| -::DATE |
-::DESCRIPTION |
-::HITS |
|
|
|
|
-::AUTHOR |
| 2008-12-09 |
linux x86 shellcode obfuscator |
4605 |
R |
|
D
|
|
sm4x
|
| 2008-11-23 |
linux/x86 connect-back port UDP/54321 live packet capture 151 bytes |
2338 |
R |
|
D
|
|
XenoMuta
|
| 2008-11-23 |
linux/x86 append rsa key to /root/.ssh/authorized_keys2 295 bytes |
3636 |
R |
|
D
|
|
XenoMuta
|
| 2008-11-19 |
linux/x86 edit /etc/sudoers for full access 86 bytes |
2629 |
R |
|
D
|
|
Rick
|
| 2008-11-18 |
Ho' Detector (Promiscuous mode detector shellcode) 56 bytes |
1729 |
R |
|
D
|
|
XenoMuta
|
| 2008-11-13 |
linux/x86 setuid(0) & execve(/bin/sh,0,0) shellcode 28 bytes
|
1840 |
R |
|
D
|
|
sch3m4
|
| 2008-09-29 |
linux/x86 setresuid(0,0,0) /bin/sh shellcode 35 bytes |
7594 |
R |
|
D
|
|
sorrow
|
| 2008-09-17 |
linux/x86 iopl(3); asm(cli); while(1){} 12 bytes |
5615 |
R |
|
D
|
|
dun
|
| 2008-09-09 |
linux/x86 system-beep shellcode 45 bytes |
5410 |
R |
|
D
|
|
Thomas Rinsma
|
| 2008-08-25 |
linux/x86 connect back, download a file and execute 149 bytes |
2717 |
R |
|
D
|
|
militan
|
| 2008-08-18 |
linux/x86 connect back.send.exit /etc/shadow 155 bytes |
1824 |
R |
|
D
|
|
0in
|
| 2008-08-18 |
linux/x86 writes a php connectback shell to the fs 508 bytes |
1756 |
R |
|
D
|
|
GS2008
|
| 2008-08-18 |
linux/x86 rm -rf / attempts to block the process from being stopped |
1597 |
R |
|
D
|
|
onionring
|
| 2008-08-18 |
linux/x86 setuid(0) . setgid(0) . aslr_off 79 bytes |
2043 |
R |
|
D
|
|
LiquidWorm
|
| 2007-04-02 |
linux/x86 raw-socket ICMP/checksum shell 235 byte |
30796 |
R |
|
D
|
|
mu-b
|
| 2007-03-09 |
linux/x86 /sbin/iptables -F 40 bytes |
23664 |
R |
|
D
|
|
Kris Katterjohn
|
| 2007-03-09 |
linux/x86 kill all processes 11 bytes |
44034 |
R |
|
D
|
|
Kris Katterjohn
|
| 2006-11-20 |
linux/x86 execve read shellcode - 92 bytes |
13688 |
R |
|
D
|
|
0ut0fbound
|
| 2006-11-17 |
linux/x86 /sbin/ipchains -F 40 bytes |
10592 |
R |
|
D
|
|
Kris Katterjohn
|
| 2006-11-17 |
linux/x86 set system time to 0 and exit 12 bytes |
9344 |
R |
|
D
|
|
Kris Katterjohn
|
| 2006-11-17 |
linux/x86 add root user r00t with no password to
/etc/passwd 69 bytes |
27848 |
R |
|
D
|
|
Kris Katterjohn
|
| 2006-11-17 |
linux/x86 chmod 0666 /etc/shadow 36 bytes |
11829 |
R |
|
D
|
|
Kris Katterjohn
|
| 2006-11-17 |
linux/x86 forkbomb 7 bytes |
8451 |
R |
|
D
|
|
Kris Katterjohn
|
| 2006-11-17 |
linux/x86 execve(rm -rf /) shellcode 45 bytes |
7631 |
R |
|
D
|
|
Kris Katterjohn
|
| 2006-11-16 |
linux/x86 setuid(0) + execve(/bin/sh) 28 bytes |
6650 |
R |
|
D
|
|
Revenge
|
| 2006-11-16 |
linux/x86 execve(/bin/sh) 22 bytes |
