 setuid(0) + setgid(0) + execve("/bin/cat", "/etc//shadow") - 52 by

// linux/x86 setuid0 + setgid0 + execve"/bin/cat", "/etc//shadow" - 52 bytes // Febriyanto Nugroho include char shellcode = "\x6a\x17\x58\xcd\x80\x6a\x2e" "\x58\xcd\x80\x6a\x0b\x58\x99" "\x52\x68\x61\x64\x6f\x77\x68" "\x2f\x2f\x73\x68\x68\x2f\x65" "\x74\x63\x89\xe1\x52\x68\x2f"...

linux/x86 execve("/bin/cat", "/etc/gshadow") - 44 bytes

/ Exploit Title : linux/x86 execve"/bin/cat", "/bin/cat", "/etc/gshadow", NULL - 44 bytes Exploit Author : Febriyanto Nugroho Tested on : Linux Debian 5.0.5 / include char shellcode = "\x31\xdb" "\x8d\x43\x0b" "\x99" "\x52" "\x68\x2f\x63\x61\x74" "\x68\x2f\x62\x69\x6e" "\x89\xe3" "\x52"...

Linux/x86 - chmod 0777 /etc/shadow obfuscated 84 bytes

Linux/x86 - chmod 0777 /etc/shadow obfuscated 84 bytes. Shellcode exploit for linx86 platform / Linux x86 - execve chmod 0777 /etc/shadow Obfuscated version - 84 bytes Original: http://shell-storm.org/shellcode/files/shellcode-828.php Author: xmgv Details:...

Linux/MIPS Little Endian - Chmod 666 /etc/passwd 55 Bytes

Linux/MIPS Little Endian - Chmod 666 /etc/passwd 55 Bytes. Shellcode exploit for linuxmips platform include / Title: Linux/MIPS Little Endian - chmod 666 /etc/passwd - 55 bytes Date: 2015-03-05 Author: Sang-Min LEE Email: [email protected] Blog: http://smleenull.tistory.com / char sc =...

Linux/MIPS Little Endian - Chmod 666 /etc/shadow 55 Bytes

Linux/MIPS Little Endian - Chmod 666 /etc/shadow 55 Bytes. Shellcode exploit for linuxmips platform include / Title: Linux/MIPS Little Endian - chmod 666 /etc/shadow - 55 bytes Date: 2015-03-05 Author: Sang-Min LEE Email: [email protected] Blog: http://smleenull.tistory.com / char sc =...

Linux/ARM - Add Map (127.1.1.1 google.lk) In /etc/hosts Shellcode (79 bytes)

Linux/ARM - Add Map 127.1.1.1 google.lk In /etc/hosts Shellcode 79 bytes. Shellcode exploit for ARM platform / Title: Add map in /etc/hosts file - 79 bytes Date: 2015-03-02 Architecture: armv6l GNU/Linux Website: http://osandamalith.wordpress.com E-Mail: osandacatunseen.is Author: Osanda Malith...

RedStar 2.0 Desktop - 'World-writeable rc.sysinit' Local Privilege Escalation

Red Star 2.0 desktop ships with a world-writeable "/etc/rc.d/rc.sysinit" which can be abused to execute commands on boot. An example exploitation of this vulnerability is shown here https://github.com/HackerFantastic/Public/blob/master/exploits/redstar2.0-localroot.png PoC: /bin/echo...

[SECURITY] Fedora 20 Update: denyhosts-2.6-29.fc20.1

DenyHosts is a Python script that analyzes the sshd server log messages to determine which hosts are attempting to hack into your system. It also determines what user accounts are being targeted. It keeps track of the frequency of attempts from each host and, upon discovering a repeated attack...

Varnish Cache CLI Interface Remote Code Execution Exploit

This Metasploit module attempts to login to the Varnish Cache varnishd CLI instance using a bruteforce list of passwords. This Metasploit module will also attempt to read the /etc/shadow root password hash if a valid password is found. It is possible to execute code as root with a valid password,...

Varnish Cache CLI Interface Remote Code Execution

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Varnish Cache CLI Interface Bruteforce Utility', 'Description' = 'This module attempts to login to the Varnish Cache varnishd CLI...

Varnish Cache CLI Interface - Remote Code Execution (Metasploit)

Varnish Cache CLI Interface - Remote Code Execution Metasploit This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Varnish Cache CLI Interface Bruteforce Utility', 'Description' = 'This...

Varnish Cache CLI Interface - Remote Code Execution (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Varnish Cache CLI Interface Bruteforce Utility', 'Description' = 'This module attempts to login to the Varnish Cache varnishd CLI...

Race condition

Race condition in RPM 4.11.1 and earlier allows remote attackers to execute arbitrary code via a crafted RPM file whose installation extracts the contents to temporary files before validating the signature, as demonstrated by installing a file in the /etc/cron.d directory...

CVE-2013-6435

Race condition in RPM 4.11.1 and earlier allows remote attackers to execute arbitrary code via a crafted RPM file whose installation extracts the contents to temporary files before validating the signature, as demonstrated by installing a file in the /etc/cron.d directory...