Linux/x86-64 - Bind 4444/TCP Port Shellcode (103 bytes)

/--------------------------------------------------------------------------------------------------------------------- / Exploit Title: bindshell TCP Author: Scorpion Copyright: c 2016 iQube. http://iQube.io Release Date: January 1, 2016 Contact: https://www.facebook.com/sathish.royalmechanical...

Linux/x86-64 - Bind TCP Port Shellcode (103 bytes)

/--------------------------------------------------------------------------------------------------------------------- / Author: Scorpion Copyright: c 2016 iQube. http://iQube.io Release Date: January 1, 2016 Description: x64 Linux null-free TCP bind port shellcode Assembled Size: 103 bytes Teste...

PT-2015-3272 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.3.3 Description: The issue is related to the IPv6 stack in the Linux kernel, which mishandles options data. This can be exploited by local users to gain privileges or cause a denial of service, resulting in a...

Linux 3.17 noexec Bypass with Python ctypes and memfd_create Vulnerability

Exploit for linux platform in category local exploits Exploit Title: Linux = 3.17 noexec bypass with python ctypes and memfdcreate Date: 2015.10.14 Exploit Author: soyer Version: linux = 3.17 Tested on: Ubuntu 15.04 x8664 usage: $ ls -la execfile -rwxr-xr-x 1 soyer soyer 8600 Oct 14 15:04 execfil...

Oracle: Security Advisory (ELSA-2015-3015)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2015-3014)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Apport 2.19 (Ubuntu 15.04) - Local Privilege Escalation

Source: http://www.halfdog.net/Security/2015/ApportKernelCrashdumpFileAccessVulnerabilities/ Problem description: On Ubuntu Vivid Linux distribution apport is used for automated sending of client program crash dumps but also of kernel crash dumps. For kernel crashes, upstart or SysV init invokes...

OS X x64 /bin/sh Shellcode, NULL Byte Free, 34 bytes

OS X x64 /bin/sh Shellcode, NULL Byte Free, 34 bytes. Shellcode exploit for osx platform Author: Csaba Fitzl, @theevilbit Tested on OS X 10.10.5 OS X x64 /bin/sh shellcode, NULL byte free, 34 bytes Assembly version binsh-shellcode.asm ./nasm -f macho64 binsh-shellcode.asm ld -macosxversionmin...

CVE-2015-3291

arch/x86/entry/entry64.S in the Linux kernel before 4.1.6 on the x8664 platform does not properly determine when nested NMI processing is occurring, which allows local users to cause a denial of service skipped NMI by modifying the rsp register, issuing a syscall instruction, and triggering an NM...

CVE-2015-5757

libpthread in Apple iOS before 8.4.1 and OS X before 10.10.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via an app that uses a crafted syscall to interfere with locking...

Memory corruption

libpthread in Apple iOS before 8.4.1 and OS X before 10.10.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via an app that uses a crafted syscall to interfere with locking...

CVE-2015-5757

libpthread in Apple iOS before 8.4.1 and OS X before 10.10.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via an app that uses a crafted syscall to interfere with locking...

SOL16833 - Linux vulnerability CVE-2014-7826

kernel/trace/tracesyscalls.c in the Linux kernel through 3.17.2 does not properly handle private syscall numbers during use of the ftrace subsystem, which allows local users to gain privileges or cause a denial of service invalid pointer dereference via a crafted application. CVE-2014-7826...

linux/x86-64 execve(/bin/sh) 30 bytes

/ William Borskey 2015 Compile with: gcc -fno-stack-protector -z execstack Shellcode written in 64 bit Intel assembly using yasm. 1 ; int execveconst char filename, char const argv, char const envp; 2 BITS 64 3 4 section .text 5 global start 6 7 start: 8 mov rcx, 0x1168732f6e69622f ;move the...

linux/x86-64 execve/bin/sh 30 bytes

linux/x86-64 execve/bin/sh 30 bytes. Shellcode exploit for linx86-64 platform / William Borskey 2015 Compile with: gcc -fno-stack-protector -z execstack Shellcode written in 64 bit Intel assembly using yasm. 1 ; int execveconst char filename, char const argv, char const envp; 2 BITS 64 3 4 sectio...

Ubuntu 12.04 LTS : linux vulnerabilities (USN-2631-1)

Jan Beulich discovered the Xen virtual machine subsystem of the Linux kernel did not properly restrict access to PCI command registers. A local guest user could exploit this flaw to cause a denial of service host crash. CVE-2015-2150 A privilege escalation was discovered in the fork syscall via t...

SUSE SLES11 Security Update : kernel (SUSE-SU-2014:1138-1)

The SUSE Linux Enterprise Server 11 SP1 LTSS received a roll up update to fix several security and non-security issues. The following security issues have been fixed : - CVE-2013-1860: Heap-based buffer overflow in the wdmincallback function in drivers/usb/class/cdc-wdm.c in the Linux kernel befo...

BSD x64 Command Shell, Reverse TCP Inline

Connect back to attacker and spawn a command shell This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 81 include Msf::Payload::Single include Msf::Payload::Bsd include...

Ubuntu 14.04 LTS : Linux kernel (Utopic HWE) vulnerabilities (USN-2589-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-2589-1 advisory. Jan Beulich discovered the Xen virtual machine subsystem of the Linux kernel did not properly restrict access to PCI command registers. A local guest use...

Ubuntu: Security Advisory (USN-2589-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...