Re: Generating shellcode

From: woofat_private
Date: Sun May 19 2002 - 23:52:56 PDT

  • Next message: David Endler: "Evolution of Cross-Site Scripting Attacks"

    How about :
    shellcode.asm
    -------------
    text
    global sc
    sc:
    nop
    int $80h
    
    egg.c
    -----
    unsigned char *ptr;
    ptr = (unsigned char *) sc;
    printf("\"");
    for (i = 0; i < SHELLCODE_LEN; i++)
      printf("\\x%02x", *(ptr + i));
    printf("\"\n");
    
    
    Something like that should produce you a nice (with appropriate 
    compilation, linking and other C related stuff). 
    "\x90\xcd\x80\x"
    
    sorry for my poor english and lack of information, it's early and
    i need to sleep :)
    
    
    On Sun, May 19, 2002 at 10:29:05AM -0400, Ryn wrote:
    > Howdy,
    > 
    > Do any documents exist explaining how to covert assembly op codes and
    > operands to hex? I can use "gdb" or "dis" on Solaris to get:
    > 
    > bc 10 20 00        clr          %fp
    > e0 03 a0 40        ld           [%sp + 64], %l0
    > a2 03 a0 44        add          %sp, 68, %l1
    > 9c 23 a0 20        sub          %sp, 32, %sp
    > 80 90 00 01        orcc         %g0, %g1, %g0
    > 
    > I want to see how to get column 1 - 4 by hand.
    > 
    > Thanks for any info,
    > Ryan
    > 
    > 
    



    This archive was generated by hypermail 2b30 : Mon May 20 2002 - 10:14:10 PDT