66 bytes small Linux/x86 Execve() alphanumeric shellcode.

114 bytes small Linux/x86 random bytes encoder and XOR/SUB/NOT/ROR execve(/bin/sh) shellcode.

571 bytes small Microsoft Windows x86 dynamic bind shell and null-free shellcode.

223 bytes small dynamic, null-free popcalc shellcode.

195 bytes small Windows/x86 null-free WinExec Calc.exe shellcode.

232 bytes small Dynamic MessageBoxA||W PEB and Import Table Method shellcode.

210 bytes small WinExec add-admin dynamic null-free shellcode.

26 bytes small Linux/x86 reboot polymorphic shellcode.

33 bytes small Linux/x86 egghunter null-free shellcode.

63 bytes small Linux/x64_86 dynamic egghunter shellcode that searches memory for 2 instances of the egg. When the eggs are found, the egghunter passes execution control to the payload at the memory address of the eggs. The payload is an execve(/bin/bash) shellcode.

272 bytes small Linux/x86_64 null free password protected bindshell shellcode.

57 bytes small Linux/x64_86 /bin/bash shellcode. The stub decodes the ROL Encoded shellcode. When the stub has finished decoding the payload, execution control is passed to the payload.

39 bytes small Linux/x86 egghunter null-free shellcode. The egghunter dynamically searches memory for 2 instances of the egg. When the eggs are found, the egghunter passes execution control to the payload at the memory address of the eggs.

Ac4p.com Gallery version 1.0 suffers from cross site scripting, phpinfo disclosure, shell upload, and insecure cookie handling vulnerabilities.

Denapars Shop Script suffers from administrative bypass, shell upload, and insecure cookie handling vulnerabilities.

9 bytes small Microsoft Windows 7 screen locking shellcode.

This Metasploit module exploits the file upload vulnerability of baldr malware panel in order to achieve arbitrary code execution.

FileThingie version 2.5.7 suffers from a remote shell upload vulnerability.

Centraleyezer suffers from a remote shell upload vulnerability.

33 bytes small Win32 egg searching shellcode that should work on all service packs of Microsoft Windows XP, 2k, and 2k3.

52 bytes small Win32/XP SP3 windows magnifier shellcode.

56 bytes small Win32/XP SP3 shutdown windows shellcode with a 30 second timer.

107 bytes small Linux/x86 shellcode that adds the user 'ctl' with the password 'ctl' to the /etc/passwd file with the UID and GID of 0 (root). This shellcode uses legacy passwd functionality. Therefore the /etc/shadow file does not need to be accessed or modified.

155 bytes small Linux/x86 shellcode that has a MMX stub decoder that dynamically decodes the payload in memory. The FPU GetPC technique is used to determine the offset from EIP dynamically in running memory. Once decoded. this shellcode adds the user 'ctl' with the password 'ctl' to the /etc/passwd file with the UID and GID of 0 (root). This shellcode uses legacy passwd functionality. Therefore the /etc/shadow file does not need to be accessed or modified.

113 bytes small Linux/x64 anti-debug trick (INT3 trap) with execve("/bin/sh") shellcode that is NULL free.

129 bytes small Linux/x86_64 bind (4444/TCP) shell (/bin/sh) + password (pass) shellcode.

157 bytes small Linux/MIPS64 reverse (localhost:4444/TCP) shell shellcode.

120 bytes small Linux/x86_64 reverse (127.0.0.1:4444/TCP) shell (/bin/sh) + password (pass) shellcode.

Linux/x86 TCP reverse shell 127.0.0.1 nullbyte free shellcode.

53 bytes small Linux/x86 bind TCP port 43690 null-free shellcode.

188 bytes small Lnux/x64 reverse TCP stager shellcode.

644 bytes small Microsoft Windows x86 shellcode that disables the Windows firewall, adds the user MajinBuu with password TurnU2C@ndy!! to the system, adds the user MajinBuu to the local groups Administrators and Remote Desktop Users, and then enables the RDP Service.

This patch is a backdoor to bash that will create a setuid backdoor shell in /tmp if run as root.

Windows Mobile version 6.5 TR (WinCE 5.2) MessageBox shellcode for ARM.

114 bytes small Linux/x86 bind shell generator shellcode.

This Metasploit module exploits a directory traversal vulnerability (CVE-2015-1830) in Apache ActiveMQ versions 5.x before 5.11.2 for Windows. The module tries to upload a JSP payload to the /admin directory via the traversal path /fileserver/..\admin\ using an HTTP PUT request with the default ActiveMQ credentials admin:admin (or other credentials provided by the user). It then issues an HTTP GET request to /admin/.jsp on the target in order to trigger the payload and obtain a shell.

80 bytes small Linux/x86 reverse shell generator shellcode with customizable TCP port and IP address.

Global infrastructure services firm AECOM said that Shell Retail has hired it to deliver ultrafast electrical vehicle (EV) chargers across the Netherlands. A total of 200 fast chargers – under the brand name Shell Recharge - will be available at Shell forecourts (filling stations).

Royal Dutch Shell Plc took a step forward in its aim to become the world’s biggest power company with an aggressive move into the U.K. retail market by offering one of the cheapest tariffs available.

SOHAR deep-sea port and free-zone has signed a 600-hectare lease agreement with Shell Development Oman (SDO) for land to set up industrial and commercial solar panels. The port is managed in a joint-venture between the Port of Rotterdam and the Sultanate of Oman.

Royal Dutch Shell Plc took a step forward in its aim to become the world’s biggest power company with an aggressive move into the U.K. retail market by offering one of the cheapest tariffs available.

Global infrastructure services firm AECOM said that Shell Retail has hired it to deliver ultrafast electrical vehicle (EV) chargers across the Netherlands. A total of 200 fast chargers – under the brand name Shell Recharge - will be available at Shell forecourts (filling stations).

Royal Dutch Shell Plc took a step forward in its aim to become the world’s biggest power company with an aggressive move into the U.K. retail market by offering one of the cheapest tariffs available.

Turkey supports the embattled Tripoli government against rebel forces from the east led by Gen. Khalifa Hifter.

Universal health coverage must be high quality to improve patients’ health outcomes