Linux/x86 - execve(/bin/sh) Shellcode (23 bytes) (2)

Linux/x86 - execve/bin/sh Shellcode 23 bytes 2. Shellcode exploit for Linuxx86 platform Linux/x86 execve /bin/sh shellcode 23 bytes Author: Hamza Megahed Twitter: @HamzaMega blog: hamza-megadotblogspotdotcom E-mail: hamzadotmegahedatgmaildotcom xor %eax,%eax push %eax push $0x68732f2f push...

Linux/x86-64 - setreuid(0,0) + execve(/bin/ash,NULL,NULL) + XOR Encoded Shellcode (85 bytes)

Linux/x86-64 - setreuid0,0 + execve/bin/ash,NULL,NULL + XOR Encoded Shellcode 85 bytes. Shellcode exploit for Linuxx86-64 platform Title: Linux x86-64 setreuid 0,0 & execve"/bin/ash",NULL,NULL + XOR encoded - 85 bytes Author: egeektronic Twitter: @egeektronic Tested on: Slackware 13.37 Thanks: Ma...

Linux/x86 - execve(/sbin/iptables -F) Shellcode (70 bytes)

Linux/x86 - execve/sbin/iptables -F Shellcode 70 bytes. Shellcode exploit for Linuxx86 platform Author: zillion Email: [email protected] Home: http://www.safemode.org Linux x86 shellcode that does an execve of /sbin/iptables -F in order to flush activated firewall rules. File:...

Linux/x86 - execve(/bin/dash) Shellcode (49 bytes)

Linux/x86 - execve/bin/dash Shellcode 49 bytes. Shellcode exploit for Linuxx86 platform / Shellcode length: 49 Author: Chroniccommand /bin/dash My first attempt at shellcode Poison security / include //49 bytes char shellcode = "\xeb\x18\x5e\x31\xc0\x88\x46\x09\x89\x76\x0a"...

Linux/x86 - execve(/bin/ash) + exit() Shellcode (34 bytes)

Linux/x86 - execve/bin/ash + exit Shellcode 34 bytes. Shellcode exploit for Linuxx86 platform / Linux x86 shellcode by bob from Dtors.net. execve/bin/ash; exit; Total = 34 bytes. / include char shellcode= "\x31\xc0\x50\x68\x2f\x61\x73\x68\x68" "\x2f\x62\x69\x6e\x89\xe3\x8d\x54\x24"...

Linux/x86 - execve(/bin/cat, /etc/shadow, NULL) Shellcode (42 bytes)

Linux/x86 - execve/bin/cat, /etc/shadow, NULL Shellcode 42 bytes. Shellcode exploit for Linuxx86 platform / Title: linux/x86 execve/bin/cat, /etc/shadow, NULL - 42 bytes Type: Shellcode Author: antrhacks Platform: Linux X86 / / ASSembly 31 c0 xor %eax,%eax 50 push %eax 68 2f 63 61 74 push...

Linux/x86 - setreuid(0,0) + execve(/bin/ash,NULL,NULL) + XOR Encoded Shellcode (58 bytes)

Linux/x86 - setreuid0,0 + execve/bin/ash,NULL,NULL + XOR Encoded Shellcode 58 bytes. Shellcode exploit for Linuxx86 platform Title: Linux x86 setreuid 0,0 & execve"/bin/ash",NULL,NULL + XOR encoded - 58 bytes Author: egeektronic Twitter: @egeektronic Tested on: Slackware 13.37 Thanks: Jonathan...

Linux/x86 - execve(chmod 0777 /etc/shadow) Shellcode (57 bytes)

Linux/x86 - execvechmod 0777 /etc/shadow Shellcode 57 bytes. Shellcode exploit for Linuxx86 platform Linux/x86 execve-chmod 0777 /etc/shadow 57 bytes Author: Hamza Megahed Twitter: @HamzaMega blog: hamza-megadotblogspotdotcom E-mail: hamzadotmegahedatgmaildotcom xor %eax,%eax push %eax pushl...

Linux/x86 - setuid(0) + execve(/bin/sh, 0, 0) Shellcode (27 bytes)

Linux/x86 - setuid0 + execve/bin/sh, 0, 0 Shellcode 27 bytes. Shellcode exploit for Linuxx86 platform include include / by Magnefikko 24.04.2010 [email protected] Promhyl Studies :: http://promhyl.oz.pl Subgroup: PRekambr Name: 27 bytes setuid0 ^ execve"/bin/sh", 0, 0 shellcode Platform: Linux...

