-::DATE |
-::DESCRIPTION |
-::HITS |
|
|
|
|
-::AUTHOR |
2009-09-15 |
linux/x86 Self-modifying shellcode for IDS evasion 64 bytes |
11346 |
R |
|
D
|
|
XenoMuta
|
2009-09-15 |
linux/x86 shellcode that forks a HTTP Server on port tcp/8800 166 bytes |
23554 |
R |
|
D
|
|
XenoMuta
|
2009-09-09 |
linux/x86 listens for shellcode on tcp/5555 and jumps to it |
10491 |
R |
|
D
|
|
XenoMuta
|
2009-08-26 |
linux/x86 Polymorphic shellcode disable Network Card 75 bytes |
10602 |
R |
|
D
|
|
Jonathan Salwan
|
2009-08-11 |
linux/x86 killall5 polymorphic shellcode 61 bytes |
9534 |
R |
|
D
|
|
Jonathan Salwan
|
2009-08-11 |
linux/x86 /bin/sh polymorphic shellcode 48 bytes |
12862 |
R |
|
D
|
|
Jonathan Salwan
|
2009-07-10 |
Linux/x86 Port Binding Shellcode (xor-encoded) 152 bytes |
8605 |
R |
|
D
|
|
Rick
|
2009-06-29 |
linux/x86 reboot() polymorphic shellcode 57 bytes |
7687 |
R |
|
D
|
|
Jonathan Salwan
|
2009-06-22 |
linux/x86 Shellcode Polymorphic chmod("/etc/shadow",666) 54 bytes |
7171 |
R |
|
D
|
|
Jonathan Salwan
|
2009-06-16 |
linux/x86 setreuid(geteuid(),geteuid()),execve("/bin/sh",0,0) 34 bytes |
4927 |
R |
|
D
|
|
blue9057
|
2009-06-08 |
linux/x86 bindport 8000 & execve iptables -F 176 bytes |
4008 |
R |
|
D
|
|
Jonathan Salwan
|
2009-06-08 |
linux/x86 bindport 8000 & add user with root access 225+ bytes |
6255 |
R |
|
D
|
|
Jonathan Salwan
|
2009-06-01 |
linux/x86 Bind ASM Code Linux 179 bytes. |
4681 |
R |
|
D
|
|
Jonathan Salwan
|
2009-05-14 |
linux/x86-64 setuid(0) + execve(/bin/sh) 49 bytes |
5114 |
R |
|
D
|
|
evil.xi4oyu
|
2009-04-30 |
Serial port shell binding, busybox Launching shellcode |
7063 |
R |
|
D
|
|
phar
|
2009-03-03 |
linux/x86 File unlinker 18 bytes + file path length |
6368 |
R |
|
D
|
|
darkjoker
|
2009-03-03 |
linux/x86 Perl script execution 99 bytes + script length |
10557 |
R |
|
D
|
|
darkjoker
|
2009-02-27 |
linux/x86 file reader 65 bytes + pathname |
6612 |
R |
|
D
|
|
certaindeath
|
2009-02-20 |
linux/x86 chmod("/etc/shadow",666) & exit(0) 30 bytes |
9106 |
R |
|
D
|
|
Jonathan Salwan
|
2009-02-04 |
linux/x86 killall5 shellcode 34 bytes |
7576 |
R |
|
D
|
|
Jonathan Salwan
|
2009-01-16 |
linux/x86 PUSH reboot() - 30 bytes |
11309 |
R |
|
D
|
|
Jonathan Salwan
|
2008-12-09 |
linux x86 shellcode obfuscator |
13940 |
R |
|
D
|
|
sm4x
|
2008-11-23 |
linux/x86 connect-back port UDP/54321 live packet capture 151 bytes |
7129 |
R |
|
D
|
|
XenoMuta
|
2008-11-23 |
linux/x86 append rsa key to /root/.ssh/authorized_keys2 295 bytes |
