Note of Exploiting

[SC] pluswrite.s : 2006-11-26

.globl main 
main:

    jmp    ONE 

TWO:
    #open 
    popl   %ebx 
    xorl   %eax,   %eax 
    movb   %al,    4(%ebx) 
    movb   $0x5,   %al 
    xorl   %ecx,   %ecx 
    inc    %ecx 
    int    $0x80 

    add    $0x5,   %ebx 
    movl   %ebx,   %esi
    movl   %eax,   %ebx

    #lseek off_t lseek(int fildes, off_t offset, int whence) 19
    xorl   %ecx,   %ecx
    xorl   %edx,   %edx
    inc    %edx
    inc    %edx
    xorl   %eax,   %eax
    movb   $19,    %al
    int    $0x80

    #write
    xorl   %eax,   %eax
    movb   $0x4,   %al
    movl   %esi,   %ecx
    movb   $0x0a,  5(%ecx)
    xorl   %edx,   %edx
    movb   %dl,    6(%ecx)
    movb   $0x06,  %dl
    int    $0x80

    #close
    movb   $0x6,   %al
    int    $0x80

    #exit
    xorl   %eax,   %eax
    movb   $0x1,   %al
    xorl   %ebx,   %ebx
    int    $0x80

ONE: 
    call    TWO 
    .string "testXHello"#0a