Linux Shellcode

This section contains Linux payloads.

Payloads

Add User
Command Execution
Bind Shell
Bind Stager
Reverse Shell
Reverse Stager
Reverse UDP Shell
Find Recv Shell
Find Recv Stager
Find SrcPort Shell

linux_ia32_adduser

Linux (IA32)

This payload adds a user account on the target system. The size of this payload varies depending on the attributes of the user being created, such as the username.

linux_ia32_exec

Linux (IA32)

This payload executes a command on the target machine. The size of this payload varies based on the length of the command string.

linux_ia32_bind

Linux (IA32)

This payload listens on a TCP port and waits for a connection. Once the connection has been established it executes /bin/sh with standard I/O redirected to the client TCP connection.

linux_sparc_bind

Linux (SPARC)

This payload listens on a TCP port and waits for a connection. Once the connection has been established it executes /bin/sh with standard I/O redirected to the client TCP connection.

linux_ia32_bind_stg

Linux (IA32)

This payload listens on a TCP port and waits for a connection. Once the connection has been established it reads in a second stage payload and executes it. This is useful for scenarios where you have limited room for your payload.

linux_ia32_reverse

Linux (IA32)

This payload establishes a TCP connection to a given host on a given port and redirects standard I/O from /bin/sh to the established connection.

linux_sparc_reverse

Linux (SPARC)

This payload establishes a TCP connection to a given host on a given port and redirects standard I/O from /bin/sh to the established connection.

linux_ia32_reverse_stg

Linux (IA32)

This payload establishes a TCP connection to a given host on a given port. Once the connection is established a second stage payload is read in and executed. This is useful for scenarios where you have limited room for your initial payload.

linux_ia32_reverse_udp

Linux (IA32)

This payload establishes a UDP connection to a given host on a given port and redirects standard I/O from /bin/sh to the established connection. The shell is created interactively and with readline disabled.

linux_ia32_findrecv

Linux (IA32)

This payload searches all open file descriptors for a four byte tag that is sent by the attacker over the established exploit connection. Once the connection is located the payload executes /bin/sh and redirects standard I/O to the established exploit connection. This is useful for bypassing firewall and NAT restrictions by repurposing the already established exploit connection.

linux_ia32_findrecv_stg

Linux (IA32)

This payload searches all open file descriptors for a four byte tag that is sent by the attacker over the established exploit connection. Once the payload locates the tag it reads in a second stage payload and executes it. This is useful for bypassing firewall and NAT restrictions by repurposing the already established exploit connection.

linux_ia32_findsock

Linux (IA32)

This payload searches all open file descriptors by comparing their source port with the source port that is associated with the attacker's established connection. Once the connection is located the payload executes /bin/sh and redirects standard I/O to the established exploit connection. This is useful for bypassing firewall and NAT restrictions by repurposing the already established exploit connection.