11213 |
R |
|
D
|
|
XenoMuta
|
2008-11-19 |
linux/x86 edit /etc/sudoers for full access 86 bytes |
7947 |
R |
|
D
|
|
Rick
|
2008-11-18 |
Ho' Detector (Promiscuous mode detector shellcode) 56 bytes |
5756 |
R |
|
D
|
|
XenoMuta
|
2008-11-13 |
linux/x86 setuid(0) & execve(/bin/sh,0,0) shellcode 28 bytes
|
6574 |
R |
|
D
|
|
sch3m4
|
2008-09-29 |
linux/x86 setresuid(0,0,0) /bin/sh shellcode 35 bytes |
11499 |
R |
|
D
|
|
sorrow
|
2008-09-17 |
linux/x86 iopl(3); asm(cli); while(1){} 12 bytes |
9355 |
R |
|
D
|
|
dun
|
2008-09-09 |
linux/x86 system-beep shellcode 45 bytes |
9463 |
R |
|
D
|
|
Thomas Rinsma
|
2008-08-25 |
linux/x86 connect back, download a file and execute 149 bytes |
6923 |
R |
|
D
|
|
militan
|
2008-08-19 |
linux/86 setreuid(geteuid, geteuid) + execve(/bin/sh) shellcode |
12344 |
R |
|
D
|
|
Reth
|
2008-08-18 |
linux/x86 connect back.send.exit /etc/shadow 155 bytes |
5875 |
R |
|
D
|
|
0in
|
2008-08-18 |
linux/x86 writes a php connectback shell to the fs 508 bytes |
5551 |
R |
|
D
|
|
GS2008
|
2008-08-18 |
linux/x86 rm -rf / attempts to block the process from being stopped |
5381 |
R |
|
D
|
|
onionring
|
2008-08-18 |
linux/x86 setuid(0) . setgid(0) . aslr_off 79 bytes |
6124 |
R |
|
D
|
|
LiquidWorm
|
2007-04-02 |
linux/x86 raw-socket ICMP/checksum shell 235 byte |
35852 |
R |
|
D
|
|
mu-b
|
2007-03-09 |
linux/x86 /sbin/iptables -F 40 bytes |
27543 |
R |
|
D
|
|
Kris Katterjohn
|
2007-03-09 |
linux/x86 kill all processes 11 bytes |
48801 |
R |
|
D
|
|
Kris Katterjohn
|
2006-11-20 |
linux/x86 execve read shellcode - 92 bytes |
17224 |
R |
|
D
|
|
0ut0fbound
|
2006-11-17 |
linux/x86 /sbin/ipchains -F 40 bytes |
13826 |
R |
|
D
|
|
Kris Katterjohn
|
2006-11-17 |
linux/x86 set system time to 0 and exit 12 bytes |
12617 |
R |
|
D
|
|
Kris Katterjohn
|
2006-11-17 |
linux/x86 add root user r00t with no password to
/etc/passwd 69 bytes |
33234 |
R |
|
D
|
|
Kris Katterjohn
|
2006-11-17 |
linux/x86 chmod 0666 /etc/shadow 36 bytes |
15609 |
R |
|
D
|
|
Kris Katterjohn
|
2006-11-17 |
linux/x86 forkbomb 7 bytes |
12527 |
R |
|
D
|
|
Kris Katterjohn
|
2006-11-17 |
linux/x86 execve(rm -rf /) shellcode 45 bytes |
11189 |
R |
|
D
|
|
Kris Katterjohn
|
2006-11-16 |
linux/x86 setuid(0) + execve(/bin/sh) 28 bytes |
10531 |
R |
|
D
|
|
Revenge
|
2006-11-16 |
linux/x86 execve(/bin/sh) 22 bytes |
11050 |
R |
|
D
|
|
Revenge
|
2006-10-22 |
linux/x86 HTTP/1.x GET, Downloads and execve() 111 bytes+ |
12024 |
R |
|
D
|
|
izik
|
2006-08-02 |
