DLL注入之SHELLCODE数据转换-LMLPHP

#include "stdafx.h"
#include <stdio.h>
#include <string.h>
#include <conio.h>
#include <Windows.h> char shellcode[] = "\x31\xd2\xb2\x30\x64\x8b\x12\x8b\x52\x0c\x8b\x52\x1c\x8b\x42"
"\x08\x8b\x72\x20\x8b\x12\x80\x7e\x0c\x33\x75\xf2\x89\xc7\x03"
"\x78\x3c\x8b\x57\x78\x01\xc2\x8b\x7a\x20\x01\xc7\x31\xed\x8b"
"\x34\xaf\x01\xc6\x45\x81\x3e\x46\x61\x74\x61\x75\xf2\x81\x7e"
"\x08\x45\x78\x69\x74\x75\xe9\x8b\x7a\x24\x01\xc7\x66\x8b\x2c"
"\x6f\x8b\x7a\x1c\x01\xc7\x8b\x7c\xaf\xfc\x01\xc7\x68\x79\x74"
"\x65\x01\x68\x6b\x65\x6e\x42\x68\x20\x42\x72\x6f\x89\xe1\xfe"
"\x49\x0b\x31\xc0\x51\x50\xff\xd7"; int HextoBin(char* input)
{
FILE* fp;
if ((fp = fopen(input,"wb")) == NULL)
{
printf("[-]:HextoBin files:%s not find\r\n",input);
return ;
} fwrite(shellcode,,sizeof(shellcode) -,fp);
fclose(fp);
printf("[*]:Bin files suscess Convert,check Files:%s\r\n",input);
return ;
} int Bin2Hex(char* src,char* des)
{
FILE *fi,*fo;
unsigned int n;
int c; if ((fi = fopen(src,"rb")) == NULL)
{
cprintf("Can not find file %s",src);
return ;
} if ((fo=fopen(des,"w"))==NULL)
{
fclose(fi);
cprintf("Can not create file %s",des);
return ;
} n=;
while ()
{
c=fgetc(fi);
if (EOF==c) break;
n++;
if (==n) fprintf(fo, "\"\\x%02X",c);
else {
if (==n%) fprintf(fo,"\"\n\"\\x%02X",c);
else fprintf(fo, "\\x%02X",c);
}
}
fprintf(fo,"\"");
fcloseall();
cprintf("OK to Bin2Hex %u bytes.",n);
return ;
} void help(char* proc)
{
printf("[-]:%s Srcfile Descfile\r\n",proc);
printf("[-]:%s -hex shellcode.bin Convert.hex\r\n",proc);
printf("[-]:%s -bin Convert.bin\r\n",proc);
} //-------------------------------------------------------
int main(int argc,char *argv[])
{ if (argc == )
{
if (stricmp(argv[],"-hex") == )
{
char* src = argv[];
char* des = argv[];
Bin2Hex(src,des); }else
{
help(argv[]);
exit();
}
}else if (argc == )
{
if (stricmp(argv[],"-bin") == )
{
char* outfile = argv[];
HextoBin(outfile);
}else
{
help(argv[]);
exit();
}
}else
{
help(argv[]);
exit();
} return ;
}

详细参数说明:

当把shellcode写入代码shellcode变量的时候,输入-bin shellcode.bin 将生成二进制文件数据流。

当需要把二进制数据流转换成hex(16进制的时候)输入-hex shellcode.bin hex.hex

具体请看代码。这是博主自己的学习笔记,请勿喷。

05-27 07:48