Hack The Sec-Leading Resource Of Linux Tutorial: shellcode

<div dir="ltr" style="text-align: left;" trbidi="on">
<h1 class="post-title" style="background-color: white; border: 0px; font-family: 'PT Serif', serif; font-size: 38px; font-stretch: inherit; font-weight: 400; letter-spacing: -1px; line-height: 1.3em; margin: 0px 0px 10px; padding: 0px; vertical-align: baseline; word-wrap: break-word;">
<span style="color: #990000;"><u><i>Command Line Arguments in Linux Shell Scripting</i></u></span></h1>
<div>
<h2 style="background-color: white; border: 0px; color: #155c8e; font-family: 'PT Serif', serif; font-size: 34px; font-stretch: inherit; font-weight: 400; letter-spacing: -0.7px; line-height: 1.3em; margin: 0px 0px 14px; padding: 0px; text-align: justify; vertical-align: baseline; word-wrap: break-word;">
Overview :</h2>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjas04epFPiDRAKlUOQyYwRmILsr7Sy8eX_NYJgEc39xyI7yNZn2H07JtVDxjvzawqRf-jBoBPVsPyDtr17LyYT-OhV6-9gf6vMQ9NVvIrYzYVtZ3I1EPWMIHpIjLKFlwdI1jUe2jHw_vDb/s1600/bash_shell_www.hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="200" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjas04epFPiDRAKlUOQyYwRmILsr7Sy8eX_NYJgEc39xyI7yNZn2H07JtVDxjvzawqRf-jBoBPVsPyDtr17LyYT-OhV6-9gf6vMQ9NVvIrYzYVtZ3I1EPWMIHpIjLKFlwdI1jUe2jHw_vDb/s200/bash_shell_www.hackthesec.co.in.png" width="200" /></a></div>
<div>
<br /></div>
<div style="background-color: white; border: 0px; font-family: 'PT Serif', serif; font-size: 16px; font-stretch: inherit; line-height: 22.4px; margin-bottom: 1em; padding: 0px; text-align: justify; vertical-align: baseline;">
Command line arguments (also known as positional parameters) are the arguments specified at the command prompt with a command or script to be executed. The locations at the command prompt of the arguments as well as the location of the command, or the script itself, are stored in corresponding variables. These variables are special shell variables. Below picture will help you understand them.</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi6Wn5k-WdVD_OwcQnE8BrX1jCCiiWrqSL56Hzsumx7s3yOgerJei-cX90ik6TRmi9O-r0kuvByg78xN8nZJCGQ65nR3wHuN0dmMVoIfOlKmEkpRBKVGbGDE-aiFvwC7Gf8FwFxvWrrRYIC/s1600/command-line-arguments_www.hackthesec.co.in.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi6Wn5k-WdVD_OwcQnE8BrX1jCCiiWrqSL56Hzsumx7s3yOgerJei-cX90ik6TRmi9O-r0kuvByg78xN8nZJCGQ65nR3wHuN0dmMVoIfOlKmEkpRBKVGbGDE-aiFvwC7Gf8FwFxvWrrRYIC/s1600/command-line-arguments_www.hackthesec.co.in.jpg" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhev_o0nZPNEJGV_7tyaZ0tgsvZiUk9WiB2oVumhgapoB_6RKju68u2mol3-LE4NaZurvpV_t5T9dZDD9yAVFyqMxzg0Jhs14mktYTtjsnRCusz-Y7971cAcxwi2furpWLwv9j1iobPhVr-/s1600/command-line-shell-variables_www.hackthesec.co.in.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhev_o0nZPNEJGV_7tyaZ0tgsvZiUk9WiB2oVumhgapoB_6RKju68u2mol3-LE4NaZurvpV_t5T9dZDD9yAVFyqMxzg0Jhs14mktYTtjsnRCusz-Y7971cAcxwi2furpWLwv9j1iobPhVr-/s1600/command-line-shell-variables_www.hackthesec.co.in.jpg" /></a></div>
<div class="separator" style="clear: both; text-align: left;">
<br /></div>
<div style="background-color: white; border: 0px; font-family: 'PT Serif', serif; font-size: 16px; font-stretch: inherit; line-height: 22.4px; margin-bottom: 1em; padding: 0px; text-align: justify; vertical-align: baseline;">
<br /></div>
<div style="background-color: white; border: 0px; font-family: 'PT Serif', serif; font-size: 16px; font-stretch: inherit; line-height: 22.4px; margin-bottom: 1em; padding: 0px; text-align: justify; vertical-align: baseline;">
