| -::DATE |
-::DESCRIPTION |
-::HITS |
|
|
|
|
-::AUTHOR |
| 2008-09-29 |
linux/x86 setresuid(0,0,0) /bin/sh shellcode 35 bytes |
1235 |
R |
|
D
|
|
sorrow
|
| 2008-09-17 |
linux/x86 iopl(3); asm(cli); while(1){} 12 bytes |
2784 |
R |
|
D
|
|
dun
|
| 2008-09-09 |
linux/x86 system-beep shellcode 45 bytes |
2546 |
R |
|
D
|
|
Thomas Rinsma
|
| 2008-08-25 |
linux/x86 connect back, download a file and execute 149 bytes |
1831 |
R |
|
D
|
|
militan
|
| 2008-08-18 |
linux/x86 connect back.send.exit /etc/shadow 155 bytes |
943 |
R |
|
D
|
|
0in
|
| 2008-08-18 |
linux/x86 writes a php connectback shell to the fs 508 bytes |
1050 |
R |
|
D
|
|
GS2008
|
| 2008-08-18 |
linux/x86 rm -rf / attempts to block the process from being stopped |
965 |
R |
|
D
|
|
onionring
|
| 2008-08-18 |
linux/x86 setuid(0) . setgid(0) . aslr_off 79 bytes |
1128 |
R |
|
D
|
|
LiquidWorm
|
| 2007-04-02 |
linux/x86 raw-socket ICMP/checksum shell 235 byte |
29704 |
R |
|
D
|
|
mu-b
|
| 2007-03-09 |
linux/x86 /sbin/iptables -F 40 bytes |
22957 |
R |
|
D
|
|
Kris Katterjohn
|
| 2007-03-09 |
linux/x86 kill all processes 11 bytes |
43046 |
R |
|
D
|
|
Kris Katterjohn
|
| 2006-11-20 |
linux/x86 execve read shellcode - 92 bytes |
13166 |
R |
|
D
|
|
0ut0fbound
|
| 2006-11-17 |
linux/x86 /sbin/ipchains -F 40 bytes |
10124 |
R |
|
D
|
|
Kris Katterjohn
|
| 2006-11-17 |
linux/x86 set system time to 0 and exit 12 bytes |
8836 |
R |
|
D
|
|
Kris Katterjohn
|
| 2006-11-17 |
linux/x86 add root user r00t with no password to
/etc/passwd 69 bytes |
26657 |
R |
|
D
|
|
Kris Katterjohn
|
| 2006-11-17 |
linux/x86 chmod 0666 /etc/shadow 36 bytes |
11172 |
R |
|
D
|
|
Kris Katterjohn
|
| 2006-11-17 |
linux/x86 forkbomb 7 bytes |
7774 |
R |
|
D
|
|
Kris Katterjohn
|
| 2006-11-17 |
linux/x86 execve(rm -rf /) shellcode 45 bytes |
7140 |
R |
|
D
|
|
Kris Katterjohn
|
| 2006-11-16 |
linux/x86 setuid(0) + execve(/bin/sh) 28 bytes |
6095 |
R |
|
D
|
|
Revenge
|
| 2006-11-16 |
linux/x86 execve(/bin/sh) 22 bytes |
5998 |
R |
|
D
|
|
Revenge
|
| 2006-10-22 |
linux/x86 HTTP/1.x GET, Downloads and execve() 111 bytes+ |
7511 |
R |
|
D
|
|
izik
|
| 2006-08-02 |
linux/x86 executes command after setreuid (9 + 40 bytes + cmd) |
10935 |
R |
|
D
|
|
bunker
|
| 2006-07-20 |
linux/x86 stdin re-open and /bin/sh exec shellcode |
9445 |
R |
|
D
|
|
Marco Ivaldi
|
| 2006-07-20 |
linux/x86 re-use of /bin/sh string in .rodata shellcode 16 bytes |
7490 |
R |
|
D
|
|
Marco Ivaldi
|
| 2006-07-20 |
