Date Description Author Platform Type Port
2013-09-23 Linux/x86 - Multi-Egghunter Ryan Fenno lin_x86 shellcode 0
2013-07-09 Solaris Recommended Patch Cluster 6/19 - Local Root on x86 Larry W. Cashdollar lin_x86 local 0
2013-05-17 Linux/x86 - Reverse TCP Bind Shellcode (92 bytes) Russell Willis lin_x86 shellcode 0
2012-12-24 Linux/x86 - Remote Port Forwarding Shellcode (87 bytes) Hamza Megahed lin_x86 shellcode 0
2012-08-02 Linux x86 - ASLR deactivation (83 bytes) Jean Pascal Pereira lin_x86 shellcode 0
2012-08-02 Linux x86 - chmod 666 /etc/passwd & /etc/shadow (57 bytes) Jean Pascal Pereira lin_x86 shellcode 0
2012-01-17 Linux/x86 Search For php/html Writable Files and Add Your Code rigan lin_x86 shellcode 0
2011-12-31 Linux/x86 Polymorphic ShellCode - setuid(0)+setgid(0)+add user 'iph' w pentesters.ir lin_x86 shellcode 0
2010-08-19 Linux x86 /bin/sh Null-Free Polymorphic Shellcode - 46 bytes Aodrulez lin_x86 shellcode 0
2010-07-11 Linux x86 netcat connect back port 8080 - 76 bytes blake lin_x86 shellcode 0
2010-06-29 Polymorphic /bin/sh x86 linux shellcode gunslinger_ lin_x86 shellcode 0
2010-06-17 Polymorphic Bindport 31337 with setreuid (0_0) linux/x86 gunslinger_ lin_x86 shellcode 0
2010-05-04 Linux x86 - execve(_/bin/bash___-p__NULL) (33 bytes) Jonathan Salwan lin_x86 shellcode 0
2010-04-22 setreud(getuid()_ getuid()) & execve(_/bin/sh_) Shellcode (34 bytes) Magnefikko lin_x86 shellcode 0
2010-04-18 chmod(_/etc/shadow__ 0777) Shellcode(33 Bytes) sm0k lin_x86 shellcode 0
2010-04-17 execve(_a->/bin/sh_) Local-only Shellcode (14 Bytes) Magnefikko lin_x86 shellcode 0
2010-03-04 Linux x86 - disabled modsecurity - 64 bytes sekfault lin_x86 shellcode 0
2010-02-27 Linux x86 - execve /bin/sh - 21 bytes ipv lin_x86 shellcode 0
2010-02-23 Linux x86 - /bin/sh 8 bytes JungHoon Shin lin_x86 shellcode 0
2010-02-09 Linux bin/cat /etc/passwd 43 bytes fb1h2s lin_x86 shellcode 0
2010-01-24 Linux x86 - polymorphic shellcode ip6tables -F - 71 bytes Jonathan Salwan lin_x86 shellcode 0
2010-01-24 Linux x86 - ip6tables -F - 47 bytes Jonathan Salwan lin_x86 shellcode 0
2010-01-16 linux/x86 chmod 666 /etc/shadow 27 bytes root@thegibson lin_x86 shellcode 0
2010-01-15 linux/x86 overwrite MBR on /dev/sda with _LOL!' 43 bytes root@thegibson lin_x86 shellcode 0
2010-01-14 linux/x86 - kill all processes (9 bytes) root@thegibson lin_x86 shellcode 0
2010-01-08 linux/x86 eject /dev/cdrom 42 bytes root@thegibson lin_x86 shellcode 0
2009-12-31 linux/x86 append _/etc/passwd_ & exit() 107 bytes sandman lin_x86 shellcode 0
2009-12-30 linux/x86 - break chroot 79 bytes root@thegibson lin_x86 shellcode 0
2009-12-30 linux/x86 fork bomb 6 bytes root@thegibson lin_x86 shellcode 0
2009-12-19 Linux - setreuid (0_0) & execve(/bin/rm /etc/shadow) mr_me lin_x86 shellcode 0
2009-12-04 Linux - setuid(0) & execve(_/sbin/poweroff -f_) ka0x lin_x86 shellcode 0
2009-12-04 Linux - setuid(0) and cat /etc/shadow ka0x lin_x86 shellcode 0
