Add files via upload

Author: XlogicX

ASM_x86/LinuxAPI_07_uname.asm

@@ -0,0 +1,28 @@
+;Example of using the uname API. API calls found in this example program:
+; 	uname, exit
+; High level description of what theis example program does:
+;	Simply calls uname and stores the result in memory pointer
+
+section .text
+global _start
+
+_start:
+
+; Get uname data
+;------------------------------------------------------------------------------
+	mov 	eax, 109		; uname
+    mov 	ebx, sysname	; Pointer to where you want the data
+    int    	0x80
+
+; Exit
+;------------------------------------------------------------------------------
+	mov 	eax, 1
+	int 	0x80
+
+
+section .bss
+	sysname resb 65		; Probably 'Linux'
+	nodename resb 65	; Hostname in my case
+	release resb 65		; Kernel version
+	version resb 65		; Version details
+	machine resb 65		; Architecture

ASM_x86/LinuxAPI_11_sigaction.asm

@@ -0,0 +1,89 @@
+;Example of intercepting a signal with our own handler using the signal API. API calls found in this example program:
+; 	signal, write, exit
+; High level description of what theis example program does:
+;	Set up a signal handler to 'handle_it' using signal API
+;	Proceed into infinite Loop
+;	In 'handle_it' tell user that 'ctrl+C'd to fuck off, 
+;		then set up new signal handler to exit if ctrl+C is used
+;		return to infinite Loop
+;	If Ctrl+C is pressed again, program prints a message indicating defeat and exits
+
+section .text
+global _start
+
+_start:
+
+; Set up signal handler to intercept SIGINT (CTRL+C)
+;------------------------------------------------------------------------------
+	mov 	eax, 48			; signal
+    mov 	ebx, 2			; SIGINT
+    mov		ecx, handle_it	; Address to signal handler when catching sigint
+    int    	0x80
+
+; Infinit Loop
+;------------------------------------------------------------------------------
+iloop:
+	jmp iloop
+
+; Handler for Interupt Signal
+;------------------------------------------------------------------------------
+handle_it:
+	mov		eax, 4				; write
+	mov		ebx, 1				; stdout
+	mov		ecx, message	 	; '^C <- Nah, Fuck you!'
+	mov		edx, 19				; how many bytes to print
+	int		0x80
+	mov 	eax, 48				; new signal
+    mov 	ebx, 2				; SIGINT
+    mov		ecx, exit			; Exit this time
+    int    	0x80
+	ret							; but for now, go back to our infinite loop
+
+; Exit
+;------------------------------------------------------------------------------
+exit:
+	mov		eax, 4				; write
+	mov		ebx, 1				; stdout
+	mov		ecx, message2	 	; '^C Fine...'
+	mov		edx, 9				; how many bytes to print
+	int		0x80
+	mov 	eax, 1
+	int 	0x80
+
+section .data
+	message db ' <- Nah, Fuck you!', 0x0a
+	message2 db ' Fine...', 0x0a
+
+; All the standard signal codez
+;------------------------------------------------------------------------------
+; 1		- SIGHUP	- Hangup
+; 2		- SIGINT	- Terminal interrupt
+; 3		- SIGQUIT	- Terminal quit
+; 4		- SIGILL	- Illegal instruction
+; 5		- SIGTRAP	- Trace/breakpoint trap
+; 6 	- SIGABRT 	- Abort process
+; 7		- SIGBUS	- Memory access error
+; 8		- SIGFPE	- Arithmetic exception
+; 9		- SIGKILL	- Sure Kill
+; 10	- SIGUSR1	- User-defined signal 1
+; 11	- SIGSEGV	- Invalid memory reference
+; 12	- SIGUSR2	- User-defined signal 2
+; 13	- SIGPIP	- Broken pipe
+; 14 	- SIGALRM 	- Real-time timer expired
+; 15	- SIGTERM	- Terminate process
+; 16	- SIGSTKFLT - Stack fault on coprocessor
+; 17	- SIGCHLD	- Child terminated or stopped
+; 18	- SIGCONT	- Continue if stopped
+; 19	- SIGSTOP	- Sure stop
+; 20	- SIGTSTP	- Terminal stop
+; 21	- SIGTTIN	- Terminal read from BG
+; 22	- SIGTTOU	- Terminal write from BG
+; 23	- SIGURG	- Urgent data on socket
+; 24	- SIGXCPU	- CPU time limit exceeded
+; 25	- SIGXFSZ	- File size limit exceeded
+; 26	- SIGVTALRM	- Virtual timer expired
+; 27	- SIGPROF	- Profiling timer expired
+; 28	- SIGWINCH	- Terminal window size change
+; 29	- SIGIO/POLL- I/O possible
+; 30	- SIGPWR	- Power about to fail
+; 31	- SIGSYS	- Invalid system call

ASM_x86/LinuxAPI_12_kill.asm

@@ -0,0 +1,38 @@
+; MURDER-SUICIDE
+;Example of killing a process with the kill API. API calls found in this example program:
+; 	kill
+; Go back in time and identify parent (using ppid API)
+; Murder parent, effectively killing current-time self:
+;	Murder Suicide
+
+section .text
+global _start
+
+_start:
+
+; Get Parent Process ID
+;------------------------------------------------------------------------------
+	mov		eax, 64		; get the Parent Process ID of self getppid()
+	int		0x80
+	mov		[ppid], eax	; make note of Parent process ID
+
+; Kill Parent
+;------------------------------------------------------------------------------
+	mov 	eax, 37			; kill
+    mov 	ebx, [ppid]		; Parent's process ID (Could be bash, could be gdb)
+    mov		ecx, 9			; kill -9
+    int    	0x80
+
+section .bss
+	ppid resb 4
+
+; Some misc notes on return value from kill API call
+;------------------------------------------------------------------------------
+; You can set the sig field (in ecx) to 0, which doesn't do any killing at all
+; 	but it does offer some good recon about the process with the following
+;	return codes:
+; If response is -3 (ESRCH), the process doesn't exist
+;	This is a hacky way of seeing if a process ID exists or notes
+; If response is -1 (EPERM), you don't have permissions to kill the process
+;	But it does confirm that the process exists
+; If response is 0 (no error), not only does the process exist, but you can kill it