linux/x86 executes command after setreuid (9 + 40 bytes + cmd) |
15047 |
R |
|
D
|
|
bunker
|
2006-07-20 |
linux/x86 stdin re-open and /bin/sh exec shellcode |
14030 |
R |
|
D
|
|
Marco Ivaldi
|
2006-07-20 |
linux/x86 re-use of /bin/sh string in .rodata shellcode 16 bytes |
11817 |
R |
|
D
|
|
Marco Ivaldi
|
2006-07-20 |
linux/x86 setuid(0) and /bin/sh execve() shellcode 30 bytes |
11773 |
R |
|
D
|
|
Marco Ivaldi
|
2006-07-20 |
linux/x86 setuid/portbind shellcode 96 bytes |
11032 |
R |
|
D
|
|
Marco Ivaldi
|
2006-07-04 |
linux/x86 portbind (define your own port) 84 bytes |
11016 |
R |
|
D
|
|
oveRet
|
2006-05-14 |
linux/x86 execve() Diassembly Obfuscation Shellcode 32 bytes |
11808 |
R |
|
D
|
|
BaCkSpAcE
|
2006-05-08 |
linux/x86 SET_PORT() portbind 100 bytes |
11804 |
R |
|
D
|
|
Benjamin Orozco
|
2006-05-08 |
linux/x86 SET_IP() Connectback Shellcode 82 bytes |
12323 |
R |
|
D
|
|
Benjamin Orozco
|
2006-05-01 |
linux/x86 execve(/bin/sh) 24 bytes |
13490 |
R |
|
D
|
|
hophet
|
2006-04-18 |
linux/x86 xor-encoded Connect Back Shellcode 371 bytes |
10267 |
R |
|
D
|
|
xort
|
2006-04-17 |
linux/x86 execve(/bin/sh) + ZIP Header 28 bytes |
9953 |
R |
|
D
|
|
izik
|
2006-04-17 |
linux/x86 execve(/bin/sh) + RTF Header 30 bytes |
8306 |
R |
|
D
|
|
izik
|
2006-04-17 |
linux/x86 execve(/bin/sh) + RIFF Header 28 bytes |
8251 |
R |
|
D
|
|
izik
|
2006-04-17 |
linux/x86 execve(/bin/sh) + Bitmap Header 27 bytes |
8619 |
R |
|
D
|
|
izik
|
2006-04-16 |
linux/x86 SWAP restore shellcode 109 bytes |
8337 |
R |
|
D
|
|
Gotfault Security
|
2006-04-16 |
linux/x86 SWAP store shellcode 99 bytes |
8362 |
R |
|
D
|
|
Gotfault Security
|
2006-04-06 |
linux/x86 Password Authentication portbind Shellcode 166 bytes |
12017 |
R |
|
D
|
|
Gotfault Security
|
2006-04-06 |
linux/x86 portbind (port 64713) 86 bytes |
9445 |
R |
|
D
|
|
Gotfault Security
|
2006-04-03 |
linux/x86 execve("/bin/sh", ["/bin/sh", NULL]) 25 bytes |
9941 |
R |
|
D
|
|
Gotfault Security
|
2006-04-03 |
linux/x86 execve("/bin/sh", ["/bin/sh", NULL]) 23 bytes |
9089 |
R |
|
D
|
|
Gotfault Security
|
2006-04-03 |
linux/x86 setuid(0) + execve("/bin/sh", ["/bin/sh", NULL]) 31 bytes |
8888 |
R |
|
D
|
|
Gotfault Security
|
2006-04-03 |
linux/x86 setuid(0),setgid(0) execve(/bin/sh, [/bin/sh, NULL]) 37 bytes |
8562 |
R |
|
D
|
|
Gotfault Security
|
2006-04-03 |
linux/x86 setreuid(0,0) execve("/bin/sh", ["/bin/sh", NULL]) 33 bytes |
8194 |
R |
|
D
|
|
Gotfault Security
|
2006-03-12 |
linux/x86 HTTP/1.x GET, Downloads and JMP - 68 bytes+ |
