disassemble binary shellcode

objdump -b binary -m i386 -D shellcode.bin

The options -b binary and -m are needed for disassembling raw machine code when it is not part of a full binary executable with proper headers.

Sample Output

$ objdump -b binary -m i386 -D shc

shc:     file format binary

Disassembly of section .data:

0000000000000000 <.data>:
   0:   31 c0                   xor    %eax,%eax
   2:   50                      push   %eax
   3:   68 2f 2f 73 68          push   $0x68732f2f
   8:   68 2f 62 69 6e          push   $0x6e69622f
   d:   89 e3                   mov    %esp,%ebx
   f:   50                      push   %eax
  10:   53                      push   %ebx
  11:   89 e1                   mov    %esp,%ecx
  13:   99                      cltd
  14:   b0 0b                   mov    $0xb,%al
  16:   cd 80                   int    $0x80

By: recursiverse

2010-04-27 11:11:36

objdump

Submit An Alternative

What Others Think

WTF do you mean by binary shellcode?

buzzy · 683 weeks and 1 day ago

'machine code'...

xxd · 682 weeks ago

Plastic surgery is a surgical specialty involving the restoration, reconstruction, or alteration of the human body. It can be divided into two main categories: reconstructive surgery and cosmetic surgery. MaxRemind top rank medical billing company USA offers plastic surgery billing services and medical credentialing services to plastic surgery physicians in all states of USA at lowest rates.

stevematt · 122 weeks and 2 days ago

The binary code shared here will help me complete my project, and I can get my labiaplasty raleigh surgery after that. This is an important moment for me, and I hope it goes well.

KayGasaway · 95 weeks and 2 days ago

I was looking at some of your posts on this website and I conceive this web site is really instructive! Keep putting up.. https://www.locationsnearmenow.net/

KayGasaway · 86 weeks and 3 days ago

Cool stuff you have got and you keep update all of us. nearest breakfast

KayGasaway · 86 weeks and 2 days ago

24 hours a day for using the service with us. online gambling website ufabet I've told a lot of people. that having enough to eat now part of it came from Football betting is a career supplement from a regular job. ???????????? ???????????

KayGasaway · 80 weeks and 6 days ago

seofox · 69 weeks ago

seofox · 68 weeks and 4 days ago

seofox · 68 weeks and 1 day ago

rahimhh21 · 39 weeks ago

hello, I am new here.

Chme1968 · 33 weeks and 5 days ago

Perfecthomepugs · 30 weeks and 2 days ago

Our team of highly trained mobile technicians is equipped with the latest in diagnostic and repair tools. emergency roadside truck repair

bahamianiri · 16 weeks ago

What do you think?

Any thoughts on this command? Does it work on your machine? Can you do the same thing with only 14 characters?

You must be signed in to comment.

What's this?

commandlinefu.com is the place to record those command-line gems that you return to again and again. That way others can gain from your CLI wisdom and you from theirs too. All commands can be commented on, discussed and voted up or down.

Share Your Commands

Similar Commands

Disassemble some shell code

Get Shellcode from ARM Binaries

Get shellcode of the binary using objdump

Extract binary from .text section (shellcode)

Stay in the loop…

Follow the Tweets.

Every new command is wrapped in a tweet and posted to Twitter. Following the stream is a great way of staying abreast of the latest commands. For the more discerning, there are Twitter accounts for commands that get a minimum of 3 and 10 votes - that way only the great commands get tweeted.

» http://twitter.com/commandlinefu
» http://twitter.com/commandlinefu3
» http://twitter.com/commandlinefu10

Subscribe to the feeds.

Use your favourite RSS aggregator to stay in touch with the latest commands. There are feeds mirroring the 3 Twitter streams as well as for virtually every other subset (users, tags, functions,…):

Subscribe to the feed for:

» all commands
» commands with 3 up-votes (commandlinefu3)
» commands with 10 up-votes (commandlinefu10)