[Code-Crunchers] 69 byte shellcode to add root user 'r00t'
Peter Kosinar
goober at edoc.ksp.sk
Fri Nov 17 11:15:04 CST 2006
> Great stuff. Sorry, a bit new to the game here, but this line:
> * ; open("/etc//passwd", O_WRONLY | O_APPEND)
>
> Should it be //etc//passwd, /etc/passwd, or is the mix of single and
> double slash correct?
Yes, it's correct. "/etc/passwd" is, unfortunately, 11 bytes long and
pushing exactly 11 bytes on the stack is more space-consumming than
pushing 12. Obviously, "//etc/passwd" would work equally well.
Peter
--
[Name] Peter Kosinar [Quote] 2B | ~2B = exp(i*PI) [ICQ] 134813278
More information about the Code-Crunchers
mailing list