Foro de elhacker.net

Seguridad Informática => Análisis y Diseño de Malware => Mensaje iniciado por: Harmmy en 1 Agosto 2012, 06:51 am



Título: Vb6 shellcode help ayuda :(
Publicado por: Harmmy en 1 Agosto 2012, 06:51 am
want to learn win32 shellcode

Who knows to help

Visual basic 6

sample :

Dim sHex      As String     

  sHex = "5589E583C4F831D28955FC8955F8EB0EE8xxxxx01x83F802742085C07423E82A000000837DF800750AE828000000E83A0000008B45FCC9C20C00E817000000EBF268xxxxx02xE8xxxxx03xEBE631D24AE820000000C3FF7510FF750CFF750868xxxxx04xE8xxxxx05x8945FCC331D2E801000000C38D4510508D450C508D4508508D45FC508D45F85052B8xxxxx06x508B00FF501CC3"

Quiero aprender

help


Visual basic6
¿Cómo hizo shellcode.
cómo utilizar código shell.
Quiero aprender.


Título: Re: Vb6 shellcode help ayuda :(
Publicado por: Harmmy en 1 Agosto 2012, 20:02 pm
ayuda :S :(


Título: Re: Vb6 shellcode help ayuda :(
Publicado por: MCKSys Argentina en 1 Agosto 2012, 20:32 pm
What do you want to know? How to use them from vb6?


Título: Re: Vb6 shellcode help ayuda :(
Publicado por: Harmmy en 1 Agosto 2012, 23:16 pm
I want to learn the construction and use of shellcode.
Can you take a sample video?


Título: Re: Vb6 shellcode help ayuda :(
Publicado por: [L]ord [R]NA en 2 Agosto 2012, 01:23 am
Harmmy you can find a book called The Shellcode's Handbook


Título: Re: Vb6 shellcode help ayuda :(
Publicado por: Harmmy en 3 Agosto 2012, 07:33 am
Ayda :(


Título: Re: Vb6 shellcode help ayuda :(
Publicado por: MCKSys Argentina en 3 Agosto 2012, 20:53 pm
To create shellcodes, you must understand ASM.

To call ASM code from VB6 you can use CallWindowProc with the address of and array of bytes that holds the ASM code.

In that way you can execute the code. Also, notice that because the code is inside of an array, it will be executed in the heap. If DEP is enabled for all apps, this method will fail.

Código:
Option Base 0
Private Declare Function CallWindowProc Lib "user32" Alias "CallWindowProcA" (ByVal lpPrevWndFunc As Long, ByVal hwnd As Long, ByVal Msg As Long, ByVal wParam As Long, ByVal lParam As Long) As Long

Dim Code() As Byte

Redim Code (2)

Code(0) = &H90 'NOP
Code(1) = &H90 'NOP

'And you call it like this

CallWindowProc VarPtr(Code(0)), lngParam1, lngParam2, lngParam3, lngParam4


The previous code will execute 2 NOPs instructions (does nothing).

There are several post in this forum that you can consult. Use the Searcher.


Título: Re: Vb6 shellcode help ayuda :(
Publicado por: Harmmy en 4 Agosto 2012, 09:17 am
Shellcode show to give a message?


Título: Re: Vb6 shellcode help ayuda :(
Publicado por: fary en 7 Agosto 2012, 13:51 pm
http://www.karmany.net/index.php/programacion-software/25-programacion-vb6/132-codigo-ensamblador-en-visual-basic-6


Título: Re: Vb6 shellcode help ayuda :(
Publicado por: Harmmy en 7 Agosto 2012, 18:44 pm
very Thanks