Linux x86 Reverse Engineering

[Aerosol]

1. Simple program that reads

/etc/passwd file

Shellcode: ( Download Link given in the end )

"\x31\xc0\x99\x52\x68\x2f\x63\x61\x74\x68\x2f\x62\x69\x6e\

x89\xe3\x52\x68\x73\x73\x77\x64\x68\x2f\x2f\x70\x61\x68\x

2f\x65\x74\x63\x89\xe1\xb0\x0b\x52\x51\x53\x89\xe1\xcd\x8

0"

Now we create a simple programt that will execute this code

and

Compile it using

gcc –fno-stack-protector -z execstack code.c –o shellcode

It will compile our code and program should work without any

hindrance.

Read more: http://dl.packetstormsecurity.net/papers/shellcode/re_shellcode.pdf