6635 |
R |
|
D
|
|
Revenge
|
| 2006-10-22 |
linux/x86 HTTP/1.x GET, Downloads and execve() 111 bytes+ |
8070 |
R |
|
D
|
|
izik
|
| 2006-08-02 |
linux/x86 executes command after setreuid (9 + 40 bytes + cmd) |
11527 |
R |
|
D
|
|
bunker
|
| 2006-07-20 |
linux/x86 stdin re-open and /bin/sh exec shellcode |
10004 |
R |
|
D
|
|
Marco Ivaldi
|
| 2006-07-20 |
linux/x86 re-use of /bin/sh string in .rodata shellcode 16 bytes |
7997 |
R |
|
D
|
|
Marco Ivaldi
|
| 2006-07-20 |
linux/x86 setuid(0) and /bin/sh execve() shellcode 30 bytes |
7601 |
R |
|
D
|
|
Marco Ivaldi
|
| 2006-07-20 |
linux/x86 setuid/portbind shellcode 96 bytes |
6898 |
R |
|
D
|
|
Marco Ivaldi
|
| 2006-07-04 |
linux/x86 portbind (define your own port) 84 bytes |
7533 |
R |
|
D
|
|
oveRet
|
| 2006-05-14 |
linux/x86 execve() Diassembly Obfuscation Shellcode 32 bytes |
8523 |
R |
|
D
|
|
BaCkSpAcE
|
| 2006-05-08 |
linux/x86 SET_PORT() portbind 100 bytes |
8058 |
R |
|
D
|
|
Benjamin Orozco
|
| 2006-05-08 |
linux/x86 SET_IP() Connectback Shellcode 82 bytes |
8289 |
R |
|
D
|
|
Benjamin Orozco
|
| 2006-05-01 |
linux/x86 execve(/bin/sh) 24 bytes |
9569 |
R |
|
D
|
|
hophet
|
| 2006-04-18 |
linux/x86 xor-encoded Connect Back Shellcode 371 bytes |
6946 |
R |
|
D
|
|
xort
|
| 2006-04-17 |
linux/x86 execve(/bin/sh) + ZIP Header 28 bytes |
6504 |
R |
|
D
|
|
izik
|
| 2006-04-17 |
linux/x86 execve(/bin/sh) + RTF Header 30 bytes |
5247 |
R |
|
D
|
|
izik
|
| 2006-04-17 |
linux/x86 execve(/bin/sh) + RIFF Header 28 bytes |
5164 |
R |
|
D
|
|
izik
|
| 2006-04-17 |
linux/x86 execve(/bin/sh) + Bitmap Header 27 bytes |
5499 |
R |
|
D
|
|
izik
|
| 2006-04-16 |
linux/x86 SWAP restore shellcode 109 bytes |
5181 |
R |
|
D
|
|
Gotfault Security
|
| 2006-04-16 |
linux/x86 SWAP store shellcode 99 bytes |
5178 |
R |
|
D
|
|
Gotfault Security
|
| 2006-04-06 |
linux/x86 Password Authentication portbind Shellcode 166 bytes |
8481 |
R |
|
D
|
|
Gotfault Security
|
| 2006-04-06 |
linux/x86 portbind (port 64713) 86 bytes |
6140 |
R |
|
D
|
|
Gotfault Security
|
| 2006-04-03 |
linux/x86 execve("/bin/sh", ["/bin/sh", NULL]) 25 bytes |
6575 |
R |
|
D
|
|
Gotfault Security
|
| 2006-04-03 |
linux/x86 execve("/bin/sh", ["/bin/sh", NULL]) 23 bytes |
5717 |
R |
|
D
|
|
Gotfault Security
|
| 2006-04-03 |
linux/x86 setuid(0) + execve("/bin/sh", ["/bin/sh", NULL]) 31 bytes |
5684 |
R |
|
D
|
|
Gotfault Security
|
| 2006-04-03 |
linux/x86 setuid(0),setgid(0) execve(/bin/sh, [/bin/sh, NULL]) 37 bytes |
5476 |
R |
|
D
|
|
Gotfault Security
|
| 2006-04-03 |
linux/x86 setreuid(0,0) execve("/bin/sh", ["/bin/sh", NULL]) 33 bytes |
