6 replies to this topic

[T1T4N]

FIRST, If this is in the wrong section, mods please move

OK, so I have been searching for a pretty long time on the internet, and still haven't found an answer ...

I am trying to understand how to convert binary i got coded in MASM/FASM to C++ Shellcode (in a array), under WINDOWS ....

I have read that to make a shellcode u gotta have pure code...
I got some MASM / FASM sources that do not have any outer imports like libraries and stuff ...

Soo ... IF anyone knows, please post a link, or explain how do i make my MASM/FASM source/binary to a C++ shellcode, so it looks like this

CHAR ShellCode[] =
 	    "\xE8\x01\x00\x00\x00\xC3\x55\x89\xE5\x83\xEC\x24\x89\x45\xDC\x89"
    "\x5D\xE0\x89\x4D\xE4\x31\xC0\x31\xDB\x31\xC9\x64\x8B\x71\x30\x8B"
    "\x76\x0C\x8B\x76\x1C\x8B\x46\x08\x8B\x7E\x20\x8B\x36\x38\x4F\x18"
    "\x75\xF3\x89\x45\xEC\x89\xC6\x03\x70\x3C\x89\x75\xF0\x83\xC6\x78"
    "\x03\x06\x89\x45\xF8\x8B\x5D\xEC\x03\x58\x20\x89\x5D\xF4\x8B\x7D";

Anything related to shellcode creation and usage in C++ under WINDOWS, is welcome
Thanks in advance, T!T@N

[webdevil]

Compile the code to binary.
Hexdump the file and you have the shellcode.

[T1T4N]

Edit:
I got the shellcode executed under Windows XP, but it won't run under Windows 7 x64
Btw, the shellcode only pushes 0 to stack 4 times, and then calls ebx...

[webdevil]

That probably indicates it isn't meant for win7.
Time to rewrite.

[T1T4N]

What is there to re-write of

push 0
push 0
push 0
push 0
call ebx

?

[webdevil]

It won't be that simple.
The logic changes for win7.

Since you're trying it on a 64bit machine all the registers will change as well.

[T1T4N]

I found the answer ... I gotta do a VirtualProtect on my shellcode before I use it then it works ok ...
The reason it did not work, probably was DEP... with virtual protect, i give the shellcode read-write permissions and its all ok
This thread can be closed