what is a shellcode called when drops a shell asap. no need for netcat, you send the exploit then in the same window the exploit drops me into a shell. I think kind of like the dcom exploit from oc192. is it a connectback shell or how is it called. I need this piece of code. I would be thankfull
crackie
Feb 16 2005, 11:43 AM
its called bindshell there are 3 possibilities that are known ² me bindshell binds a shell to a port after exploiting connect back the exploited host connects ² a ip that listens with nc or sth else. username adds username for nt or ts hacking :|
uzzi
Feb 16 2005, 07:29 PM
a lot more shells are aveilable if u use metaspoit 2.6
And if your asking how it works in one fell swoop, then the exploit simply connects to the port after the payload has been sent. (or listens if its connectback)
K-C0d3r
Feb 17 2005, 11:29 AM
the shellcode is a buffer of different bytes that is used to overwrite the memory and call a process. So you cannot use all shellcodes but you need a shellcode of a determined number of bytes. we can consider a shellcode also an easy code that prompt you a word. talking about bindshells I suppose you mean shellcodes that call back the cmd of the haked machine. check on metasploit website you can find a lot of kind of shellcodes, try to milw0rm too. I suggest you to use a shellcode that binds a port chosed by you.
brOmstar
Feb 17 2005, 06:37 PM
some words here
there is no metasploit framework 2.6 current version is 2.3 but I think uzzi means that 2.3 is included in whoppix 2.6 release for example
another thought is that he don't want informations about shellcode his question is related to an exploit that includes the listener/connect part after sending the shellcode a hint is look at team teso exploits the often provide a listener for connectback in one function ..rip this part for ur sploits
K-C0d3r
Feb 17 2005, 07:32 PM
Rip the shellcode from dcom exploit, I think it has got the listening function too.
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.