2009-12-04 Linux - chmod(/etc/shadow_ 0666) & exit() (33 bytes) ka0x lin_x86 shellcode 0
2009-12-04 Linux - linux/x86 execve() - 51bytes fl0 fl0w lin_x86 shellcode 0
2009-09-15 linux/x86 - Self-modifying shellcode for IDS evasion (64 bytes) XenoMuta lin_x86 shellcode 0
2009-09-15 linux/x86 - shellcode that forks a HTTP Server on port tcp/8800 (166 b XenoMuta lin_x86 shellcode 0
2009-09-09 linux/x86 listens for shellcode on tcp/5555 and jumps to it XenoMuta lin_x86 shellcode 0
2009-08-26 linux/x86 - Polymorphic shellcode disable Network Card (75 bytes) Jonathan Salwan lin_x86 shellcode 0
2009-08-11 linux/x86 - killall5 polymorphic shellcode (61 bytes) Jonathan Salwan lin_x86 shellcode 0
2009-08-11 linux/x86 - /bin/sh polymorphic shellcode (48 bytes) Jonathan Salwan lin_x86 shellcode 0
2009-07-10 Linux/x86 - Port Binding Shellcode (xor-encoded) (152 bytes) Rick lin_x86 shellcode 0
2009-06-29 linux/x86 - reboot() polymorphic shellcode (57 bytes) Jonathan Salwan lin_x86 shellcode 0
2009-06-22 linux/x86 Shellcode Polymorphic chmod(_/etc/shadow__666) (54 bytes) Jonathan Salwan lin_x86 shellcode 0
2009-06-16 linux/x86 setreuid(geteuid()_geteuid())_execve(_/bin/sh__0_0) (34 byte blue9057 lin_x86 shellcode 0
2009-06-08 linux/x86 - bindport 8000 & execve iptables -F (176 bytes) Jonathan Salwan lin_x86 shellcode 0
2009-06-08 linux/x86 - bindport 8000 & add user with root access (225+ bytes) Jonathan Salwan lin_x86 shellcode 0
2009-06-01 linux/x86 Bind ASM Code Linux 179 bytes Jonathan Salwan lin_x86 shellcode 0
2009-05-14 linux/x86-64 - setuid(0) + execve(/bin/sh) (49 bytes) evil.xi4oyu lin_x86 shellcode 0
2009-04-30 Serial port shell binding & busybox Launching shellcode phar lin_x86 shellcode 0
2009-03-03 linux/x86 File unlinker (18 bytes + file path length) darkjoker lin_x86 shellcode 0
2009-03-03 linux/x86 Perl script execution (99 bytes + script length) darkjoker lin_x86 shellcode 0
2009-02-27 linux/x86 file reader (65 bytes + pathname) certaindeath lin_x86 shellcode 0
2009-02-20 linux/x86 chmod(_/etc/shadow__666) & exit(0) (30 bytes) Jonathan Salwan lin_x86 shellcode 0
2009-02-04 linux/x86 - killall5 shellcode (34 bytes) Jonathan Salwan lin_x86 shellcode 0
2009-01-16 linux/x86 PUSH reboot() - 30 bytes Jonathan Salwan lin_x86 shellcode 0
2008-12-09 linux x86 shellcode obfuscator sm4x lin_x86 shellcode 0
2008-11-23 linux/x86 - connect-back port UDP/54321 live packet capture (151 bytes XenoMuta lin_x86 shellcode 0
2008-11-23 linux/x86 - append rsa key to /root/.ssh/authorized_keys2 (295 bytes) XenoMuta lin_x86 shellcode 0
2008-11-19 linux/x86 - edit /etc/sudoers for full access (86 bytes) Rick lin_x86 shellcode 0
2008-11-18 Ho' Detector (Promiscuous mode detector shellcode) (56 bytes) XenoMuta lin_x86 shellcode 0
2008-11-13 linux/x86 setuid(0) & execve(/bin/sh_0_0) shellcode (28 bytes) sch3m4 lin_x86 shellcode 0
2008-09-29 linux/x86 setresuid(0_0_0) /bin/sh shellcode (35 bytes) sorrow lin_x86 shellcode 0
