im looking for a bindshell code that binds a shell to a port so i can connect with netcat, i have tried the one @ www.metasploit.com but i dont know witch port it binds.. ive searching google for it but no results.. anyone have a good one? port-number dont matter

tnx in adv.

to find here http://metasploit.com/index.html

yeah i know but look:

Win32 Bind Shell

This payload will load winsock, listen on a port, and spawn a cmd.exe shell when a connection is made. It will call WaitForSingleObject with an infinite timeout and then ExitProcess when the cmd.exe process has terminated. This payload has been tested on many service packs of Windows NT 4.0, Windows 2000, and Windows XP. This payload will NOT work on Windows 9x since cmd.exe does not exist and command.com can't send its output back to the socket.

Assembled Size: 356 bytes

- Win32 Bind Shell ASM
- Win32 Bind Shell C
- Win32 Bind Shell Perl
- Win32 Bind Shell Exe MD5 (7995b0f4b8ab2f0ee2166ee51ae2048f)

---------------------------------------------------------------------------------------
ok this is the whole description but now i still don't know witch port it binds

Just start it and then look with fport or something else.

This Shellcode binds on port 8721/tcp.

If you read the asm code it looks like port 8721

jup but i dont works

ive this one now.. ive tried to compile with MS Visual studio .net and lcc-win32.. but i can't find the right method to compile it..

VC++ should work ok, I dont have it on this pc to test atm tho

what sort of errors are you getting?

missing dll's ect.. i have never compiled things propertly.. i even can't find the make button in visual studio to hard job for me, compilling is realy something for programmers.. not for me..

copy and paste the errors in the message window here, and i'll have a look.

I did notice it's hardcoded for WinXP SP1, I'm not sure if it'll compile let alone run under other os's becuse the funtions are hardcoded by address rather than name.

use the one from metasploit it works very well ...normally it binds a shell @port 8721 if u have a brain i can explain u how to change this port in a few minutes.

-- addition: What doesn't work on ur system? -> load the *.exe start the exe at the commandline and connect...thats all.



To change the port u only need

a c-compiler
an assembly tool like masm

and perhaps my lineFilter-proggie or any other proggie to replace/manipulate in textfiles to make it easier to format the shellcode.


btw. i learned this on one afternoon so it isn't really hard stuff..

sorry my fault, indeed the one from metasploit worx on port 8721, tested prperly and works now... tnx!

btw just curious but what is hard-coded

it means that instead of setting the code to look for veriables, or differing address's that are named the same, it looks for an EXACT name or an EXACT address..

this means that it will only work on one operating system. some times only one release of one operating system due to the way they are built.

it basicaly means that you cant change the program if you want it to run on win 98 and stuff like that cos its lookin for somfin in XP that you cant change

reapz