Shellcode Analysis x86 - SLAE Assignment 0x5

Before we start , I would like to bring your attention to this SLAE course from securitytube which will help you learn Shellcoding - http://www.securitytube-training.com/online-courses/securitytube-linux-assembly-expert/

We all use metasploit in our daily pentest engagements so let's break-up some of the shellcode comes with metasploit.

Analysis :
 1. linux/x86/chmod
 2. linux/x86/exec
 3. linux/x86/read_file

1. linux/x86/chmod -
 msfvenom -p linux/x86/chmod -f raw | ndisasm -u -

msfvenom -p linux/x86/chmod -f c

msfvenom -p linux/x86/chmod -f raw | sctest -vvv -Ss 100000 -G chmod.dot
dot chmod.dot -Tpng -o chmod.png

 2. linux/x86/exec -

 msfvenom -p linux/x86/exec CMD=ls FILE=tmp.bin -f raw | ndisasm -u -

msfvenom -p linux/x86/exec CMD=ls -f c

msfvenom -p linux/x86/exec CMD=ls FILE=tmp.bin -f raw | /opt/libemu/bin/sctest -vvv -Ss 100000 -G exec.dot

dot exec.dot -Tpng -o exec.png

3. linux/x86/read_file -

msfvenom -p linux/x86/shell/reverse_tcp -f raw | ndisasm -u -

 msfvenom -p linux/x86/shell/reverse_tcp -f c

msfvenom -p linux/x86/shell/reverse_tcp -f raw | /opt/libemu/bin/sctest -vvv -Ss 100000 -G rev.dot

dot  rev.dot -Tpng -o rev.png

This blog post has been created for completing the requirements of the SecurityTube Linux Assembly Expert certification: http://www.securitytube-training.com/online-courses/securitytube-linux-assembly-expert/ 

Student-ID: SLAE-1219