2008-09-17 linux/x86 - iopl(3); asm(cli); while(1){} (12 bytes) dun lin_x86 shellcode 0
2008-09-09 linux/x86 - system-beep shellcode (45 bytes) Thomas Rinsma lin_x86 shellcode 0
2008-08-25 linux/x86 connect back_ download a file and execute (149 bytes) militan lin_x86 shellcode 0
2008-08-19 linux/86 setreuid(geteuid_ geteuid) + execve(/bin/sh) shellcode Reth lin_x86 shellcode 0
2008-08-18 linux/x86 - connect back.send.exit /etc/shadow (155 bytes) 0in lin_x86 shellcode 0
2008-08-18 linux/x86 - writes a php connectback shell to the fs (508 bytes) GS2008 lin_x86 shellcode 0
2008-08-18 linux/x86 - rm -rf / attempts to block the process from being stopped onionring lin_x86 shellcode 0
2008-08-18 linux/x86 - setuid(0) . setgid(0) . aslr_off (79 bytes) LiquidWorm lin_x86 shellcode 0
2007-04-02 linux/x86 - raw-socket ICMP/checksum shell (235 bytes) mu-b lin_x86 shellcode 0
2007-03-09 linux/x86 - /sbin/iptables -F (40 bytes) Kris Katterjohn lin_x86 shellcode 0
2007-03-09 linux/x86 - kill all processes (11 bytes) Kris Katterjohn lin_x86 shellcode 0
2006-11-20 linux/x86 execve read shellcode - 92 bytes 0ut0fbound lin_x86 shellcode 0
2006-11-17 linux/x86 - /sbin/ipchains -F (40 bytes) Kris Katterjohn lin_x86 shellcode 0
2006-11-17 linux/x86 - set system time to 0 and exit (12 bytes) Kris Katterjohn lin_x86 shellcode 0
2006-11-17 linux/x86 - add root user r00t with no password to /etc/passwd (69 byt Kris Katterjohn lin_x86 shellcode 0
2006-11-17 linux/x86 - chmod 0666 /etc/shadow (36 bytes) Kris Katterjohn lin_x86 shellcode 0
2006-11-17 linux/x86 - forkbomb (7 bytes) Kris Katterjohn lin_x86 shellcode 0
2006-11-17 linux/x86 - execve(rm -rf /) shellcode (45 bytes) Kris Katterjohn lin_x86 shellcode 0
2006-11-16 linux/x86 - setuid(0) + execve(/bin/sh) (28 bytes) Revenge lin_x86 shellcode 0
2006-11-16 linux/x86 - execve(/bin/sh) (22 bytes) Revenge lin_x86 shellcode 0
2006-10-22 linux/x86 HTTP/1.x GET_ Downloads and execve() (111 bytes+) izik lin_x86 shellcode 0
2006-08-02 linux/x86 executes command after setreuid (9 + 40 bytes + cmd) bunker lin_x86 shellcode 0
2006-07-20 linux/x86 stdin re-open and /bin/sh exec shellcode Marco Ivaldi lin_x86 shellcode 0
2006-07-20 linux/x86 - re-use of /bin/sh string in .rodata shellcode (16 bytes) Marco Ivaldi lin_x86 shellcode 0
2006-07-20 linux/x86 - setuid(0) and /bin/sh execve() shellcode (30 bytes) Marco Ivaldi lin_x86 shellcode 0
2006-07-20 linux/x86 - setuid/portbind shellcode (96 bytes) Marco Ivaldi lin_x86 shellcode 0
2006-07-04 linux/x86 - portbind (define your own port) (84 bytes) oveRet lin_x86 shellcode 0
2006-05-14 linux/x86 - execve() Diassembly Obfuscation Shellcode (32 bytes) BaCkSpAcE lin_x86 shellcode 0
2006-05-08 linux/x86 - SET_PORT() portbind (100 bytes) Benjamin Orozco lin_x86 shellcode 0
2006-05-08 linux/x86 - SET_IP() Connectback Shellcode (82 bytes) Benjamin Orozco lin_x86 shellcode 0