linux/x86 setuid(0) and /bin/sh execve() shellcode 30 bytes |
7006 |
R |
|
D
|
|
Marco Ivaldi
|
| 2006-07-20 |
linux/x86 setuid/portbind shellcode 96 bytes |
6332 |
R |
|
D
|
|
Marco Ivaldi
|
| 2006-07-04 |
linux/x86 portbind (define your own port) 84 bytes |
6981 |
R |
|
D
|
|
oveRet
|
| 2006-05-14 |
linux/x86 execve() Diassembly Obfuscation Shellcode 32 bytes |
8070 |
R |
|
D
|
|
BaCkSpAcE
|
| 2006-05-08 |
linux/x86 SET_PORT() portbind 100 bytes |
7520 |
R |
|
D
|
|
Benjamin Orozco
|
| 2006-05-08 |
linux/x86 SET_IP() Connectback Shellcode 82 bytes |
7672 |
R |
|
D
|
|
Benjamin Orozco
|
| 2006-05-01 |
linux/x86 execve(/bin/sh) 24 bytes |
9025 |
R |
|
D
|
|
hophet
|
| 2006-04-18 |
linux/x86 xor-encoded Connect Back Shellcode 371 bytes |
6416 |
R |
|
D
|
|
xort
|
| 2006-04-17 |
linux/x86 execve(/bin/sh) + ZIP Header 28 bytes |
5998 |
R |
|
D
|
|
izik
|
| 2006-04-17 |
linux/x86 execve(/bin/sh) + RTF Header 30 bytes |
4802 |
R |
|
D
|
|
izik
|
| 2006-04-17 |
linux/x86 execve(/bin/sh) + RIFF Header 28 bytes |
4719 |
R |
|
D
|
|
izik
|
| 2006-04-17 |
linux/x86 execve(/bin/sh) + Bitmap Header 27 bytes |
5076 |
R |
|
D
|
|
izik
|
| 2006-04-16 |
linux/x86 SWAP restore shellcode 109 bytes |
4746 |
R |
|
D
|
|
Gotfault Security
|
| 2006-04-16 |
linux/x86 SWAP store shellcode 99 bytes |
4728 |
R |
|
D
|
|
Gotfault Security
|
| 2006-04-06 |
linux/x86 Password Authentication portbind Shellcode 166 bytes |
8000 |
R |
|
D
|
|
Gotfault Security
|
| 2006-04-06 |
linux/x86 portbind (port 64713) 86 bytes |
5652 |
R |
|
D
|
|
Gotfault Security
|
| 2006-04-03 |
linux/x86 execve("/bin/sh", ["/bin/sh", NULL]) 25 bytes |
6123 |
R |
|
D
|
|
Gotfault Security
|
| 2006-04-03 |
linux/x86 execve("/bin/sh", ["/bin/sh", NULL]) 23 bytes |
5270 |
R |
|
D
|
|
Gotfault Security
|
| 2006-04-03 |
linux/x86 setuid(0) + execve("/bin/sh", ["/bin/sh", NULL]) 31 bytes |
5246 |
R |
|
D
|
|
Gotfault Security
|
| 2006-04-03 |
linux/x86 setuid(0),setgid(0) execve(/bin/sh, [/bin/sh, NULL]) 37 bytes |
5042 |
R |
|
D
|
|
Gotfault Security
|
| 2006-04-03 |
linux/x86 setreuid(0,0) execve("/bin/sh", ["/bin/sh", NULL]) 33 bytes |
4732 |
R |
|
D
|
|
Gotfault Security
|
| 2006-03-12 |
linux/x86 HTTP/1.x GET, Downloads and JMP - 68 bytes+ |
7007 |
R |
|
D
|
|
izik
|
| 2006-02-07 |
linux/x86 TCP Proxy Shellcode 236 bytes |
8645 |
R |
|
D
|
|
phar
|
| 2006-01-26 |
linux/x86 execve /bin/sh anti-ids 40 bytes |
6965 |
R |
|
D
|
|
NicatiN
|
| 2006-01-25 |