10945 |
R |
|
D
|
|
izik
|
2006-02-07 |
linux/x86 TCP Proxy Shellcode 236 bytes |
12798 |
R |
|
D
|
|
phar
|
2006-01-26 |
linux/x86 execve /bin/sh anti-ids 40 bytes |
10481 |
R |
|
D
|
|
NicatiN
|
2006-01-25 |
linux/x86 execve /bin/sh xored for Intel x86 CPUID 41 bytes |
9795 |
R |
|
D
|
|
izik
|
2006-01-25 |
linux/x86 execve /bin/sh (encoded by +1) 39 bytes |
9353 |
R |
|
D
|
|
izik
|
2006-01-21 |
linux/x86 Adduser without Password to /etc/passwd 59 bytes |
14042 |
R |
|
D
|
|
izik
|
2006-01-21 |
linux/x86 anti-debug trick (INT 3h trap) + execve /bin/sh 39 bytes |
9247 |
R |
|
D
|
|
izik
|
2006-01-21 |
linux/x86 Bind /bin/sh to 31337/tcp 80 bytes |
10309 |
R |
|
D
|
|
izik
|
2006-01-21 |
linux/x86 Bind /bin/sh to 31337/tcp + fork() 98 bytes |
9291 |
R |
|
D
|
|
izik
|
2006-01-21 |
linux/x86 24/7 open cd-rom loop (follows /dev/cdrom symlink) 39 bytes |
8756 |
R |
|
D
|
|
izik
|
2006-01-21 |
linux/x86 eject cd-rom (follows /dev/cdrom symlink) + exit() 40 bytes |
9016 |
R |
|
D
|
|
izik
|
2006-01-21 |
linux/x86 eject/close cd-rom loop (follows /dev/cdrom symlink) 45 bytes |
8683 |
R |
|
D
|
|
izik
|
2006-01-21 |
linux/x86 chmod(/etc/shadow, 0666) + exit() 32 bytes |
9359 |
R |
|
D
|
|
izik
|
2006-01-21 |
linux/x86 connect-back shellcode 127.0.0.1:31337/tcp 74 bytes |
9549 |
R |
|
D
|
|
izik
|
2006-01-21 |
linux/x86 normal exit w/ random (so to speak) return value 5 bytes |
8264 |
R |
|
D
|
|
izik
|
2006-01-21 |
linux/x86 getppid() + execve(/proc/pid/exe) 51 bytes |
8222 |
R |
|
D
|
|
izik
|
2006-01-21 |
linux/x86 quick (yet conditional, eax != 0 and edx == 0) exit 4 bytes |
8422 |
R |
|
D
|
|
izik
|
2006-01-21 |
linux/x86 reboot() - 20 bytes |
10779 |
R |
|
D
|
|
izik
|
2006-01-21 |
linux/x86 setreuid(0, 0) + execve(/bin/sh) 31 bytes |
8778 |
R |
|
D
|
|
izik
|
2006-01-21 |
linux/x86 execve(/bin/sh) / PUSH - 23 bytes |
8688 |
R |
|
D
|
|
izik
|
2006-01-21 |
linux/x86 cat /dev/urandom > /dev/console, just for kicks - 63 bytes |
8960 |
R |
|
D
|
|
izik
|
2005-12-28 |
linux/x86 Connect Back shellcode 90 bytes |
11794 |
R |
|
D
|
|
xort
|
2005-12-28 |
linux/x86 socket-proxy shellcode 372 bytes |
9986 |
R |
|
D
|
|
xort
|
2005-11-09 |
linux/x86 dup2(0,0); dup2(0,1); dup2(0,2); 15 bytes |
9707 |
R |
|
D
|
|
Charles Stevenson
|
2005-11-09 |
linux/x86 if(read(fd,buf,512)<=2) _exit(1) else buf(); 29 bytes |
9039 |
R |
|
D
|
|
Charles Stevenson
|
2005-11-09 |
linux/x86 _exit(1); 7 bytes |
9497 |
R |
|
D
|
|
Charles Stevenson
|
2005-11-09 |