Let’s create a shell script with name “<b>command_line_agruments</b>.sh”, it will show the command line argruments that were supplied and count number of agruments, value of first argument and Process ID (PID) of the Script.</div>
<pre style="background: rgb(54, 54, 54); border-radius: 7px; border: 1px solid rgb(221, 221, 221); font-family: Monaco, 'Courier New', 'DejaVu Sans Mono', 'Bitstream Vera Sans Mono', monospace; font-size: 12px; font-stretch: inherit; line-height: 19px; margin-bottom: 15px; margin-top: 15px; overflow-x: auto; overflow-y: hidden; padding: 18px 20px; vertical-align: baseline; white-space: pre-wrap;"><span style="color: white;">hackthesec@localhost:~$ cat </span><span style="color: lime;">command_line_agruments.sh</span></pre>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjlsefOqjc9D-lK7l7nUbbSTnWrLT15Wj52va4WSUeKEGKptkqE48rkEeJVeDCcSUDhD4QKT7SQEd4t8qfxO_McFeoeM-XdQ9z2vIGTQ2IyVuVWS0Zc439-2Z4vGU5Zj2OAS4Egl8MwIuCt/s1600/command-line-agruments_www.hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="128" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjlsefOqjc9D-lK7l7nUbbSTnWrLT15Wj52va4WSUeKEGKptkqE48rkEeJVeDCcSUDhD4QKT7SQEd4t8qfxO_McFeoeM-XdQ9z2vIGTQ2IyVuVWS0Zc439-2Z4vGU5Zj2OAS4Egl8MwIuCt/s640/command-line-agruments_www.hackthesec.co.in.png" width="640" /></a></div>
<div style="background-color: white; border: 0px; font-family: 'PT Serif', serif; font-size: 16px; font-stretch: inherit; line-height: 22.4px; margin-bottom: 1em; padding: 0px; text-align: justify; vertical-align: baseline;">
<br /></div>
<h6 style="background-color: white; border: 0px; color: #155c8e; font-family: 'PT Serif', serif; font-size: 18px; font-stretch: inherit; line-height: 1.3em; margin: 0px 0px 14px; padding: 0px; vertical-align: baseline; word-wrap: break-word;">
Assign Executable permissions to the Script</h6>
<pre style="background: rgb(54, 54, 54); border-radius: 7px; border: 1px solid rgb(221, 221, 221); font-family: Monaco, 'Courier New', 'DejaVu Sans Mono', 'Bitstream Vera Sans Mono', monospace; font-size: 12px; font-stretch: inherit; line-height: 19px; margin-bottom: 15px; margin-top: 15px; overflow-x: auto; overflow-y: hidden; padding: 18px 20px; vertical-align: baseline; white-space: pre-wrap;"><span style="color: white;">hackthesec@localhost:~$ chmod +x </span><span style="color: lime;">command_line_agruments</span><span style="color: white;">.sh</span></pre>
<h6 style="background-color: white; border: 0px; color: #155c8e; font-family: 'PT Serif', serif; font-size: 18px; font-stretch: inherit; line-height: 1.3em; margin: 0px 0px 14px; padding: 0px; vertical-align: baseline; word-wrap: break-word;">
Now execute the scripts with command line argruments</h6>
<pre style="background: rgb(54, 54, 54); border-radius: 7px; border: 1px solid rgb(221, 221, 221); font-family: Monaco, 'Courier New', 'DejaVu Sans Mono', 'Bitstream Vera Sans Mono', monospace; font-size: 12px; font-stretch: inherit; line-height: 19px; margin-bottom: 15px; margin-top: 15px; overflow-x: auto; overflow-y: hidden; padding: 18px 20px; vertical-align: baseline; white-space: pre-wrap;"><span style="color: white;">hackthesec@localhost:~$ ./command_line_agruments.sh </span><span style="color: lime;">Linux AIX HPUX VMware</span><span style="color: white;">
There are 4 arguments specified at the command line.
