generating shellcode - HeapOverflow Computer Security Community & Forums : Heap Overflow.com

HeapOverflow Computer Security Community & Forums : Heap Overflow.com

		HeapOverflow Computer Security Community & Forums : Heap Overflow.com > Computer Security: Discussions > Hacking
generating shellcode

Mark Forums Read

Notices

Welcome to you visitor! This community is mainly dedicated to the computer and security, if you're looking for DFind scanner or others exploits codes you will find them into the Projects section, feel free to start Blogging and remember to always keep an eye and start talking about security Advisories & public Exploits.

Hacking Discuss the art of hacking, your experiences, etc...

generating shellcode

This is a discussion on "generating shellcode" within the Hacking part of the Computer Security: Discussions section; Hi All, trying to generate useable shellcode using shellforge... Here's my localshell.c #include <stdio.h> int main(void) { char *arg[2]; arg[0] = "/bin/sh"; arg[1] = NULL; execve("/bin/sh", arg, ...

Reply

#1 (permalink)

Old

26-10-05

h3llfyr3 is offline

Junior Member

Join Date: Sep 2005

Posts: 19

Thanks: 0

Thanked 0 Times in 0 Posts

Rep Power: 8

h3llfyr3 is on a distinguished road

Default

generating shellcode

Hi All,
trying to generate useable shellcode using shellforge...

Here's my localshell.c
#include <stdio.h>
int main(void)
{
char *arg[2];
arg[0] = "/bin/sh";
arg[1] = NULL;
execve("/bin/sh", arg, NULL);
}

H3llfyr3@slax:~/exploitdev/shellforge$ ./shellforge.py localshell.c
** Compiling localshell.c
** Tuning original assembler code
ERROR: Error at [call execve@PLT]: Symbol not found

any ideas on what is causing this?

Reply With Quote

Sponsor

Advertiser

#2 (permalink)

Old

28-10-05

class101 is offline

Administrator

Join Date: May 2005

Location: France

Age: 27

Posts: 592

Blog Entries: 3

Thanks: 18

Thanked 7 Times in 7 Posts

Rep Power: 10

class101 has disabled reputation

Send a message via MSN to class101

Default

try

#include <stdio.h>
int main()
{
char arg[] = "/bin/sh";
char arg2[] = "ls";
char env=NULL;
execve(arg,arg2,env);
return 0;
}

or

int main()
{
char *arg[] = {"/bin/sh","ls",NULL};
execve(arg[1],arg[2],arg[3]);
return 0;
}

you are maybe misunderdstanding this function execve, look google.

__________________
Security community webmaster
100% Free Directory
100% Cool milw0rm javascript

Reply With Quote

#3 (permalink)

Old

28-10-05

h3llfyr3 is offline

Junior Member

Join Date: Sep 2005

Posts: 19

Thanks: 0

Thanked 0 Times in 0 Posts

Rep Power: 8

h3llfyr3 is on a distinguished road

Default

Cheers class101, no difference I'm afraid, they both produce the same output, BTW my original code compiles correctly

#include <stdio.h>
int main()
{
char arg[] = "/bin/sh";
char arg2[] = "ls";
char env=NULL;
execve(arg,arg2,env);
return 0;
}

h3llfyr3@slax:~/exploitdev/shellforge$ ./shellforge.py class101shell.c
** Compiling class101shell.c
class101shell.c: In function `main':
class101shell.c:6: warning: initialization makes integer from pointer without a cast
** Tuning original assembler code
ERROR: Error at [call execve@PLT]: Symbol not found

Reply With Quote

#4 (permalink)

Old

28-10-05

class101 is offline

Administrator

Join Date: May 2005

Location: France

Age: 27

Posts: 592

Blog Entries: 3

Thanks: 18

Thanked 7 Times in 7 Posts

Rep Power: 10

class101 has disabled reputation

Send a message via MSN to class101

Default

then don't use shellforge, I don't see why you use such useless proggy, just compile your binary and get the shellcode from its assembly..

__________________
Security community webmaster
100% Free Directory
100% Cool milw0rm javascript

Reply With Quote

#5 (permalink)

Old

30-10-05

h3llfyr3 is offline

Junior Member

Join Date: Sep 2005

Posts: 19

Thanks: 0

Thanked 0 Times in 0 Posts

Rep Power: 8

h3llfyr3 is on a distinguished road

Default

Point taken, I ought to write my own shellcode anyway, at the very least it's good practice and will lead to a better understanding of the stack

Reply With Quote

Sponsor

Advertiser

Reply

Tags
generating, shellcode

« Buffer overflow tutes | unicode overflows »

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Posting Rules
You may not post new threads You may not post replies You may not post attachments You may not edit your posts BB code is On Smilies are On [IMG] code is On HTML code is Off Trackbacks are On Pingbacks are On Refbacks are On

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
linux shellcode	fl0 fl0w	Programming	0	27-12-07 12:59
Shellcode Decoding	Yog-Sotho	Programming	10	19-05-06 01:12
IIS 5.0 WebDAV ntdll.dll Overflow Exploit	touk	Public	9	20-03-06 12:03
my shellcode collection	class101	Shared Links	0	19-12-05 11:19
GetPC shellcode for WinXPSP1?	w4terlime	Hacking	2	26-07-05 06:48

heapoverflow.com - SEOmeter SEO tools

Locations of visitors to this page

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47