5143 |
R |
|
D
|
|
Gotfault Security
|
| 2006-03-12 |
linux/x86 HTTP/1.x GET, Downloads and JMP - 68 bytes+ |
7482 |
R |
|
D
|
|
izik
|
| 2006-02-07 |
linux/x86 TCP Proxy Shellcode 236 bytes |
9141 |
R |
|
D
|
|
phar
|
| 2006-01-26 |
linux/x86 execve /bin/sh anti-ids 40 bytes |
7409 |
R |
|
D
|
|
NicatiN
|
| 2006-01-25 |
linux/x86 execve /bin/sh xored for Intel x86 CPUID 41 bytes |
6591 |
R |
|
D
|
|
izik
|
| 2006-01-25 |
linux/x86 execve /bin/sh (encoded by +1) 39 bytes |
6246 |
R |
|
D
|
|
izik
|
| 2006-01-21 |
linux/x86 Adduser without Password to /etc/passwd 59 bytes |
10219 |
R |
|
D
|
|
izik
|
| 2006-01-21 |
linux/x86 anti-debug trick (INT 3h trap) + execve /bin/sh 39 bytes |
5842 |
R |
|
D
|
|
izik
|
| 2006-01-21 |
linux/x86 Bind /bin/sh to 31337/tcp 80 bytes |
6831 |
R |
|
D
|
|
izik
|
| 2006-01-21 |
linux/x86 Bind /bin/sh to 31337/tcp + fork() 98 bytes |
6067 |
R |
|
D
|
|
izik
|
| 2006-01-21 |
linux/x86 24/7 open cd-rom loop (follows /dev/cdrom symlink) 39 bytes |
5693 |
R |
|
D
|
|
izik
|
| 2006-01-21 |
linux/x86 eject cd-rom (follows /dev/cdrom symlink) + exit() 40 bytes |
5794 |
R |
|
D
|
|
izik
|
| 2006-01-21 |
linux/x86 eject/close cd-rom loop (follows /dev/cdrom symlink) 45 bytes |
5567 |
R |
|
D
|
|
izik
|
| 2006-01-21 |
linux/x86 chmod(/etc/shadow, 0666) + exit() 32 bytes |
6222 |
R |
|
D
|
|
izik
|
| 2006-01-21 |
linux/x86 connect-back shellcode 127.0.0.1:31337/tcp 74 bytes |
6322 |
R |
|
D
|
|
izik
|
| 2006-01-21 |
linux/x86 normal exit w/ random (so to speak) return value 5 bytes |
5265 |
R |
|
D
|
|
izik
|
| 2006-01-21 |
linux/x86 getppid() + execve(/proc/pid/exe) 51 bytes |
5158 |
R |
|
D
|
|
izik
|
| 2006-01-21 |
linux/x86 quick (yet conditional, eax != 0 and edx == 0) exit 4 bytes |
5385 |
R |
|
D
|
|
izik
|
| 2006-01-21 |
linux/x86 reboot() - 20 bytes |
7375 |
R |
|
D
|
|
izik
|
| 2006-01-21 |
linux/x86 setreuid(0, 0) + execve(/bin/sh) 31 bytes |
5570 |
R |
|
D
|
|
izik
|
| 2006-01-21 |
linux/x86 execve(/bin/sh) / PUSH - 23 bytes |
5494 |
R |
|
D
|
|
izik
|
| 2006-01-21 |
linux/x86 cat /dev/urandom > /dev/console, just for kicks - 63 bytes |
5721 |
R |
|
D
|
|
izik
|
| 2005-12-28 |
linux/x86 Connect Back shellcode 90 bytes |
8348 |
R |
|
D
|
|
xort
|
| 2005-12-28 |
linux/x86 socket-proxy shellcode 372 bytes |
6718 |
R |
|
D
|
|
xort
|
| 2005-11-09 |
linux/x86 dup2(0,0); dup2(0,1); dup2(0,2); 15 bytes |
6322 |
R |
|
D
|
|
Charles Stevenson
|
| 2005-11-09 |
linux/x86 if(read(fd,buf,512)<=2) _exit(1) else buf(); 29 bytes |
5842 |
R |
|
D
|
|
Charles Stevenson
|
| 2005-11-09 |
linux/x86 _exit(1); 7 bytes |
