Skypher

2 Comments to “w32-exec-calc-shellcode released”

1. Peter Ferrie
   2011/01/01

   I have x86 all versions null-free in 67 bytes.
   Hashing uses too many bytes.

   I published a pre-7 version that pops cmd.exe. It’s in the first
   shellcode presentation on my site. It’s only a
   slight alteration to pop calc.exe instead, and Windows 7 compatibility
   requires only two additional bytes.
   That presentation also includes a size-optimised uppercase-only shellcode.
   Maybe you can find something there to interest you.
2. SkyLined
   2011/01/02

   Yes, you are right; I used my hashing code from previous shellcode without considering if it is the best solution. Since I’m only making one API call, your solution to look for a function that starts with “WinE” is a lot smaller.

Leave a Comment