1397 matches found
Win2003 x64 - Token Stealing shellcode - 59 bytes
Win2003 x64 - Token Stealing shellcode - 59 bytes. Shellcode exploit for win64 platform ;token stealing shellcode Win 2003 x64 ;based on the widely available x86 version ;syntax for NASM ;Author: Csaba Fitzl, @theevilbit ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; ;important structures and offsets;...
linux/x86 /bin/sh ROL/ROR Encoded Shellcode
Custom shellcode encoder/decoder that switches between byte ROR and byte ROL 1. Update eRORoROL-encoder.py with your shellcode 2. Run eRORoROL-encoder.py 3. Copy output from eRORoROL-encoder.py and update eRORoROL-decoder.nasm 4. Run eRORoROLcompile.sh -----eRORoROL-encoder.py BEGIN CODE-----...
Linux x86 - /bin/sh ROL/ROR Encoded Shellcode
Linux x86 - /bin/sh ROL/ROR Encoded Shellcode. Shellcode exploit for linx86 platform Custom shellcode encoder/decoder that switches between byte ROR and byte ROL 1. Update eRORoROL-encoder.py with your shellcode 2. Run eRORoROL-encoder.py 3. Copy output from eRORoROL-encoder.py and update...
linux/x86 /bin/sh ROT7 Encoded Shellcode
Shellcode Title: ROT7 Date: 5 July 2015 Exploit Author: Artem Tsvetkov Software Link: https://github.com/adeptex/SLAE/tree/master/Assignment-6/rot7 Tested on: Kali GNU/Linux 1.1.0 Platform: x86 Linux This code was created as an exercise for the SecurityTube Linux Assembly Expert SLAE. The followi...
Linux x86 /bin/sh ROT7 Encoded Shellcode
Linux x86 /bin/sh ROT7 Encoded Shellcode. Shellcode exploit for linx86 platform Shellcode Title: ROT7 Date: 5 July 2015 Exploit Author: Artem Tsvetkov Software Link: https://github.com/adeptex/SLAE/tree/master/Assignment-6/rot7 Tested on: Kali GNU/Linux 1.1.0 Platform: x86 Linux This code was...
Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the nasm package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
linux x86 nc -lvve/bin/sh -p13377 shellcode
No description provided by source. linux x86 nc -lvve/bin/sh -p13377 shellcode This shellcode will listen on port 13377 using netcat and give /bin/sh to connecting attacker Author: Anonymous Site: http://chaossecurity.wordpress.com/ Here is code written in NASM ///////////////////////////// secti...
NASM 0.98.x Error Preprocessor Directive Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11991/info NASM is prone to a buffer overflow. This condition is exposed when the application attempts to assemble a source file that contains malformed '%error' preprocessor directive arguments. Since the source file may...
NASM 2.0 - 'ppscan()' Off-By-One Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/29656/info NASM is prone to an off-by-one buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Successfully exploiting this issue will allow attackers to...
Simple 8-bit Assembler Simulator
A simulator which provides a simplified assembler syntax based on NASM and is simulating a x86 like cpu. Press Help inside the simulator to see an overview about the supported instructions. Features 8-bit CPU 4 general purpose registers 256 bytes of memory Console output Simple 8-bit Assembler...
linux/x86-64 connect-back shell with netcat 109 bytes
Title : Shellcode linux/x86-64 connect-back shell with netcat Author : Gaussillusion Len : 109 byte In the file there is the shellcode in asm and the bytecode. Gaussillusion. ; Title: Shellcode linux/x86-64 connect back shell ; Author : Gaussillusion ; Len : 109 byte ; Language : Nasm ;syscall:...
linux/x86 - nc -lvve/bin/sh -p13377 - 62 bytes
linux x86 nc -lvve/bin/sh -p13377 shellcode This shellcode will listen on port 13377 using netcat and give /bin/sh to connecting attacker Author: Anonymous Site: http://chaossecurity.wordpress.com/ Here is code written in NASM ///////////////////////////// section .text global start start: xor...
Design/Logic Flaw
The emsyscall function in arch/x86/kvm/emulate.c in the KVM implementation in the Linux kernel before 3.2.14 does not properly handle the 0f05 aka syscall opcode, which allows guest OS users to cause a denial of service guest OS crash via a crafted application, as demonstrated by an NASM file...
CVE-2012-0045
CVE-2012-0045 relates to the Linux kernel KVM 32-bit syscall emulation. A flaw in arch/x86/kvm/emulate.c where the 0f05 (syscall) opcode is not handled correctly allows a user in a 32-bit guest to crash the guest OS (denial of service). Public references in the provided connected documents confir...
CVE-2012-0045
The emsyscall function in arch/x86/kvm/emulate.c in the KVM implementation in the Linux kernel before 3.2.14 does not properly handle the 0f05 aka syscall opcode, which allows guest OS users to cause a denial of service guest OS crash via a crafted application, as demonstrated by an NASM file...
Основы написания Win-шеллкода
В этой статье речь пойдет о написании простого шеллкода под Windows платформу. Статья является начальным этапом цикла статей, которые я, опираясь на материалы и труды зарубежных специалистов в данной области, планирую написать. Эта статья не насыщена всеобъемлющей информацией, однако её цель -...
MDVA-2009:065 : nasm
Nasm would crash under certain conditions. This update replaces the patch that introduced the crash. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This script was...
linux/x86-64 execve ("/sbin/iptables", ["/sbin/iptables", "-F"], NULL)
Exploit for linux/x86-64 platform in category shellcode ================================================================================= linux/x86-64 execve "/sbin/iptables", "/sbin/iptables", "-F", NULL - 49 bytes =================================================================================...