6291 |
R |
|
D
|
|
Charles Stevenson
|
| 2005-11-09 |
linux/x86 read(0,buf,2541); chmod(buf,4755); 23 bytes |
5752 |
R |
|
D
|
|
Charles Stevenson
|
| 2005-11-09 |
linux/x86 write(0,"Hello core!\n",12); (w/optional 7 byte exit) 36 bytes |
6509 |
R |
|
D
|
|
Charles Stevenson
|
| 2005-11-04 |
linux/x86 snoop /dev/dsp shellcode 172 bytes |
10119 |
R |
|
D
|
|
phar
|
| 2005-09-15 |
linux/x86 /bin/sh Standard Opcode Array Payload 21 Bytes |
8084 |
R |
|
D
|
|
c0ntex
|
| 2005-09-09 |
linux/x86 examples of long-term payloads hide-wait-change (.s) |
7108 |
R |
|
D
|
|
xort
|
| 2005-09-08 |
linux/x86 examples of long-term payloads hide-wait-change 187 bytes+ |
6550 |
R |
|
D
|
|
xort
|
| 2005-09-04 |
linux/x86 /bin/sh sysenter Opcode Array Payload 23 Bytes |
6139 |
R |
|
D
|
|
BaCkSpAcE
|
| 2005-08-25 |
linux/x86 /bin/sh sysenter Opcode Array Payload 27 Bytes |
6422 |
R |
|
D
|
|
amnesia
|
| 2005-08-19 |
linux/x86 /bin/sh sysenter Opcode Array Payload 45 bytes |
7272 |
R |
|
D
|
|
c0ntex
|
| 2005-07-11 |
linux/x86 chroot & standart 66 bytes |
7617 |
R |
|
D
|
|
Okti
|
| 2005-06-19 |
linux/x86 upload & exec 189 bytes |
9050 |
R |
|
D
|
|
cybertronic
|
| 2004-12-26 |
linux/x86 setreuid/execve 31 bytes |
7441 |
R |
|
D
|
|
oc192
|
| 2004-12-22 |
linux/x86 alpha-numeric shellcode 64 bytes |
7736 |
R |
|
D
|
|
xort
|
| 2004-12-22 |
linux/x86 alpha-numeric using IMUL Method shellcode 88 bytes |
7118 |
R |
|
D
|
|
xort
|
| 2004-12-22 |
linux/x86 Radically Self Modifying Code 70 bytes |
7282 |
R |
|
D
|
|
xort
|
| 2004-12-22 |
linux/x86 Magic Byte Self Modifying Code 76 bytes |
7373 |
R |
|
D
|
|
xort
|
| 2004-11-15 |
linux/x86 execve code 23 bytes |
6103 |
R |
|
D
|
|
marcetam
|
| 2004-11-15 |
linux/x86 execve("/bin/ash",0,0); 21 bytes |
5998 |
R |
|
D
|
|
zasta
|
| 2004-09-26 |
linux/x86 execve /bin/sh alphanumeric 392 bytes |
6128 |
R |
|
D
|
|
RaiSe
|
| 2004-09-26 |
linux/x86 execve /bin/sh IA32 0xff-less 45 bytes |
5350 |
R |
|
D
|
|
anathema
|
| 2004-09-26 |
linux/x86 symlink /bin/sh xoring 56 bytes |
6008 |
R |
|
D
|
|
dev0id
|
| 2004-09-26 |
linux/x86 portbind port 5074 toupper 226 bytes |
5511 |
R |
|
D
|
|
Tora
|
| 2004-09-26 |
linux/x86 add user t00r ENCRYPT 116 bytes |
6193 |
R |
|
D
|
|
Matias Sedalo
|
| 2004-09-26 |
linux/x86 chmod 666 shadow ENCRYPT 75 bytes |
6167 |
R |
|
D
|
|
Matias Sedalo
|
| 2004-09-26 |
linux/x86 symlink . /bin/sh 32 bytes |
5609 |
R |
|
D
|
|
dev0id
|
| 2004-09-26 |
linux/x86 kill snort 151 bytes |
5768 |
R |
|
D
|
|
nob0dy
|
| 2004-09-26 |
linux/x86 shared memory exec 50 bytes |
5301 |
R |
|
D
|
|
sloth
|