Linux/x86 - execve() + ROT-7 Shellcode (Encoder/Decoder) (74 bytes)

Linux/x86 - execve + ROT-7 Shellcode Encoder/Decoder 74 bytes. Shellcode exploit for Linuxx86 platform / ROT-7 Decoder Shellcode - Linux Intel/x86 Author: Stavros Metzidakis / a Python ROT-7 encoder for shellcode execve-stack...

solaris/x86 setuid0, execve//bin/sh; exit0 NULL Free 39 bytes

solaris/x86 setuid0, execve//bin/sh; exit0 NULL Free 39 bytes. Shellcode exploit for solarisx86 platform / ; sm4x 2008 ; setuid0, execve'/bin/sh', '/bin/sh', 0, ; 39 bytes NizzULL free you know... ; SunOS sol01 5.11 snv86 i86pc i386 i86pc Solaris ; quick port to drop root sh - ; - SunOS is pwnij...

solaris/x86 setuid(0), execve(/bin/cat, /etc/shadow), exit(0) 59 bytes

Exploit for solaris/x86 platform in category shellcode ====================================================================== solaris/x86 setuid0, execve/bin/cat, /etc/shadow, exit0 59 bytes ====================================================================== / ; sm4x 2008 ; /bin/cat /etc/shado...

solaris/x86 setuid(0) execve(/bin/cat /etc/shadow) exit(0) 59 bytes

No description provided by source. / ; sm4x 2008 ; /bin/cat /etc/shadow ; 59 bytes ; SunOS sol01 5.11 snv86 i86pc i386 i86pc Solaris ; port to SunOS to pwn a b0x - thank god for that default unix CRYPTDEFAULT!!!! ; this is what happens when ur work takes away root pirv on a SunOS box :-/ global...

linux/x86 - connect-back port UDP/54321 live packet capture 151 bytes

linux/x86 connect-back port UDP/54321 live packet capture 151 bytes. Shellcode exploit for linx86 platform / linux/x86 connect-back port UDP/54321 & dup2 & fork & execve /usr/bin/tcpdump -iany -w- "port ! 54321" 151 bytes by XenoMuta | |/ / / |/ / / / | / / / / /|/ / / / / / / / / / / / / // / /...

linux/x86 setuid(0) & execve(/bin/sh,0,0) shellcode 27 bytes

No description provided by source. ----------- C Source Code ----------- / Smallest GNU/Linux x86 setuid0 && execve"/bin/sh",0,0 Shellcode without NULLs Coded by Chema Garcia aka sch3m4 + [email protected] + http://opensec.es Shellcode Size: 27 bytes Date: 13/11/2008 / include stdio.h const char...

linux/x86 setuid(0) & execve(/bin/sh 0 0) shellcode 28 bytes

No description provided by source. -------------------ASM---------------------- global start section .text start: ;setuid0 xor ebx,ebx lea eax,ebx+17h cdq int 80h ;execve"/bin/sh",0,0 xor ecx,ecx push ecx push 0x68732f6e push 0x69622f2f lea eax,ecx+0Bh mov ebx,esp int 80h...

linux/x86 setuid(0) & execve(/bin/sh,0,0) shellcode 28 bytes

Exploit for linux/x86 platform in category shellcode ============================================================ linux/x86 setuid0 & execve/bin/sh,0,0 shellcode 28 bytes ============================================================ -------------------ASM---------------------- global start section...

linux/x86 setuid0 & execve/bin/sh,0,0 shellcode 28 bytes

linux/x86 setuid0 & execve/bin/sh,0,0 shellcode 28 bytes. Shellcode exploit for linx86 platform -------------------ASM---------------------- global start section .text start: ;setuid0 xor ebx,ebx lea eax,ebx+17h cdq int 80h ;execve"/bin/sh",0,0 xor ecx,ecx push ecx push 0x68732f6e push 0x69622f2f...

Count.cgi(wwwcount)远程缓冲区溢出漏洞

BugCVE: CVE-1999-0021 BUGTRAQ: 128 Count.cgi wwwcount是一个非常流行的Web站点跟踪统计CGI程序。一般它作为Web页面点击数统计。1997年10月，这个程序被发现了两个远程漏洞。第一个漏洞比较轻微，它能允许远程用户浏览到受限制的.GIF文件，可能泄漏.GIF文件里潜在的敏感数据。 第二个漏洞比较严重，count.cgi程序在处理QUERYSTRING环境变量的时候存在缓冲区溢出漏洞。远程攻击者可以发送一个超长的请求给程序就能进行溢出攻击，以Web用户的权限在系统执行任意命令。 2.3 Muhammad A. Muquit...

freebsd/x86 setreuid, execve(pfctl -d) 56 bytes

No description provided by source. CoDed bY suN8Hclf DaRk-CodeRs Group production, kid FreeBSD x86 setreuid0, 0 + execvepfctl -d 56 bytes The simples way to disable the FreeBSD's packet filter. We do not flush all rules pfctl -F all but only turn the firewall off. Assembly code:...