[Code-Crunchers] 69 byte shellcode to add root user 'r00t'
Gadi Evron
ge at linuxbox.org
Fri Nov 17 11:23:59 CST 2006
On Fri, 17 Nov 2006, Peter Kosinar wrote:
> > Great stuff. Sorry, a bit new to the game here, but this line:
> > * ; open("/etc//passwd", O_WRONLY | O_APPEND)
> >
> > Should it be //etc//passwd, /etc/passwd, or is the mix of single and
> > double slash correct?
>
> Yes, it's correct. "/etc/passwd" is, unfortunately, 11 bytes long and
> pushing exactly 11 bytes on the stack is more space-consumming than
> pushing 12. Obviously, "//etc/passwd" would work equally well.
>
> Peter
Izik, I think we have more linux experts here now. Can you send in your
tiny shellcode again?
More information about the Code-Crunchers
mailing list