198 bytes small macOS/x64 RickRolling shellcode.
629ad7b064b5d84ed3f906842421a4f2113 bytes small Linux/x64 anti-debug trick (INT3 trap) with execve("/bin/sh") shellcode that is NULL free.
ba4326c992e6781e3f2d205bf50de43839 bytes small Linux/x86 egghunter null-free shellcode. The egghunter dynamically searches memory for 2 instances of the egg. When the eggs are found, the egghunter passes execution control to the payload at the memory address of the eggs.
3cc1d7e8ad5391ad63e8cd52726be7e080 bytes small Linux/x86 reverse shell generator shellcode with customizable TCP port and IP address.
937201f1ff92ab4fabd623cad7224a07155 bytes small Linux/x86 shellcode that has a MMX stub decoder that dynamically decodes the payload in memory. The FPU GetPC technique is used to determine the offset from EIP dynamically in running memory. Once decoded. this shellcode adds the user 'ctl' with the password 'ctl' to the /etc/passwd file with the UID and GID of 0 (root). This shellcode uses legacy passwd functionality. Therefore the /etc/shadow file does not need to be accessed or modified.
b4cd1c73f54aff707a22b55b2944bd8d107 bytes small Linux/x86 shellcode that adds the user 'ctl' with the password 'ctl' to the /etc/passwd file with the UID and GID of 0 (root). This shellcode uses legacy passwd functionality. Therefore the /etc/shadow file does not need to be accessed or modified.
20be4a130a7c7deaf759ff5c0002996857 bytes small Linux/x64_86 /bin/bash shellcode. The stub decodes the ROL Encoded shellcode. When the stub has finished decoding the payload, execution control is passed to the payload.
8dfa373d1ce188f0f22dd71251acb232272 bytes small Linux/x86_64 null free password protected bindshell shellcode.
b2aad21499e34b3822eb8138541d15fd63 bytes small Linux/x64_86 dynamic egghunter shellcode that searches memory for 2 instances of the egg. When the eggs are found, the egghunter passes execution control to the payload at the memory address of the eggs. The payload is an execve(/bin/bash) shellcode.
a26b8168f0e16f88cec1b72030695f38644 bytes small Microsoft Windows x86 shellcode that disables the Windows firewall, adds the user MajinBuu with password TurnU2C@ndy!! to the system, adds the user MajinBuu to the local groups Administrators and Remote Desktop Users, and then enables the RDP Service.
a1d9a1235afb2e385b7e22e9cfe721eb33 bytes small Linux/x86 egghunter null-free shellcode.
f143c7106d8f990b5f7946ceed5264ed26 bytes small Linux/x86 reboot polymorphic shellcode.
0bb419e343fdc1c9caa66d7e15685c4f210 bytes small WinExec add-admin dynamic null-free shellcode.
ee26365fa6a3a82f0b58fe4fa067c2c6232 bytes small Dynamic MessageBoxA||W PEB and Import Table Method shellcode.
6c64349a2e58b477d56f2029714b815dThis Metasploit module exploits an issue in Google Chrome version 80.0.3987.87 (64 bit). The exploit corrupts the length of a float array (float_rel), which can then be used for out of bounds read and write on adjacent memory. The relative read and write is then used to modify a UInt64Array (uint64_aarw) which is used for read and writing from absolute memory. The exploit then uses WebAssembly in order to allocate a region of RWX memory, which is then replaced with the payload shellcode. The payload is executed within the sandboxed renderer process, so the browser must be run with the --no-sandbox option for the payload to work correctly.
2477d57f77b12b3980be7a18ed9dedf2195 bytes small Windows/x86 null-free WinExec Calc.exe shellcode.
3a4badf48892d3a5e330a3f28dc99060223 bytes small dynamic, null-free popcalc shellcode.
6f8a6802f04b26ff3724b05afb440805114 bytes small Linux/x86 bind shell generator shellcode.
9b7bafc7ff4aa9cacdbde1039bca23ca571 bytes small Microsoft Windows x86 dynamic bind shell and null-free shellcode.
61ae8434a5edb8b37775ebb965df9ff69 bytes small Microsoft Windows 7 screen locking shellcode.
342333e070d67e23f69ad3f94c730111114 bytes small Linux/x86 random bytes encoder and XOR/SUB/NOT/ROR execve(/bin/sh) shellcode.
6821b8b561a61bc5d34076f52fd398bd66 bytes small Linux/x86 Execve() alphanumeric shellcode.
dc65b7d56e2af0a082cb78cc43043b2053 bytes small Linux/x86_x64 sys_creat("ajit", 0755) shellcode.
0eed31c2bdd96a48256f7678f4398ab9117 bytes small Linux/x86 encoding of random bytes + XOR/SUB/NOT/ROR and also decodes ROL/NOT/ADD/XOR execve(/bin/sh) shellcode.
e07a6559c970bfcdf5f4081ecd9a49e7188 bytes small Lnux/x64 reverse TCP stager shellcode.
140e35142f4d23741799a818d695e97f
© 2020 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed