shellcode execve("/bin/ps",NULL,NULL);

[ev1lut10n]

Code:

;by: ev1lut10n
global _start
_start:
xor eax,eax ;reset eax ke 0
push eax ; siapkan stack frame
push 0x73702f2f  ; sp//
push 0x6e69622f   ; nib/
mov ebx, esp
mov eax, 11
int 80h

compile:
nasm -f elf ps.asm
ld -o ps ps.o

.

[tridi]

bisa dijelasin dikit ga kang?

[darkslayer]

buat apa nih kang?
kgk bs baca assembly

[konspirasi]

ini shellcode buat di OS apa bro? yg pasti x86 kan..

[syahrini]

Segmentaion fault om
tapi setelah ane jadiin shellcode dan di kasih c source

Code:

syahrini@sesuatubanget:~$ objdump -d ps

o:     file format elf32-i386


Disassembly of section .text:

08048060 <_start>:
8048060:    31 c0                    xor    %eax,%eax
8048062:    50                          push   %eax
8048063:    68 2f 0f 72 73           push   $0x73720f2f
8048068:    68 2f 62 69 6e           push   $0x6e69622f
804806d:    89 e3                    mov    %esp,%ebx
804806f:    b8 0b 00 00 00           mov    $0xb,%eax
8048074:    cd 80                    int    $0x80

Quote:#include <unistd.h>
char shellcode[]="\x31\xc0\x50\x68\x2f\x0f\x72\x73\x68\x2f\x62\x69\x6e"
"\x89\xe3\xb8\x0b\x00\x00\x00\xcd\x80";
int main(int argc, char *arg[])
{
/*function pointer*/
int (*funct)();
funct = (int(*)())shellcode;
(int)(*funct)();
return 0;
}

Code:

[syahrini@sesuatubanget]$ gcc -g ps.c -o ps
    [syahrini@sesuatubanget]$ execstack -s ps
    [syahrini@sesuatubanget]$ ./ps
    [syahrini@sesuatubanget]$ echo $?
    1

om evilution unyu-unyu

[syn_attack]

mas ev1lut10n ~# keyen mas.... :-)

[konspirasi]

owh, klo pake nasm segmentation faultm klo dijadiin c bisa, manteb om

[syn_attack]

kak ev1lut10n ~# mau ikut nambahin aja kak...

; execve("/bin//ps", "/bin//ps", NULL)
; Programmer : Paulus Gandung Prakosa_ (0x1337day)
;

section .text

global _start

_start :

; setreuid(0, 0)
xor eax, eax
xor ebx, ebx
push eax
push ebx
mov ecx, esp
mov al, 0x46
int 0x80

; execve("/bin//ps", "/bin//ps", NULL)
xor eax, eax
push eax
push 0x73702f2f
push 0x6e69622f
mov ebx, esp
xor ecx, ecx
push ecx
push ebx
mov edx, esp
mov al, 0xb
int 0x80

; _exit(0)
xor eax, eax
push eax
mov ebx, esp
mov al, 0x1
int 0x80