[Code-Crunchers] 69 byte shellcode to add root user 'r00t'

Peter Kosinar goober at edoc.ksp.sk
Fri Nov 17 11:15:04 CST 2006


> Great stuff.  Sorry, a bit new to the game here, but this line:
> * ; open("/etc//passwd", O_WRONLY | O_APPEND)
>
> Should it be //etc//passwd, /etc/passwd, or is the mix of single and
> double slash correct?

Yes, it's correct. "/etc/passwd" is, unfortunately, 11 bytes long and 
pushing exactly 11 bytes on the stack is more space-consumming than 
pushing 12. Obviously, "//etc/passwd" would work equally well.

Peter

-- 
[Name] Peter Kosinar   [Quote] 2B | ~2B = exp(i*PI)   [ICQ] 134813278




More information about the Code-Crunchers mailing list