Jump to content
vladiii

Win32 SetCursorPos Shellcode Length: 92 bytes

Recommended Posts

Posted

/* Win32 SetCursorPos Shellcode Length: 92 bytes */
/* ;setc.asm
segment .code USE32
..start:
xor eax, eax
xor ebx, ebx
xor ecx, ecx
xor edx, edx
jmp short functie
functie2:
pop eax
mov byte [eax+10], dl
mov ebx, 0x77e7d961 ;LoadLibrary
push eax
call ebx
mov ecx, eax
xor eax, eax
jmp short functie3
functie4:
pop eax
mov byte [eax+12], dl
mov ebx, 0x77e7b332 ;GetProcAddress
push eax
push ecx
call ebx
restul:
push byte 1
push byte 1
call eax ;SetCursorPos
mov ebx, 0x77e798fd ;ExitProcess
push byte 1
call ebx
functie:
call functie2
db 'user32.dllN'
jmp short functie2
functie3:
call functie4
db 'SetCursorPosN' */

/* ShellCode Authors: Vladii & SLICK & tot_Zeu
Shoutz: DarkByte, Sploit, Shocker, Srdjan, Stefan, ByJunior
This shellcode moves the cursor at 1X1 on Desktop. Enjoy!
*/

#include <stdio.h>
#include <windows.h>
char shellcode[]=
"\x31\xC0\x31\xDB\x31\xC9\x31\xD2\xEB\x2E\x58\x88\x50\x0A\xBB"
"\x61\xD9\xE7\x77\x50\xFF\xD3\x89\xC1\x31\xC0\xEB\x2E\x58\x88"
"\x50\x0C\xBB\x32\xB3\xE7\x77\x50\x51\xFF\xD3\x6A\x01\x6A\x01"
"\xFF\xD0\xBB\xFD\x98\xE7\x77\x6A\x00\xFF\xD3\xE8\xCD\xFF\xFF"
"\xFF\x75\x73\x65\x72\x33\x32\x2E\x64\x6C\x6C\x4E\xEB\xC0\xE8"
"\xCD\xFF\xFF\xFF\x53\x65\x74\x43\x75\x72\x73\x6F\x72\x50\x6F"
"\x73\x4E";
int main()
{
printf ("Shellcode length is: %d\n", strlen(shellcode));
return 0;
}

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.



×
×
  • Create New...