| 2004-09-26 |
linux/x86 iptables -F 45 bytes |
5892 |
R |
|
D
|
|
UnboundeD
|
| 2004-09-26 |
linux/x86 iptables -F 58 bytes |
6140 |
R |
|
D
|
|
dev0id
|
| 2004-09-26 |
linux/x86 Reverse telnet 134 bytes |
7044 |
R |
|
D
|
|
hts
|
| 2004-09-26 |
linux/x86 connect 120 bytes |
5800 |
R |
|
D
|
|
lamagra
|
| 2004-09-26 |
linux/x86 chmod 666 /etc/shadow 41 bytes |
6274 |
R |
|
D
|
|
Matias Sedalo
|
| 2004-09-26 |
linux/x86 cp /bin/sh /tmp/katy ; chmod 4555 katy 126 bytes |
6092 |
R |
|
D
|
|
RaiSe
|
| 2004-09-26 |
linux/x86 eject /dev/cdrom 64 bytes |
5685 |
R |
|
D
|
|
lamagra
|
| 2004-09-26 |
linux/x86 xterm -ut -display [IP]:0 132 bytes |
6060 |
R |
|
D
|
|
RaiSe
|
| 2004-09-26 |
linux/x86 ipchains -F 49 bytes |
5475 |
R |
|
D
|
|
Sp4rK
|
| 2004-09-26 |
linux/x86 chmod 666 /etc/shadow 82 bytes |
6492 |
R |
|
D
|
|
Matias Sedalo
|
| 2004-09-12 |
linux/x86 execve /bin/sh 29 bytes |
6393 |
R |
|
D
|
|
Matias Sedalo
|
| 2004-09-12 |
linux/x86 execve /bin/sh 24 bytes |
6406 |
R |
|
D
|
|
Matias Sedalo
|
| 2004-09-12 |
linux/x86 execve /bin/sh 38 bytes |
6145 |
R |
|
D
|
|
Matias Sedalo
|
| 2004-09-12 |
linux/x86 execve /bin/sh 30 bytes |
5788 |
R |
|
D
|
|
Matias Sedalo
|
| 2004-09-12 |
linux/x86 execve /bin/sh setreuid(12,12) 50 bytes |
6978 |
R |
|
D
|
|
n/a
|
| 2004-09-12 |
linux/x86 portbind port 5074 92 bytes |
5979 |
R |
|
D
|
|
Matias Sedalo
|
| 2004-09-12 |
linux/x86 portbind port 5074 + fork() 130 bytes |
6021 |
R |
|
D
|
|
Matias Sedalo
|
| 2004-09-12 |
linux/x86 add user t00r 82 bytes |
6819 |
R |
|
D
|
|
Matias Sedalo
|
| 2004-09-12 |
linux/x86 add user 104 bytes |
5847 |
R |
|
D
|
|
Matt Conover
|
| 2004-09-12 |
linux/x86 break chroot 34 bytes |
6445 |
R |
|
D
|
|
dev0id
|
| 2004-09-12 |
linux/x86 break chroot 46 bytes |
6362 |
R |
|
D
|
|
dev0id
|
| 2004-09-12 |
linux/x86 break chroot execve /bin/sh 80 bytes |
5707 |
R |
|
D
|
|
preedator
|
| 2004-09-12 |
linux/x86 execve /bin/sh encrypted 58 bytes |
5924 |
R |
|
D
|
|
Matias Sedalo
|
| 2004-09-12 |
linux/x86 execve /bin/sh xor encrypted 55 bytes |
7092 |
R |
|
D
|
|
n/a
|
| 2004-09-12 |
linux/x86 execve /bin/sh tolower() evasion 41 bytes |
6934 |
R |
|
D
|
|
n/a
|
| 2001-05-07 |
execve of /bin/sh after setreuid(0,0) |
6723 |
R |
|
D
|
|
Marco Ivaldi
|
| 2001-01-13 |
linux chroot()/execve() code |
6437 |
R |
|
D
|
|
preedator
|
| 2000-08-08 |
linux/x86 execve /bin/sh toupper() evasion 55 bytes |
7053 |
R |
|
D
|
|
n/a
|
| 2000-08-07 |
linux/x86 add user 70 bytes |
8751 |
R |
|
D
|
|
n/a
|
| 2000-08-07 |
linux/x86 break chroot setuid(0) + /bin/sh 132 bytes |
9026 |
R |
|
D
|
|
n/a
|