zzqq0103

Untitled

Dec 1st, 2024
107
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 1.15 KB | None | 0 0
  1. #define _GNU_SOURCE
  2. #include <endian.h>
  3. #include <stdint.h>
  4. #include <stdio.h>
  5. #include <string.h>
  6. #include <sys/syscall.h>
  7. #include <unistd.h>
  8.  
  9. void loop()
  10. {
  11. memcpy((void*)0x200003c0, "./file0", 8);
  12. memcpy((void*)0x20000400, "./file0", 8);
  13. memcpy((void*)0x20000440, "9p", 3);
  14. memcpy((void*)0x200006c0, "trans=unix,", 11);
  15. memcpy((void*)0x200006cb, "access=client", 13);
  16. *(uint8_t*)0x200006d8 = 0x2c;
  17. memcpy((void*)0x200006d9, "nodevmap", 8);
  18. *(uint8_t*)0x200006e1 = 0x2c;
  19. memcpy((void*)0x200006e2, "access=client", 13);
  20. *(uint8_t*)0x200006ef = 0x2c;
  21. memcpy((void*)0x200006f0, "aname", 5);
  22. *(uint8_t*)0x200006f5 = 0x3d;
  23. memcpy((void*)0x200006f6, "vboxnet1:em0+cpuset", 19);
  24. *(uint8_t*)0x20000709 = 0x2c;
  25. *(uint8_t*)0x2000070a = 0;
  26. syscall(__NR_mount, 0x200003c0, 0x20000400, 0x20000440, 0x1020000,
  27. 0x200006c0);
  28. memcpy((void*)0x20000380, "./file0", 8);
  29. syscall(__NR_mkdir, 0x20000380, 8);
  30. memcpy((void*)0x200000c0, "./file0", 8);
  31. memcpy((void*)0x20000340, "9p", 3);
  32. syscall(__NR_mount, 0, 0x200000c0, 0x20000340, 0, 0x200006c0);
  33. }
  34.  
  35. int main()
  36. {
  37. syscall(__NR_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0);
  38. loop();
  39. return 0;
  40. }
Advertisement
Add Comment
Please, Sign In to add comment