The arguments supplied are: Linux AIX HPUX VMware
</span><span style="color: lime;">The first argument is: Linux
</span><span style="color: white;">The PID of the script is: 16316</span></pre>
<h5 style="background-color: white; border: 0px; color: #155c8e; font-family: 'PT Serif', serif; font-size: 20px; font-stretch: inherit; line-height: 1.3em; margin: 0px 0px 14px; padding: 0px; vertical-align: baseline; word-wrap: break-word;">
Shifting Command Line Arguments</h5>
<div style="background-color: white; border: 0px; font-family: 'PT Serif', serif; font-size: 16px; font-stretch: inherit; line-height: 22.4px; margin-bottom: 1em; padding: 0px; text-align: justify; vertical-align: baseline;">
The shift command is used to move command line arguments one position to the left. During this move, the first argument is lost. “<b>command_line_agruments</b>.sh” script below uses the shift command:</div>
<pre style="background: rgb(54, 54, 54); border-radius: 7px; border: 1px solid rgb(221, 221, 221); font-family: Monaco, 'Courier New', 'DejaVu Sans Mono', 'Bitstream Vera Sans Mono', monospace; font-size: 12px; font-stretch: inherit; line-height: 19px; margin-bottom: 15px; margin-top: 15px; overflow-x: auto; overflow-y: hidden; padding: 18px 20px; text-align: justify; vertical-align: baseline; white-space: pre-wrap;"><span style="color: white;"><span style="text-align: left;">hackthesec</span>@localhost:~$ </span><span style="color: lime;">cat </span><span style="color: white;">command_line_agruments.sh</span></pre>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjz1LVJe-Xx-fBD7MUwOl31k-Ab10eIGwF4puO7QJTVvVeU7H66KCo9D-lmRqaoSQxN-sCpDYYaj2JZNSQG97GkcGddF8Q4RH07bLrPT2Au5Vyeoma-KXbDWfnG4lBbAijSjgj1Fs1AnQuB/s1600/command-line-agrument-shift_www.hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="261" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjz1LVJe-Xx-fBD7MUwOl31k-Ab10eIGwF4puO7QJTVvVeU7H66KCo9D-lmRqaoSQxN-sCpDYYaj2JZNSQG97GkcGddF8Q4RH07bLrPT2Au5Vyeoma-KXbDWfnG4lBbAijSjgj1Fs1AnQuB/s640/command-line-agrument-shift_www.hackthesec.co.in.png" width="640" /></a></div>
<div style="background-color: white; border: 0px; font-family: 'PT Serif', serif; font-size: 16px; font-stretch: inherit; line-height: 22.4px; margin-bottom: 1em; padding: 0px; text-align: justify; vertical-align: baseline;">
<br /></div>
<h6 style="background-color: white; border: 0px; color: #155c8e; font-family: 'PT Serif', serif; font-size: 18px; font-stretch: inherit; line-height: 1.3em; margin: 0px 0px 14px; padding: 0px; vertical-align: baseline; word-wrap: break-word;">
Now Execute the Script again.</h6>
<pre style="background: rgb(54, 54, 54); border-radius: 7px; border: 1px solid rgb(221, 221, 221); font-family: Monaco, 'Courier New', 'DejaVu Sans Mono', 'Bitstream Vera Sans Mono', monospace; font-size: 12px; font-stretch: inherit; line-height: 19px; margin-bottom: 15px; margin-top: 15px; overflow-x: auto; overflow-y: hidden; padding: 18px 20px; vertical-align: baseline; white-space: pre-wrap;"><span style="color: white;">hackthesec@localhost:~$ ./</span><span style="color: lime;">command_line_agruments</span><span style="color: white;">.sh Linux AIX HPUX VMware
There are 4 arguments specified at the command line
The arguments supplied are: Linux AIX HPUX VMware
The first argument is: Linux
</span><span style="color: lime;">The Process ID of the script is: 16369
</span><span style="color: white;">The new first argument after the first shift is: AIX
</span><span style="color: lime;">The new first argument after the second shift is: HPUX
</span><span style="color: white;">hackthesec@localhost:~$</span></pre>
<div style="background-color: white; border: 0px; font-family: 'PT Serif', serif; font-size: 16px; font-stretch: inherit; line-height: 22.4px; margin-bottom: 1em; padding: 0px; text-align: justify; vertical-align: baseline;">
Multiple shifts in a single attempt may be performed by furnishing the desired number of shifts to the shift command as an argument.<br /><br /><a href="http://www.hackthesec.co.in/" target="_blank">www.hackthesec.co.in</a><br /><a href="http://www.twitter.com/hackthesecurity">www.twitter.com/hackthesecurity</a></div>
</div>
</div>

Command Line Arguments in Linux Shell Scripting

Command Line Arguments in Linux Shell Scripting Overview : Command line arguments (also known as positional parameters) are the a...