2006-05-01 linux/x86 - execve(/bin/sh) (24 bytes) hophet lin_x86 shellcode 0
2006-04-18 linux/x86 - xor-encoded Connect Back Shellcode (371 bytes) xort lin_x86 shellcode 0
2006-04-17 linux/x86 - execve(/bin/sh) + ZIP Header (28 bytes) izik lin_x86 shellcode 0
2006-04-17 linux/x86 - execve(/bin/sh) + RTF Header (30 bytes) izik lin_x86 shellcode 0
2006-04-17 linux/x86 - execve(/bin/sh) + RIFF Header (28 bytes) izik lin_x86 shellcode 0
2006-04-17 linux/x86 - execve(/bin/sh) + Bitmap Header (27 bytes) izik lin_x86 shellcode 0
2006-04-16 linux/x86 - SWAP restore shellcode (109 bytes) Gotfault Security lin_x86 shellcode 0
2006-04-16 linux/x86 - SWAP store shellcode (99 bytes) Gotfault Security lin_x86 shellcode 0
2006-04-06 linux/x86 Password Authentication portbind Shellcode (166 bytes) Gotfault Security lin_x86 shellcode 0
2006-04-06 linux/x86 - portbind (port 64713) (86 bytes) Gotfault Security lin_x86 shellcode 0
2006-04-03 linux/x86 - execve(_/bin/sh__ [_/bin/sh__ NULL]) (25 bytes) Gotfault Security lin_x86 shellcode 0
2006-04-03 linux/x86 - execve(_/bin/sh__ [_/bin/sh__ NULL]) (23 bytes) Gotfault Security lin_x86 shellcode 0
2006-04-03 linux/x86 - setuid(0) + execve(_/bin/sh__ [_/bin/sh__ NULL]) (31 bytes Gotfault Security lin_x86 shellcode 0
2006-04-03 linux/x86 - setuid(0)_setgid(0) execve(/bin/sh_ [/bin/sh_ NULL]) (37 b Gotfault Security lin_x86 shellcode 0
2006-04-03 linux/x86 - setreuid(0_0) execve(_/bin/sh__ [_/bin/sh__ NULL]) (33 byt Gotfault Security lin_x86 shellcode 0
2006-03-12 linux/x86 HTTP/1.x GET_ Downloads and JMP - (68 bytes+) izik lin_x86 shellcode 0
2006-02-07 linux/x86 - TCP Proxy Shellcode (236 bytes) phar lin_x86 shellcode 0
2006-01-26 linux/x86 -execve /bin/sh anti-ids (40 bytes) NicatiN lin_x86 shellcode 0
2006-01-25 linux/x86 - execve /bin/sh xored for Intel x86 CPUID (41 bytes) izik lin_x86 shellcode 0
2006-01-25 linux/x86 - execve /bin/sh (encoded by +1) (39 bytes) izik lin_x86 shellcode 0
2006-01-21 linux/x86 Adduser without Password to /etc/passwd 59 bytes izik lin_x86 shellcode 0
2006-01-21 linux/x86 anti-debug trick (INT 3h trap) + execve /bin/sh 39 bytes izik lin_x86 shellcode 0
2006-01-21 linux/x86 Bind /bin/sh to 31337/tcp 80 bytes izik lin_x86 shellcode 0
2006-01-21 linux/x86 Bind /bin/sh to 31337/tcp + fork() 98 bytes izik lin_x86 shellcode 0
2006-01-21 linux/x86 24/7 open cd-rom loop (follows /dev/cdrom symlink) 39 bytes izik lin_x86 shellcode 0
2006-01-21 linux/x86 eject cd-rom (follows /dev/cdrom symlink) + exit() 40 bytes izik lin_x86 shellcode 0
2006-01-21 linux/x86 eject/close cd-rom loop (follows /dev/cdrom symlink) 45 byte izik lin_x86 shellcode 0
2006-01-21 linux/x86 chmod(/etc/shadow_ 0666) + exit() (32 bytes) izik lin_x86 shellcode 0
2006-01-21 linux/x86 connect-back shellcode 127.0.0.1:31337/tcp 74 bytes izik lin_x86 shellcode 0
2006-01-21 linux/x86 normal exit with random (so to speak) return value 5 bytes izik lin_x86 shellcode 0
