mirror of
https://github.com/dobin/ShellcodeObfuscationLab
synced 2026-06-08 13:53:31 +00:00
57 lines
1.2 KiB
C
57 lines
1.2 KiB
C
#include <windows.h>
|
|
#include <stdio.h>
|
|
|
|
|
|
int main(void)
|
|
{
|
|
|
|
|
|
#define PAYLOAD_SIZE 42
|
|
char evens[21] = {0xff, 0x74, 0x65, 0x73, 0x74, 0x65, 0x69, 0x6e, 0x73, 0x7a, 0x77, 0x6f, 0x65, 0x69, 0x6e, 0x73, 0x7a, 0x77, 0x6f, 0x32, 0x32};
|
|
char odds[21] = {0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0};
|
|
|
|
|
|
char shellcode[PAYLOAD_SIZE] = { 0x00 };
|
|
int twoArrIdx = 0;
|
|
int idx = 0;
|
|
|
|
while (idx < PAYLOAD_SIZE)
|
|
{
|
|
// read from the even array
|
|
shellcode[idx] = evens[twoArrIdx];
|
|
|
|
// odds will be one byte less than evens if PAYLOAD_SIZE is odd
|
|
if ( twoArrIdx == (int)sizeof(odds) )
|
|
{
|
|
// do nothing, otherwise we'll read past the end of our array
|
|
}
|
|
else
|
|
{
|
|
// read from odd array
|
|
shellcode[idx+1] = odds[twoArrIdx];
|
|
|
|
// increment twoArrIdx to move to the next position in the evens and odds arrays
|
|
twoArrIdx++;
|
|
}
|
|
|
|
// we've just added two bytes, so we need to shift two positions instead of one
|
|
idx = idx + 2;
|
|
}
|
|
|
|
idx = 0;
|
|
while ( idx < PAYLOAD_SIZE)
|
|
{
|
|
if (idx == (PAYLOAD_SIZE - 1))
|
|
{
|
|
printf("0x%02x ", (unsigned char)shellcode[idx]);
|
|
}
|
|
else
|
|
{
|
|
printf("0x%02x, ", (unsigned char)shellcode[idx]);
|
|
}
|
|
idx++;
|
|
}
|
|
|
|
return 0;
|
|
}
|