<div dir="ltr" style="text-align: left;" trbidi="on">
<h1 style="background-color: white; box-sizing: border-box; color: #555555; font-family: 'Noto Sans', sans-serif; font-size: 38px; font-stretch: normal; font-weight: 300; line-height: 1.4; margin: 0px; text-align: center;">
Linux/x86 execve "/bin/sh" - shellcode 24 byte</h1>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhD9GeYhBgfA8wipAGEc6HctGGCIw2Bu_7dXIz-YCA5qJFDdSh67sFpth1guy-8FLkPpOjG-716-_wlmglj47-EPqytuADi405hst6FR_mlOPVIFm2ZP7-pxL5Vj1rOy_Bvw5vUHAc39SU/s1600/bash_linux_www.hackthesec.co.in_.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhD9GeYhBgfA8wipAGEc6HctGGCIw2Bu_7dXIz-YCA5qJFDdSh67sFpth1guy-8FLkPpOjG-716-_wlmglj47-EPqytuADi405hst6FR_mlOPVIFm2ZP7-pxL5Vj1rOy_Bvw5vUHAc39SU/s1600/bash_linux_www.hackthesec.co.in_.jpg" /></a></div>
<div>
<br /></div>
<div>
<table class="exploit_list" style="background-color: rgb(239, 239, 239) !important; border-radius: 3px !important; border-spacing: 1px; border: 1px solid rgb(221, 221, 221) !important; box-sizing: border-box; color: #666666; font-family: 'Open Sans', sans-serif; font-size: 14px; line-height: 24px; margin-bottom: 10px; margin-top: 10px; padding: 1px !important; width: 666px;"><tbody style="box-sizing: border-box;">
<tr style="background-color: rgb(248, 248, 248) !important; box-sizing: border-box;"><td style="box-sizing: border-box; padding: 5px 10px;"><strong style="box-sizing: border-box;">EDB-ID:</strong> 39160</td><td style="box-sizing: border-box; padding: 5px 10px;"><strong style="box-sizing: border-box;">CVE:</strong> N/A</td><td style="box-sizing: border-box; padding: 5px 10px;"><strong style="box-sizing: border-box;">OSVDB-ID:</strong> N/A</td></tr>
<tr style="background-color: rgb(248, 248, 248) !important; box-sizing: border-box;"><td style="box-sizing: border-box; padding: 5px 10px;"><strong style="box-sizing: border-box;">EDB Verified:</strong> <span class="fa fa-times" style="-webkit-font-smoothing: antialiased; box-sizing: border-box; display: inline-block; font-family: FontAwesome; font-size: inherit; font-stretch: normal; line-height: 1; text-rendering: auto;"></span></td><td style="box-sizing: border-box; padding: 5px 10px;"><strong style="box-sizing: border-box;">Author:</strong> <a href="https://www.exploit-db.com/author/?a=8467" style="-webkit-transition-duration: 0.3s; -webkit-transition-property: background-color, box-shadow, border, color, opacity; background-color: transparent; box-sizing: border-box; color: #337ab7; outline: 0px; text-decoration: none; transition-duration: 0.3s; transition-property: background-color, box-shadow, border, color, opacity;">Dennis 'dhn' Herrmann</a></td><td style="box-sizing: border-box; padding: 5px 10px;"><strong style="box-sizing: border-box;">Published:</strong> 2016-01-04</td></tr>
<tr style="background-color: rgb(248, 248, 248) !important; box-sizing: border-box;"><td style="box-sizing: border-box; padding: 5px 10px;"><strong style="box-sizing: border-box;">Download Exploit:</strong> <a href="https://www.exploit-db.com/download/39160" style="-webkit-transition-duration: 0.3s; -webkit-transition-property: background-color, box-shadow, border, color, opacity; background-color: transparent; box-sizing: border-box; color: #337ab7; outline: 0px; text-decoration: none; transition-duration: 0.3s; transition-property: background-color, box-shadow, border, color, opacity;"><span class="fa fa-file-code-o" style="-webkit-font-smoothing: antialiased; box-sizing: border-box; display: inline-block; font-family: FontAwesome; font-size: inherit; font-stretch: normal; line-height: 1; text-rendering: auto;"></span> Source</a> <span class="fa fa-file-o" style="-webkit-font-smoothing: antialiased; box-sizing: border-box; display: inline-block; font-family: FontAwesome; font-size: inherit; font-stretch: normal; line-height: 1; text-rendering: auto;"></span> </td><td colspan="2" style="box-sizing: border-box; padding: 5px 10px;"><strong style="box-sizing: border-box;">Download Vulnerable App:</strong> N/A</td></tr>
</tbody></table>
</div>
</div>

Linux/x86 execve "/bin/sh" - shellcode 24 byte

Linux/x86 execve "/bin/sh" - shellcode 24 byte EDB-ID: 39160 CVE: N/A OSVDB-ID: N/A EDB Verified: Author: Dennis ...