2006-01-21 linux/x86 getppid() + execve(/proc/pid/exe) 51 bytes izik lin_x86 shellcode 0
2006-01-21 linux/x86 quick (yet conditional_ eax != 0 and edx == 0) exit (4 bytes izik lin_x86 shellcode 0
2006-01-21 linux/x86 reboot() - 20 bytes izik lin_x86 shellcode 0
2006-01-21 linux/x86 setreuid(0_ 0) + execve(/bin/sh) (31 bytes) izik lin_x86 shellcode 0
2006-01-21 linux/x86 execve(/bin/sh) / PUSH - 23 bytes izik lin_x86 shellcode 0
2006-01-21 linux/x86 cat /dev/urandom > /dev/console (63 bytes) izik lin_x86 shellcode 0
2005-12-28 linux/x86 Connect Back shellcode 90 bytes xort lin_x86 shellcode 0
2005-12-28 linux/x86 socket-proxy shellcode 372 bytes xort lin_x86 shellcode 0
2005-11-09 linux/x86 dup2(0_0); dup2(0_1); dup2(0_2); (15 bytes) Charles Stevenson lin_x86 shellcode 0
2005-11-09 linux/x86 if(read(fd_buf_512)<=2) _exit(1) else buf(); (29 bytes) Charles Stevenson lin_x86 shellcode 0
2005-11-09 linux/x86 _exit(1); 7 bytes Charles Stevenson lin_x86 shellcode 0
2005-11-09 linux/x86 read(0_buf_2541); chmod(buf_4755); (23 bytes) Charles Stevenson lin_x86 shellcode 0
2005-11-09 linux/x86 write(0__Hello core!\n__12); (with optional 7 byte exit) (36 Charles Stevenson lin_x86 shellcode 0
2005-11-04 linux/x86 snoop /dev/dsp shellcode 172 bytes phar lin_x86 shellcode 0
2005-09-15 linux/x86 /bin/sh Standard Opcode Array Payload 21 Bytes c0ntex lin_x86 shellcode 0
2005-09-09 linux/x86 examples of long-term payloads hide-wait-change (.s) xort lin_x86 shellcode 0
2005-09-08 linux/x86 examples of long-term payloads hide-wait-change 187 bytes+ xort lin_x86 shellcode 0
2005-09-04 linux/x86 /bin/sh sysenter Opcode Array Payload 23 Bytes BaCkSpAcE lin_x86 shellcode 0
2005-08-25 linux/x86 /bin/sh sysenter Opcode Array Payload 27 Bytes amnesia lin_x86 shellcode 0
2005-08-19 linux/x86 /bin/sh sysenter Opcode Array Payload 45 bytes c0ntex lin_x86 shellcode 0
2005-07-11 linux/x86 - chroot & standart 66 bytes Okti lin_x86 shellcode 0
2005-06-19 linux/x86 upload & exec 189 bytes cybertronic lin_x86 shellcode 0
2004-12-26 linux/x86 setreuid/execve 31 bytes oc192 lin_x86 shellcode 0
2004-12-22 linux/x86 alpha-numeric shellcode 64 bytes xort lin_x86 shellcode 0
2004-12-22 linux/x86 alpha-numeric using IMUL Method shellcode 88 bytes xort lin_x86 shellcode 0
2004-12-22 linux/x86 Radically Self Modifying Code 70 bytes xort lin_x86 shellcode 0
2004-12-22 linux/x86 Magic Byte Self Modifying Code 76 bytes xort lin_x86 shellcode 0
2004-11-15 linux/x86 execve code 23 bytes marcetam lin_x86 shellcode 0
2004-11-15 linux/x86 execve(_/bin/ash__0_0); (21 bytes) zasta lin_x86 shellcode 0
2004-09-26 linux/x86 execve /bin/sh alphanumeric 392 bytes RaiSe lin_x86 shellcode 0
2004-09-26 linux/x86 execve /bin/sh IA32 0xff-less 45 bytes anathema lin_x86 shellcode 0
2004-09-26 linux/x86 symlink /bin/sh xoring 56 bytes dev0id lin_x86 shellcode 0
2004-09-26 linux/x86 portbind port 5074 toupper 226 bytes Tora lin_x86 shellcode 0
