Thread: i dont realy get this explain some one?

# run calc.exe
my $shellcode =
"\xfc\xe8\x44\x00\x00\x00\x8b\x45\x3c\x8b\x7c\x05\ x78\x01\xef\x8b".
"\x4f\x18\x8b\x5f\x20\x01\xeb\x49\x8b\x34\x8b\x01\ xee\x31\xc0\x99".
"\xac\x84\xc0\x74\x07\xc1\xca\x0d\x01\xc2\xeb\xf4\ x3b\x54\x24\x04".
"\x75\xe5\x8b\x5f\x24\x01\xeb\x66\x8b\x0c\x4b\x8b\ x5f\x1c\x01\xeb".
"\x8b\x1c\x8b\x01\xeb\x89\x5c\x24\x04\xc3\x31\xc0\ x64\x8b\x40\x30".
"\x85\xc0\x78\x0c\x8b\x40\x0c\x8b\x70\x1c\xad\x8b\ x68\x08\xeb\x09".
"\x8b\x80\xb0\x00\x00\x00\x8b\x68\x3c\x5f\x31\xf6\ x60\x56\x89\xf8".
"\x83\xc0\x7b\x50\x68\x7e\xd8\xe2\x73\x68\x98\xfe\ x8a\x0e\x57\xff".
"\xe7\x63\x61\x6c\x63\x2e\x65\x78\x65\x00";

how come this code invoke calc.exe?
this code is written in perl how does it look if its written in c++?
im a newbie when it comes to cpp

thank you

// Ogelami

Well, the last characters (before 0) are ascii codes spelling "calc.exe". The rest looks pretty much like garbage.

One way to launch another program is system:

Code:

#include <cstdlib>

int main()
{
    system("calc.exe");
}

There are better ways, though.

This looks suspiciously like a payload for a vulnerability exploit.

Please note that according to the forum rules, all posts related to cracking are strictly forbidden.

Originally Posted by anon

Well, the last characters (before 0) are ascii codes spelling "calc.exe". The rest looks pretty much like garbage.

One way to launch another program is system:

Code:

#include <cstdlib>

int main()
{
    system("calc.exe");
}

There are better ways, though.

yes i do know that but is there a way to make it hex encoded or what its called?

,,

yes it's a payload but the purpose is not to exploit...
so im not breaking any rules can some one explain?


and if i am breaking any rules tell me.

The rule is about all posts related to cracking. Unfortunately, we are not mind readers and cannot know your purpose for real. For this reason, we have a very simple stance on the application of the rule. If you want more information, you'll have to find it on your own.