577 matches found
linux/x86 Shellcode Polymorphic - setuid(0) + chmod("/etc/shadow", 0666) Shellcode 61 Bytes
No description provided by source. / ============================================================================================= linux/x86 Shellcode Polymorphic - setuid0 + chmod/etc/shadow, 0666 Shellcode 61 Bytes...
linux/x86 if(read(fd,buf,512)<=2) _exit(1) else buf(); 29 bytes
No description provided by source. / h3ll-core.c by Charles Stevenson [email protected] I made this as a chunk you can paste in to make modular remote exploits. I use it as a first stage payload when I desire to follow up with a real large payload of goodness. This actually is a bit larger than...
PHP <= 4.4.6 / 5.2.1 ext/gd Already Freed Resources Usage Exploit
No description provided by source. ?php //////////////////////////////////////////////////////////////////////// // // // | || | | | | | | | || || \ // // | |/ || '|/ |/ -| ' \ / -/ |||| /| || / // // ||||,||| ,|||||||,| || |||||| // // // // Proof of concept code from the Hardened-PHP...
No-IP Dynamic Update Client (DUC) 2.1.9 - Local IP Address Stack Overflow
No description provided by source. !/usr/bin/env python Title: No-IP Dynamic Update Client DUC 2.1.9 local IPaddress stack overflow Author: Alberto Ortega @a0rtega [email protected] Date: May 11 2013 vulnerability discovered Background: No-IP is probably the most used Dynamic DNS provider...
Mandriva Linux Mandrake 6.0,Gnome Libs 1.0.8 espeaker Local Buffer Overflow
No description provided by source. source: http://www.securityfocus.com/bid/663/info A buffer overflow vulnerabilityin GNOME's shared libraries handling of the 'espeaker' command line argument may allow local users to attack setuid binaries linked against these libraries to obtain root access...
36 bytes chmod("/etc/shadow", 0666) shellcode
No description provided by source. include stdio.h include string.h / by Magnefikko 14.04.2010 [email protected] promhyl.oz.pl Subgroup: PRekambr Name: 36 bytes chmod/etc/shadow, 0666 shellcode Platform: Linux x86 chmod/etc/shadow, 0666; gcc -Wl,-z,execstack filename.c shellcode:...
linux/x86 dup2(0,0); dup2(0,1); dup2(0,2); 15 bytes
No description provided by source. / dup2loop-core.c by Charles Stevenson [email protected] I made this as a chunk you can paste in to make modular remote exploits. I usually combine this with an execve as the second stage of a read jmp %esp / char hellcode = / dup20,0; dup20,1; dup20,2; linux/x86 ...
Java Applet JMX Remote Code Execution
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'rex' class...
97 bytes Linx x86 bind shell port 64533
No description provided by source. include stdio.h include string.h / 1 1 0 I'm Magnefikko member from Inj3ct0r Team & Promhyl Studies Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 by Magnefikko 05.07.2010 [email protected] Promhyl Studies ::...
Linux/x86 pwrite("/etc/shadow", hash, 32, 8) Shellcode 83
No description provided by source. / | Title: Linux/x86 pwrite/etc/shadow, hash, 32, 8 Shellcode 83 Bytes | Description: replace root's password with hash of agix in MD5 | Type: Shellcode | Author: agix | Platform: Linux X86 / 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-...
Linux x86 - ip6tables -F - 47 bytes
No description provided by source. / Linux x86 - ip6tables -F - 47 bytes Jonathan Salwan submit ! shell-storm.org ! DataBase of Shellcodes and you can share your shellcodes : http://www.shell-storm.org/shellcode/ ! The Gnuser Project Gnu Users Manager = http://www.gnuser.org Disassembly of sectio...
psyBNC <= 2.3 - Denial of Service Exploit
No description provided by source. / psyBNC = 2.3 DoS Information System Advancement in Penetration ISAP Labs By Lunar Fault ElectronicSouls C May 19, 2002 Legal Notice: In no way is ElectronicSouls, ISAP, or the author responsible for the actions or usage of this program. The author retains all...
linux/x86 shutdown -h now Shellcode - 56 bytes
/ ; Title: shutdown -h now Shellcode - 56 bytes ; Date: 2014-06-27 ; Platform: linux/x86 ; Author: Osanda Malith Jayathissa @OsandaMalith Disassembly of section .text: 08048060 : 8048060: 31 c0 xor eax,eax 8048062: 31 d2 xor edx,edx 8048064: 50 push eax 8048065: 66 68 2d 68 pushw 0x682d 8048069: ...
Linux/x86 - setreuid() + execve(/usr/bin/python) Shellcode (54 bytes)
Linux/x86 - setreuid + execve/usr/bin/python Shellcode 54 bytes. Shellcode exploit for Linuxx86 platform Title: Shellcode Linux x86 54Bytes Run /usr/bin/python | setreuid,execve Date: 8/5/2014 Author: Ali Razmjoo Tested on: kali-linux-1.0.4-i386 3.7-trunk-686-pae 1 SMP Debian 3.7.2-0+kali8 i686...
Linux/x86 Multi-Egghunter shellcode
/ Title: Multi-Egghunter Author: Ryan Fenno @ryanfenno Date: 20 September 2013 Tested on: Linux/x86 Ubuntu 12.0.3 Description: This entry represents an extension of skape's sigaction2 egghunting method 1 to multiple eggs. It is similar in spirit to BJ 'SkyLined' Wever's omelet shellcode for Win32...
Nginx 1.3.91.4.0 (x86) - Brute Force
Nginx 1.3.91.4.0 x86 - Brute Force nginx 1.3.9/1.4.0 x86 brute force remote exploit copyright c 2013 kingcope ---------------------------- fix for internet exploitation, set MTU: ifconfig mtu 60000 up !!! WARNING !!! this exploit is unlikely to succeed when used against remote internet hosts. the...
Nginx 1.3.9/1.4.0 (x86) - Brute Force
nginx 1.3.9/1.4.0 x86 brute force remote exploit copyright c 2013 kingcope ---------------------------- fix for internet exploitation, set MTU: ifconfig mtu 60000 up !!! WARNING !!! this exploit is unlikely to succeed when used against remote internet hosts. the reason is that nginx uses a...
Linux/x86 - execve(/bin/sh) + Obfuscated Shellcode (30 bytes)
Linux/x86 - execve/bin/sh + Obfuscated Shellcode 30 bytes. Shellcode exploit for Linuxx86 platform / Title : Obfuscated execve /bin/sh 30 bytes Date : 3rd July 2013 Author : Russell Willis System : Linux/x86 SMP Debian 3.2.41-2 i686 To build: gcc -fno-stack-protector -z execstack -o shellcode...
Java Applet ProviderSkeleton Insecure Invoke Method
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'rex' class Metasploit3 false EXPLOITSTRING =...
Linux/x86 - Egghunter (0x5090) Shellcode (38 bytes)
Linux/x86 - Egghunter 0x5090 Shellcode 38 bytes. Shellcode exploit for Linuxx86 platform / Title : egghunter shellcode : hunter 30 bytes, marker 8 bytes, shellcode 28 bytes Date : 28 May 2013 Author : Russell Willis Testd on: Linux/x86 SMP Debian 3.2.41-2 i686 Comments: Using sigaction system cal...