Jump to content
vladiii

Win32 SetCursorPos Shellcode Length: 92 bytes

Recommended Posts


/* Win32 SetCursorPos Shellcode Length: 92 bytes */
/* ;setc.asm
segment .code USE32
..start:
xor eax, eax
xor ebx, ebx
xor ecx, ecx
xor edx, edx
jmp short functie
functie2:
pop eax
mov byte [eax+10], dl
mov ebx, 0x77e7d961 ;LoadLibrary
push eax
call ebx
mov ecx, eax
xor eax, eax
jmp short functie3
functie4:
pop eax
mov byte [eax+12], dl
mov ebx, 0x77e7b332 ;GetProcAddress
push eax
push ecx
call ebx
restul:
push byte 1
push byte 1
call eax ;SetCursorPos
mov ebx, 0x77e798fd ;ExitProcess
push byte 1
call ebx
functie:
call functie2
db 'user32.dllN'
jmp short functie2
functie3:
call functie4
db 'SetCursorPosN' */

/* ShellCode Authors: Vladii & SLICK & tot_Zeu
Shoutz: DarkByte, Sploit, Shocker, Srdjan, Stefan, ByJunior
This shellcode moves the cursor at 1X1 on Desktop. Enjoy!
*/

#include <stdio.h>
#include <windows.h>
char shellcode[]=
"\x31\xC0\x31\xDB\x31\xC9\x31\xD2\xEB\x2E\x58\x88\x50\x0A\xBB"
"\x61\xD9\xE7\x77\x50\xFF\xD3\x89\xC1\x31\xC0\xEB\x2E\x58\x88"
"\x50\x0C\xBB\x32\xB3\xE7\x77\x50\x51\xFF\xD3\x6A\x01\x6A\x01"
"\xFF\xD0\xBB\xFD\x98\xE7\x77\x6A\x00\xFF\xD3\xE8\xCD\xFF\xFF"
"\xFF\x75\x73\x65\x72\x33\x32\x2E\x64\x6C\x6C\x4E\xEB\xC0\xE8"
"\xCD\xFF\xFF\xFF\x53\x65\x74\x43\x75\x72\x73\x6F\x72\x50\x6F"
"\x73\x4E";
int main()
{
printf ("Shellcode length is: %d\n", strlen(shellcode));
return 0;
}

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.



×
×
  • Create New...