Midnight Research Labs

More IOS shellcode
aaron posted in Uncategorized on August 14th, 2008

It looks like more shellcode has been released for IOS at BlackHat this year. Looks interesting.

Following our Cisco IOS shell code presentation at Blackhat Vegas 2008,
IRM has decided to release three variants of the IOS shell codes
discussed in the presentation. Following are the payloads that can be
used as both code execution based payloads and runtime memory resident
backdoors within IOS:-

* Password protected bind shell -

http://www.irmplc.com/downloads/presentations/IOS_Bindshell_v.1.0.txt

* Connect Back Shell -

http://www.irmplc.com/downloads/presentations/IOS_Connectback_v.1.0.txt

* Two byte overwrite bind shell -

http://www.irmplc.com/downloads/presentations/IOS_tiny_v.1.0.txt