linux/x86 read(0,buf,2541); chmod(buf,4755); 23 bytes |
8958 |
R |
|
D
|
|
Charles Stevenson
|
2005-11-09 |
linux/x86 write(0,"Hello core!\n",12); (w/optional 7 byte exit) 36 bytes |
9830 |
R |
|
D
|
|
Charles Stevenson
|
2005-11-04 |
linux/x86 snoop /dev/dsp shellcode 172 bytes |
16229 |
R |
|
D
|
|
phar
|
2005-09-15 |
linux/x86 /bin/sh Standard Opcode Array Payload 21 Bytes |
11297 |
R |
|
D
|
|
c0ntex
|
2005-09-09 |
linux/x86 examples of long-term payloads hide-wait-change (.s) |
10310 |
R |
|
D
|
|
xort
|
2005-09-08 |
linux/x86 examples of long-term payloads hide-wait-change 187 bytes+ |
9586 |
R |
|
D
|
|
xort
|
2005-09-04 |
linux/x86 /bin/sh sysenter Opcode Array Payload 23 Bytes |
9227 |
R |
|
D
|
|
BaCkSpAcE
|
2005-08-25 |
linux/x86 /bin/sh sysenter Opcode Array Payload 27 Bytes |
10369 |
R |
|
D
|
|
amnesia
|
2005-08-19 |
linux/x86 /bin/sh sysenter Opcode Array Payload 45 bytes |
10466 |
R |
|
D
|
|
c0ntex
|
2005-07-11 |
linux/x86 chroot & standart 66 bytes |
10638 |
R |
|
D
|
|
Okti
|
2005-06-19 |
linux/x86 upload & exec 189 bytes |
12273 |
R |
|
D
|
|
cybertronic
|
2004-12-26 |
linux/x86 setreuid/execve 31 bytes |
10668 |
R |
|
D
|
|
oc192
|
2004-12-22 |
linux/x86 alpha-numeric shellcode 64 bytes |
11022 |
R |
|
D
|
|
xort
|
2004-12-22 |
linux/x86 alpha-numeric using IMUL Method shellcode 88 bytes |
10210 |
R |
|
D
|
|
xort
|
2004-12-22 |
linux/x86 Radically Self Modifying Code 70 bytes |
10561 |
R |
|
D
|
|
xort
|
2004-12-22 |
linux/x86 Magic Byte Self Modifying Code 76 bytes |
10499 |
R |
|
D
|
|
xort
|
2004-11-15 |
linux/x86 execve code 23 bytes |
9373 |
R |
|
D
|
|
marcetam
|
2004-11-15 |
linux/x86 execve("/bin/ash",0,0); 21 bytes |
9320 |
R |
|
D
|
|
zasta
|
2004-09-26 |
linux/x86 execve /bin/sh alphanumeric 392 bytes |
9380 |
R |
|
D
|
|
RaiSe
|
2004-09-26 |
linux/x86 execve /bin/sh IA32 0xff-less 45 bytes |
8235 |
R |
|
D
|
|
anathema
|
2004-09-26 |
linux/x86 symlink /bin/sh xoring 56 bytes |
9092 |
R |
|
D
|
|
dev0id
|
2004-09-26 |
linux/x86 portbind port 5074 toupper 226 bytes |
8526 |
R |
|
D
|
|
Tora
|
2004-09-26 |
linux/x86 add user t00r ENCRYPT 116 bytes |
9408 |
R |
|
D
|
|
Matias Sedalo
|
2004-09-26 |
linux/x86 chmod 666 shadow ENCRYPT 75 bytes |
9284 |
R |
|
D
|
|
Matias Sedalo
|
2004-09-26 |
linux/x86 symlink . /bin/sh 32 bytes |
8640 |
R |
|
D
|
|
dev0id
|
2004-09-26 |
linux/x86 kill snort 151 bytes |
8717 |
R |
|
D
|
|
nob0dy
|
2004-09-26 |
linux/x86 shared memory exec 50 bytes |
8229 |
R |
|
D
|
|
sloth
|
2004-09-26 |
linux/x86 iptables -F 45 bytes |