2004-09-26 linux/x86 add user t00r ENCRYPT 116 bytes Matias Sedalo lin_x86 shellcode 0
2004-09-26 linux/x86 chmod 666 shadow ENCRYPT 75 bytes Matias Sedalo lin_x86 shellcode 0
2004-09-26 linux/x86 symlink . /bin/sh 32 bytes dev0id lin_x86 shellcode 0
2004-09-26 linux/x86 kill snort 151 bytes nob0dy lin_x86 shellcode 0
2004-09-26 linux/x86 shared memory exec 50 bytes sloth lin_x86 shellcode 0
2004-09-26 linux/x86 - iptables -F (45 bytes) UnboundeD lin_x86 shellcode 0
2004-09-26 linux/x86 - iptables -F (58 bytes) dev0id lin_x86 shellcode 0
2004-09-26 linux/x86 Reverse telnet 134 bytes hts lin_x86 shellcode 0
2004-09-26 linux/x86 connect 120 bytes lamagra lin_x86 shellcode 0
2004-09-26 linux/x86 chmod 666 /etc/shadow 41 bytes Matias Sedalo lin_x86 shellcode 0
2004-09-26 linux/x86 cp /bin/sh /tmp/katy ; chmod 4555 katy 126 bytes RaiSe lin_x86 shellcode 0
2004-09-26 linux/x86 eject /dev/cdrom 64 bytes lamagra lin_x86 shellcode 0
2004-09-26 linux/x86 - xterm -ut -display [IP]:0 (132 bytes) RaiSe lin_x86 shellcode 0
2004-09-26 linux/x86 (ipchains -F (49 bytes) Sp4rK lin_x86 shellcode 0
2004-09-26 linux/x86 chmod 666 /etc/shadow 82 bytes Matias Sedalo lin_x86 shellcode 0
2004-09-12 linux/x86 execve /bin/sh 29 bytes Matias Sedalo lin_x86 shellcode 0
2004-09-12 linux/x86 execve /bin/sh 24 bytes Matias Sedalo lin_x86 shellcode 0
2004-09-12 linux/x86 execve /bin/sh 38 bytes Matias Sedalo lin_x86 shellcode 0
2004-09-12 linux/x86 execve /bin/sh 30 bytes Matias Sedalo lin_x86 shellcode 0
2004-09-12 linux/x86 execve /bin/sh setreuid(12_12) (50 bytes) N/A lin_x86 shellcode 0
2004-09-12 linux/x86 portbind port 5074 92 bytes Matias Sedalo lin_x86 shellcode 0
2004-09-12 linux/x86 portbind port 5074 + fork() 130 bytes Matias Sedalo lin_x86 shellcode 0
2004-09-12 linux/x86 add user t00r 82 bytes Matias Sedalo lin_x86 shellcode 0
2004-09-12 linux/x86 add user 104 bytes Matt Conover lin_x86 shellcode 0
2004-09-12 linux/x86 - break chroot 34 bytes dev0id lin_x86 shellcode 0
2004-09-12 linux/x86 - break chroot 46 bytes dev0id lin_x86 shellcode 0
2004-09-12 linux/x86 - break chroot execve /bin/sh (80 bytes) preedator lin_x86 shellcode 0
2004-09-12 linux/x86 execve /bin/sh encrypted 58 bytes Matias Sedalo lin_x86 shellcode 0
2004-09-12 linux/x86 execve /bin/sh xor encrypted 55 bytes N/A lin_x86 shellcode 0
2004-09-12 linux/x86 execve /bin/sh tolower() evasion 41 bytes N/A lin_x86 shellcode 0
2001-05-07 execve of /bin/sh after setreuid(0_0) Marco Ivaldi lin_x86 shellcode 0
2001-05-04 wu-ftpd 2.4.2/2.5 .0/2.6.0 - Remote Format String Stack Overwrite (3) justme lin_x86 remote 0
2001-01-13 linux - chroot()/execve() code preedator lin_x86 shellcode 0
2000-08-08 linux/x86 execve /bin/sh toupper() evasion 55 bytes N/A lin_x86 shellcode 0
2000-08-07 linux/x86 add user 70 bytes N/A lin_x86 shellcode 0
2000-08-07 linux/x86 - break chroot setuid(0) + /bin/sh 132 bytes N/A lin_x86 shellcode 0