vladiii Posted July 25, 2007 Report Share Posted July 25, 2007 /* Win32 SetCursorPos Shellcode Length: 92 bytes *//* ;setc.asmsegment .code USE32..start:xor eax, eaxxor ebx, ebxxor ecx, ecxxor edx, edxjmp short functiefunctie2:pop eaxmov byte [eax+10], dlmov ebx, 0x77e7d961 ;LoadLibrarypush eaxcall ebxmov ecx, eaxxor eax, eaxjmp short functie3functie4:pop eaxmov byte [eax+12], dlmov ebx, 0x77e7b332 ;GetProcAddresspush eaxpush ecxcall ebxrestul:push byte 1push byte 1call eax ;SetCursorPosmov ebx, 0x77e798fd ;ExitProcesspush byte 1call ebxfunctie:call functie2db 'user32.dllN'jmp short functie2functie3:call functie4db 'SetCursorPosN' *//* ShellCode Authors: Vladii & SLICK & tot_Zeu Shoutz: DarkByte, Sploit, Shocker, Srdjan, Stefan, ByJunior This shellcode moves the cursor at 1X1 on Desktop. Enjoy!*/#include <stdio.h>#include <windows.h>char shellcode[]="\x31\xC0\x31\xDB\x31\xC9\x31\xD2\xEB\x2E\x58\x88\x50\x0A\xBB""\x61\xD9\xE7\x77\x50\xFF\xD3\x89\xC1\x31\xC0\xEB\x2E\x58\x88""\x50\x0C\xBB\x32\xB3\xE7\x77\x50\x51\xFF\xD3\x6A\x01\x6A\x01""\xFF\xD0\xBB\xFD\x98\xE7\x77\x6A\x00\xFF\xD3\xE8\xCD\xFF\xFF""\xFF\x75\x73\x65\x72\x33\x32\x2E\x64\x6C\x6C\x4E\xEB\xC0\xE8""\xCD\xFF\xFF\xFF\x53\x65\x74\x43\x75\x72\x73\x6F\x72\x50\x6F""\x73\x4E";int main(){ printf ("Shellcode length is: %d\n", strlen(shellcode)); return 0;} Quote Link to comment Share on other sites More sharing options...