[Code-Crunchers] 69 byte shellcode to add root user 'r00t'

Gadi Evron ge at linuxbox.org
Fri Nov 17 11:23:59 CST 2006


On Fri, 17 Nov 2006, Peter Kosinar wrote:
> > Great stuff.  Sorry, a bit new to the game here, but this line:
> > * ; open("/etc//passwd", O_WRONLY | O_APPEND)
> >
> > Should it be //etc//passwd, /etc/passwd, or is the mix of single and
> > double slash correct?
> 
> Yes, it's correct. "/etc/passwd" is, unfortunately, 11 bytes long and 
> pushing exactly 11 bytes on the stack is more space-consumming than 
> pushing 12. Obviously, "//etc/passwd" would work equally well.
> 
> Peter

Izik, I think we have more linux experts here now. Can you send in your
tiny shellcode again?



More information about the Code-Crunchers mailing list