Sun Solaris Shellcode



This section contains Solaris payloads.

 solaris_ia32_bind Dis Gen
Solaris (IA32) 96 bytes
This payload listens on a TCP port and waits for a connection. Once the connection has been established it executes /bin/sh with standard I/O redirected to the client TCP connection.


 solaris_sparc_bind Src Gen
Solaris (SPARC) 180 bytes
This payload listens on a TCP port and waits for a connection. Once the connection has been established it executes /bin/sh with standard I/O redirected to the client TCP connection.


 solaris_ia32_reverse Dis Gen
Solaris (IA32) 85 bytes
This payload establishes a TCP connection to a given host on a given port and redirects standard I/O from /bin/sh to the established connection.


 solaris_sparc_reverse Src Gen
Solaris (SPARC) 140 bytes
This payload establishes a TCP connection to a given host on a given port and redirects standard I/O from /bin/sh to the established connection.


 solaris_ia32_findsock Dis Gen
solaris (IA32) 147 bytes
This payload searches all open file descriptors by comparing their source port with the source port that is associated with the attacker's established connection. Once the connection is located the payload executes /bin/sh and redirects standard I/O to the established exploit connection. This is useful for bypassing firewall and NAT restrictions by repurposing the already established exploit connection.