Shellcoding

Programs

runhex.c

Executing C-style hex-escaped string data on the stack.

Prebuilt binaries exist both for Windows and Linux.

Scripts

mkhex.sh

Extracting shellcode from binaries and / or constructing C source code for demonstration or testing.

dishex32.sh / dishex64.sh

Disassembling the given hex string using objdump.

Note that it relies on a unhex command, available at pattern.c, and the Z Shell must be installed due to the use of =().

For example:

./dishex64.sh cccccccc

Linux Shellcode

• exit IA32 7 Bytes Null-Free

• execve /bin/sh IA32 21 Bytes Null-Free

• execve /bin/sh AMD64 23 Bytes Null-Free

Windows Shellcode

• user32!MessageBoxA "Hello World!" All x86 Windows 199 Bytes Null-Free