linux/x86 execve /bin/sh xored for Intel x86 CPUID 41 bytes |
6142 |
R |
|
D
|
|
izik
|
| 2006-01-25 |
linux/x86 execve /bin/sh (encoded by +1) 39 bytes |
5810 |
R |
|
D
|
|
izik
|
| 2006-01-21 |
linux/x86 Adduser without Password to /etc/passwd 59 bytes |
9618 |
R |
|
D
|
|
izik
|
| 2006-01-21 |
linux/x86 anti-debug trick (INT 3h trap) + execve /bin/sh 39 bytes |
5357 |
R |
|
D
|
|
izik
|
| 2006-01-21 |
linux/x86 Bind /bin/sh to 31337/tcp 80 bytes |
6360 |
R |
|
D
|
|
izik
|
| 2006-01-21 |
linux/x86 Bind /bin/sh to 31337/tcp + fork() 98 bytes |
5596 |
R |
|
D
|
|
izik
|
| 2006-01-21 |
linux/x86 24/7 open cd-rom loop (follows /dev/cdrom symlink) 39 bytes |
5264 |
R |
|
D
|
|
izik
|
| 2006-01-21 |
linux/x86 eject cd-rom (follows /dev/cdrom symlink) + exit() 40 bytes |
5329 |
R |
|
D
|
|
izik
|
| 2006-01-21 |
linux/x86 eject/close cd-rom loop (follows /dev/cdrom symlink) 45 bytes |
5140 |
R |
|
D
|
|
izik
|
| 2006-01-21 |
linux/x86 chmod(/etc/shadow, 0666) + exit() 32 bytes |
5735 |
R |
|
D
|
|
izik
|
| 2006-01-21 |
linux/x86 connect-back shellcode 127.0.0.1:31337/tcp 74 bytes |
5817 |
R |
|
D
|
|
izik
|
| 2006-01-21 |
linux/x86 normal exit w/ random (so to speak) return value 5 bytes |
4851 |
R |
|
D
|
|
izik
|
| 2006-01-21 |
linux/x86 getppid() + execve(/proc/pid/exe) 51 bytes |
4743 |
R |
|
D
|
|
izik
|
| 2006-01-21 |
linux/x86 quick (yet conditional, eax != 0 and edx == 0) exit 4 bytes |
4942 |
R |
|
D
|
|
izik
|
| 2006-01-21 |
linux/x86 reboot() - 20 bytes |
6854 |
R |
|
D
|
|
izik
|
| 2006-01-21 |
linux/x86 setreuid(0, 0) + execve(/bin/sh) 31 bytes |
5148 |
R |
|
D
|
|
izik
|
| 2006-01-21 |
linux/x86 execve(/bin/sh) / PUSH - 23 bytes |
5058 |
R |
|
D
|
|
izik
|
| 2006-01-21 |
linux/x86 cat /dev/urandom > /dev/console, just for kicks - 63 bytes |
5243 |
R |
|
D
|
|
izik
|
| 2005-12-28 |
linux/x86 Connect Back shellcode 90 bytes |
7793 |
R |
|
D
|
|
xort
|
| 2005-12-28 |
linux/x86 socket-proxy shellcode 372 bytes |
6163 |
R |
|
D
|
|
xort
|
| 2005-11-09 |
linux/x86 dup2(0,0); dup2(0,1); dup2(0,2); 15 bytes |
5863 |
R |
|
D
|
|
Charles Stevenson
|
| 2005-11-09 |
linux/x86 if(read(fd,buf,512)<=2) _exit(1) else buf(); 29 bytes |
5399 |
R |
|
D
|
|
Charles Stevenson
|
| 2005-11-09 |
linux/x86 _exit(1); 7 bytes |
5845 |
R |
|
D
|
|
Charles Stevenson
|
| 2005-11-09 |
linux/x86 read(0,buf,2541); chmod(buf,4755); 23 bytes |
5315 |
R |
|
D
|
|
Charles Stevenson
|
| 2005-11-09 |
linux/x86 write(0,"Hello core!\n",12); (w/optional 7 byte exit) 36 bytes |
