Full Version: Shellcoding For Win32
Rampage
hello all...i'm a bit n00b to this but... i wonder if there are docs around showing how to write down shellcodes for win32 systems.... not an advanced docs.. only for the basics.... so that i can start playing a bit with it smile.gif

if needed also an ASM quickstart guide is wellcome

thnx in advice smile.gif

CraZy_A
http://www.metasploit.com/shellcode.html

might help
Rampage
This is gonna help very much smile.gif thnx a lot m8...

i hope it's easy to understand... coz well... i can be compared to a housewife who starts learning this stuff for the first time smile.gif and i need to learn the basis first of all like how to create my own shellcode with easy examples not necessary usefull for binding shells and so on
for example how to write a shellcode for writing hello world in a dos terminal and so on.... just to understand how to do my own stuff by myself and how to implement it in C code and execute it.... but basically how to bring an asm code and convert it into a shellcode.......

there is also another thing i can't understand.......
why a shellcode is always fragmented into different parts?

for example
CODE

char code[] =
"\x66\x81\xec\x80\x00\x89\xe6\xe8\xba\x00\x00\x00\x89\x06\xff\x36"
"\x68\x8e\x4e\x0e\xec\xe8\xc1\x00\x00\x00\x89\x46\x08\x31\xc0\x50"


can't be
CODE

char code[] =
"\x66\x81\xec\x80\x00\x89\xe6\xe8\xba\x00\x00\x00\x89\x06\xff\x36\x68\x8e\x4e\x0e\xec\xe8\xc1\x00\x00\x00\x89\x46\x08\x31\xc0\x50"


well that's a thing i can't understand LoL
after this post u r allowed to treat me like an eternal fool biggrin.gif
Rojodos
Well, If you see it well, the best scode has 16 columns....

Like when you open an archive to edit it (in HEX mode)

Programmers understand better this metod (i think xD)

And its better for debug, and not to make errors in writing in memory/stack.

16/4 --> 4 addresses of MEM.

Sorry for this bad explanation and for my really bad english wink.gif

Rampage
ic ic smile.gif i understhood it all thnx m8.... and about the docs?
^^
Lemongreen
Hey,


I am looking for a shellcode for win32, altho my requirement are very specific.
I need a shellcode (bind or reserver) with a size under 241bytes... This is very small, altho if possible, i will have a brand new xploit for you guys smile.gif


Thanks,
Lemongreen
Rampage
that's cool.... well
but i dunno how to code it :(else i would have posted it here in a couple of secs
mksone
check out www.metasploit.com for the shell code. Not sure about the size but you should find something there. If not www.hack.co.za should have something.
Good Luck.
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.

 
Invision Power Board © 2001-2005 Invision Power Services, Inc.