1151 matches found
linux/x86 dup20,0; dup20,1; dup20,2; 15 bytes
linux/x86 dup20,0; dup20,1; dup20,2; 15 bytes. Shellcode exploit for linx86 platform / dup2loop-core.c by Charles Stevenson I made this as a chunk you can paste in to make modular remote exploits. I usually combine this with an execve as the second stage of a read jmp %esp / char hellcode = /...
Prozilla <= 1.3.7.4 (ftpsearch) Results Handling Buffer Overflow Exploit
No description provided by source. include stdio.h include string.h include stdlib.h define OVERFLOW 110+32 define SLEDSIZ 110 define RETADDR 0x806977a+SLEDSIZ/2 define OUTPUT "AdvResults.asp" / prozilla bug, found while auditing for gentoo bug 70090 [email protected] / / execve /bin/id / unsign...
Wireless Tools 26 (IWConfig) - Local Privilege Escalation
Wireless Tools 26 IWConfig - Local Privilege Escalation // if the iwconfig executable is setuid /str0ke include include include include / 45 Byte /bin/sh http://www.milw0rm.com/id.php?id=1169 https://www.exploit-db.com/exploits/1169/ / char shellcode= "\x31\xc0\x31\xdb\x50\x68\x2f\x2f"...
Wireless Tools 26 (iwconfig) Local Root Exploit (some setuid)
No description provided by source. // if the iwconfig executable is setuid /str0ke include stdio.h include string.h include unistd.h include stdlib.h / 45 Byte /bin/sh http://www.milw0rm.com/id.php?id=1169 / char shellcode= "\x31\xc0\x31\xdb\x50\x68\x2f\x2f" "\x73\x68\x68\x2f\x62\x69\x6e\x89"...
linux/x86 /bin/sh sysenter Opcode Array Payload 23 Bytes
linux/x86 /bin/sh sysenter Opcode Array Payload 23 Bytes. Shellcode exploit for linx86 platform / lnxbinsh4.c - v1 - 23 Byte /bin/sh sysenter Opcode Array Payload Copyrightc 2005 c0ntex Copyrightc 2005 BaCkSpAcE This program is free software; you can redistribute it and/or modify it under the ter...
linux/x86 /bin/sh sysenter Opcode Array Payload 23 Bytes
No description provided by source. / lnxbinsh4.c - v1 - 23 Byte /bin/sh sysenter Opcode Array Payload Copyrightc 2005 c0ntex [email protected] Copyrightc 2005 BaCkSpAcE [email protected] This program is free software; you can redistribute it and/or modify it under the terms of the GNU...
linux/x86 /bin/sh sysenter Opcode Array Payload 45 bytes
Exploit for linux/x86 platform in category shellcode ======================================================== linux/x86 /bin/sh sysenter Opcode Array Payload 45 bytes ======================================================== / lnxbinsh2.c - v1 - 45 Byte /bin/sh sysenter Opcode Array Payload...
[ Suresec Advisories ] - Linux kernel ia32 compatibility (ia64/x86-64) race condition
Suresec Security Advisory - 00004 10/07/05 Linux kernel ia32 compatibility race condition Advisory: http://www.suresec.org/advisories/adv4.pdf http://www.suresec.org/advisories/adv3.pdf Description: A race condition vulnerability has been found in the ia32 compatibility execve systemcall. The rac...
Linux kernel ia32 compatibility for 64 bit platforms race condtions
Race conditions with heap memory corruption in execve syscall...
CVE-2005-1768
Race condition in the ia32 compatibility code for the execve system call in Linux kernel 2.4 before 2.4.31 and 2.6 before 2.6.6 allows local users to cause a denial of service kernel panic and possibly execute arbitrary code via a concurrent thread that increments a pointer count after the nargs...
CVE-2005-1768
The CVE-2005-1768 issue is a race condition in the Linux kernel’s IA32 (x86) compatibility execve() handling, affecting amd64/Intel EM64T and Itanium platforms. A concurrent thread can increment a pointer count after nargs has counted pointers but before copying from user space to kernel space, l...
CVE-2005-1768
Race condition in the ia32 compatibility code for the execve system call in Linux kernel 2.4 before 2.4.31 and 2.6 before 2.6.6 allows local users to cause a denial of service kernel panic and possibly execute arbitrary code via a concurrent thread that increments a pointer count after the nargs...
linux/x86 chroot & standart 66 bytes
No description provided by source. Linux/x86 chroot and standart shellcode. By Okti http://okti.nm.ru ---------------------------------------------------------------------------------------------- / Mkdir and Chroot are written in C: / includestdio.h includeunistd.h includesys/types.h...
RHEL 3 : kernel (RHSA-2005:293)
Updated kernel packages that fix several security issues in the Red Hat Enterprise Linux 3 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating syste...
security flaw
The openexec function in the execve functionality exec.c in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, allows local users to read non-readable ELF binaries by using the interpreter PTINTERP functionality...
Important: Red Hat Security Advisory: kernel security update
Updated kernel packages that fix several security issues in the Red Hat Enterprise Linux 3 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating syste...
Aeon 0.2a - Local Linux (1)
Aeon 0.2a - Local Linux 1 !/usr/bin/perl Aeon-mail relay agent for Linux written by lammat just for practice purposes tested against aeon-0.2a http://grpower.ath.cx [email protected] execve/bin/sh for linux x86 29 bytes by Matias Sedalo $shellcode =...
CVE-2004-1073
The openexec function in the execve functionality exec.c in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, allows local users to read non-readable ELF binaries by using the interpreter PTINTERP functionality...
linux/x86 setreuid/execve 31 bytes
Exploit for linux/x86 platform in category shellcode ================================== linux/x86 setreuid/execve 31 bytes ================================== / 31 byte setreuid shellcode - man shadow os: Slackware 9.1, Phlak 2.4, Knoppix 0.1 www.manshadow.org email protected irc.efnet.net manshad...
linux/x86 Radically Self Modifying Code 70 bytes
Exploit for linux/x86 platform in category shellcode ================================================ linux/x86 Radically Self Modifying Code 70 bytes ================================================ /-------------------------------------------------------/ / Radically Self Modifying Code for...