ephase/cours
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

Add TD5 q3 (first part)

Browse source
This commit is contained in:
Yorick Barbanneau 2023-03-24 00:35:51 +01:00
parent 72564e2e2d
commit 4f61441bb9
7 changed files with 229 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

19
content/secu_logicielle/td5-stackoverflow_shellcode/files/q3/shellcode.S.origin Normal file
View file

@ -0,0 +1,19 @@
.data
.globl filename
filename:
.asciz "/tmp/pwn"
.text
.globl _start
_start:
# creat("/tmp/pwn", 0666)
movq $0666, %rsi # read-write perms
movq $filename, %rdi # name of file
movq $85, %rax # system call number (sys_creat)
syscall # call kernel
# exit(42)
movq $42, %rdi # set return code to 42
movq $60, %rax # system call number (sys_exit)
syscall # call kernel