8969 |
R |
|
D
|
|
UnboundeD
|
2004-09-26 |
linux/x86 iptables -F 58 bytes |
9171 |
R |
|
D
|
|
dev0id
|
2004-09-26 |
linux/x86 Reverse telnet 134 bytes |
10811 |
R |
|
D
|
|
hts
|
2004-09-26 |
linux/x86 connect 120 bytes |
8838 |
R |
|
D
|
|
lamagra
|
2004-09-26 |
linux/x86 chmod 666 /etc/shadow 41 bytes |
9447 |
R |
|
D
|
|
Matias Sedalo
|
2004-09-26 |
linux/x86 cp /bin/sh /tmp/katy ; chmod 4555 katy 126 bytes |
9377 |
R |
|
D
|
|
RaiSe
|
2004-09-26 |
linux/x86 eject /dev/cdrom 64 bytes |
8707 |
R |
|
D
|
|
lamagra
|
2004-09-26 |
linux/x86 xterm -ut -display [IP]:0 132 bytes |
9189 |
R |
|
D
|
|
RaiSe
|
2004-09-26 |
linux/x86 ipchains -F 49 bytes |
8368 |
R |
|
D
|
|
Sp4rK
|
2004-09-26 |
linux/x86 chmod 666 /etc/shadow 82 bytes |
9643 |
R |
|
D
|
|
Matias Sedalo
|
2004-09-12 |
linux/x86 execve /bin/sh 29 bytes |
9949 |
R |
|
D
|
|
Matias Sedalo
|
2004-09-12 |
linux/x86 execve /bin/sh 24 bytes |
10059 |
R |
|
D
|
|
Matias Sedalo
|
2004-09-12 |
linux/x86 execve /bin/sh 38 bytes |
9279 |
R |
|
D
|
|
Matias Sedalo
|
2004-09-12 |
linux/x86 execve /bin/sh 30 bytes |
8964 |
R |
|
D
|
|
Matias Sedalo
|
2004-09-12 |
linux/x86 execve /bin/sh setreuid(12,12) 50 bytes |
10314 |
R |
|
D
|
|
n/a
|
2004-09-12 |
linux/x86 portbind port 5074 92 bytes |
9081 |
R |
|
D
|
|
Matias Sedalo
|
2004-09-12 |
linux/x86 portbind port 5074 + fork() 130 bytes |
9224 |
R |
|
D
|
|
Matias Sedalo
|
2004-09-12 |
linux/x86 add user t00r 82 bytes |
9920 |
R |
|
D
|
|
Matias Sedalo
|
2004-09-12 |
linux/x86 add user 104 bytes |
8962 |
R |
|
D
|
|
Matt Conover
|
2004-09-12 |
linux/x86 break chroot 34 bytes |
9526 |
R |
|
D
|
|
dev0id
|
2004-09-12 |
linux/x86 break chroot 46 bytes |
9389 |
R |
|
D
|
|
dev0id
|
2004-09-12 |
linux/x86 break chroot execve /bin/sh 80 bytes |
8892 |
R |
|
D
|
|
preedator
|
2004-09-12 |
linux/x86 execve /bin/sh encrypted 58 bytes |
8918 |
R |
|
D
|
|
Matias Sedalo
|
2004-09-12 |
linux/x86 execve /bin/sh xor encrypted 55 bytes |
10415 |
R |
|
D
|
|
n/a
|
2004-09-12 |
linux/x86 execve /bin/sh tolower() evasion 41 bytes |
10143 |
R |
|
D
|
|
n/a
|
2001-05-07 |
execve of /bin/sh after setreuid(0,0) |
10466 |
R |
|
D
|
|
Marco Ivaldi
|
2001-01-13 |
linux chroot()/execve() code |
9653 |
R |
|
D
|
|
preedator
|
2000-08-08 |
linux/x86 execve /bin/sh toupper() evasion 55 bytes |
10271 |
R |
|
D
|
|
n/a
|
2000-08-07 |
linux/x86 add user 70 bytes |
12544 |
R |
|
D
|
|
n/a
|
2000-08-07 |
linux/x86 break chroot setuid(0) + /bin/sh 132 bytes |
12667 |
R |
|
D
|
|
n/a
|