6013 |
R |
|
D
|
|
Charles Stevenson
|
| 2005-11-04 |
linux/x86 snoop /dev/dsp shellcode 172 bytes |
9625 |
R |
|
D
|
|
phar
|
| 2005-09-15 |
linux/x86 /bin/sh Standard Opcode Array Payload 21 Bytes |
7617 |
R |
|
D
|
|
c0ntex
|
| 2005-09-09 |
linux/x86 examples of long-term payloads hide-wait-change (.s) |
6636 |
R |
|
D
|
|
xort
|
| 2005-09-08 |
linux/x86 examples of long-term payloads hide-wait-change 187 bytes+ |
6089 |
R |
|
D
|
|
xort
|
| 2005-09-04 |
linux/x86 /bin/sh sysenter Opcode Array Payload 23 Bytes |
5727 |
R |
|
D
|
|
BaCkSpAcE
|
| 2005-08-25 |
linux/x86 /bin/sh sysenter Opcode Array Payload 27 Bytes |
5871 |
R |
|
D
|
|
amnesia
|
| 2005-08-19 |
linux/x86 /bin/sh sysenter Opcode Array Payload 45 bytes |
6772 |
R |
|
D
|
|
c0ntex
|
| 2005-07-11 |
linux/x86 chroot & standart 66 bytes |
7163 |
R |
|
D
|
|
Okti
|
| 2005-06-19 |
linux/x86 upload & exec 189 bytes |
8534 |
R |
|
D
|
|
cybertronic
|
| 2004-12-26 |
linux/x86 setreuid/execve 31 bytes |
7030 |
R |
|
D
|
|
oc192
|
| 2004-12-22 |
linux/x86 alpha-numeric shellcode 64 bytes |
7250 |
R |
|
D
|
|
xort
|
| 2004-12-22 |
linux/x86 alpha-numeric using IMUL Method shellcode 88 bytes |
6640 |
R |
|
D
|
|
xort
|
| 2004-12-22 |
linux/x86 Radically Self Modifying Code 70 bytes |
6797 |
R |
|
D
|
|
xort
|
| 2004-12-22 |
linux/x86 Magic Byte Self Modifying Code 76 bytes |
6878 |
R |
|
D
|
|
xort
|
| 2004-11-15 |
linux/x86 execve code 23 bytes |
5598 |
R |
|
D
|
|
marcetam
|
| 2004-11-15 |
linux/x86 execve("/bin/ash",0,0); 21 bytes |
5533 |
R |
|
D
|
|
zasta
|
| 2004-09-26 |
linux/x86 execve /bin/sh alphanumeric 392 bytes |
5699 |
R |
|
D
|
|
RaiSe
|
| 2004-09-26 |
linux/x86 execve /bin/sh IA32 0xff-less 45 bytes |
4955 |
R |
|
D
|
|
anathema
|
| 2004-09-26 |
linux/x86 symlink /bin/sh xoring 56 bytes |
5563 |
R |
|
D
|
|
dev0id
|
| 2004-09-26 |
linux/x86 portbind port 5074 toupper 226 bytes |
5112 |
R |
|
D
|
|
Tora
|
| 2004-09-26 |
linux/x86 add user t00r ENCRYPT 116 bytes |
5767 |
R |
|
D
|
|
Matias Sedalo
|
| 2004-09-26 |
linux/x86 chmod 666 shadow ENCRYPT 75 bytes |
5732 |
R |
|
D
|
|
Matias Sedalo
|
| 2004-09-26 |
linux/x86 symlink . /bin/sh 32 bytes |
5164 |
R |
|
D
|
|
dev0id
|
| 2004-09-26 |
linux/x86 kill snort 151 bytes |
5349 |
R |
|
D
|
|
nob0dy
|
| 2004-09-26 |
linux/x86 shared memory exec 50 bytes |
4910 |
R |
|
D
|
|
sloth
|
| 2004-09-26 |
linux/x86 iptables -F 45 bytes |
5497 |
R |
|
D
|
|
UnboundeD
|
| 2004-09-26 |
linux/x86 iptables -F 58 bytes |
5699 |
R |
|
D
|
|
dev0id
|
| 2004-09-26 |
linux/x86 Reverse telnet 134 bytes |
6516 |
R |
|
D
|
|
hts
|
| 2004-09-26 |
linux/x86 connect 120 bytes |
5413 |
R |
|
D
|
|
lamagra
|
| 2004-09-26 |
linux/x86 chmod 666 /etc/shadow 41 bytes |
5830 |
R |
|
D
|
|
Matias Sedalo
|
| 2004-09-26 |
linux/x86 cp /bin/sh /tmp/katy ; chmod 4555 katy 126 bytes |
5664 |
R |
|
D
|
|
RaiSe
|
| 2004-09-26 |
linux/x86 eject /dev/cdrom 64 bytes |
5294 |
R |
|
D
|
|
lamagra
|
| 2004-09-26 |
linux/x86 xterm -ut -display [IP]:0 132 bytes |
5660 |
R |
|
D
|
|
RaiSe
|
| 2004-09-26 |
linux/x86 ipchains -F 49 bytes |
5070 |
R |
|
D
|
|
Sp4rK
|
| 2004-09-26 |
linux/x86 chmod 666 /etc/shadow 82 bytes |
6044 |
R |
|
D
|
|
Matias Sedalo
|
| 2004-09-12 |
linux/x86 execve /bin/sh 29 bytes |
5939 |
R |
|
D
|
|
Matias Sedalo
|
| 2004-09-12 |
linux/x86 execve /bin/sh 24 bytes |
5929 |
R |
|
D
|
|
Matias Sedalo
|
| 2004-09-12 |
linux/x86 execve /bin/sh 38 bytes |
5702 |
R |
|
D
|
|
Matias Sedalo
|
| 2004-09-12 |
linux/x86 execve /bin/sh 30 bytes |
5365 |
R |
|
D
|
|
Matias Sedalo
|
| 2004-09-12 |
linux/x86 execve /bin/sh setreuid(12,12) 50 bytes |
6468 |
R |
|
D
|
|
n/a
|
| 2004-09-12 |
linux/x86 portbind port 5074 92 bytes |
5550 |
R |
|
D
|
|
Matias Sedalo
|
| 2004-09-12 |
linux/x86 portbind port 5074 + fork() 130 bytes |
5590 |
R |
|
D
|
|
Matias Sedalo
|
| 2004-09-12 |
linux/x86 add user t00r 82 bytes |
6363 |
R |
|
D
|
|
Matias Sedalo
|
| 2004-09-12 |
linux/x86 add user 104 bytes |
5432 |
R |
|
D
|
|
Matt Conover
|
| 2004-09-12 |
linux/x86 break chroot 34 bytes |
5972 |
R |
|
D
|
|
dev0id
|
| 2004-09-12 |
linux/x86 break chroot 46 bytes |
5868 |
R |
|
D
|
|
dev0id
|
| 2004-09-12 |
linux/x86 break chroot execve /bin/sh 80 bytes |
5244 |
R |
|
D
|
|
preedator
|
| 2004-09-12 |
linux/x86 execve /bin/sh encrypted 58 bytes |
5507 |
R |
|
D
|
|
Matias Sedalo
|
| 2004-09-12 |
linux/x86 execve /bin/sh xor encrypted 55 bytes |
6581 |
R |
|
D
|
|
n/a
|
| 2004-09-12 |
linux/x86 execve /bin/sh tolower() evasion 41 bytes |
6420 |
R |
|
D
|
|
n/a
|
| 2001-05-07 |
execve of /bin/sh after setreuid(0,0) |
6210 |
R |
|
D
|
|
Marco Ivaldi
|
| 2001-01-13 |
linux chroot()/execve() code |
5938 |
R |
|
D
|
|
preedator
|
| 2000-08-08 |
linux/x86 execve /bin/sh toupper() evasion 55 bytes |
6523 |
R |
|
D
|
|
n/a
|
| 2000-08-07 |
linux/x86 add user 70 bytes |
8147 |
R |
|
D
|
|
n/a
|
| 2000-08-07 |
linux/x86 break chroot setuid(0) + /bin/sh 132 bytes |
8448 |
R |
|
D
|
|
n/a
|