Home

Awesome

win-exec-calc-shellcode

Small null-free shellcode that execute calc.exe. Runs on x86 and x64 versions of Windows 5.0-6.3 (2000, XP, 2003, 2008, 7, 8, 8.1), all service packs.

Sizes (build 306)

<table class="wikitable"> <tr> <td style="border: 1px solid #ccc; padding: 5px;"> platform </td> <td style="border: 1px solid #ccc; padding: 5px;"> size </td> <td style="border: 1px solid #ccc; padding: 5px;"> stack align </td> <td style="border: 1px solid #ccc; padding: 5px;"> function wrapper </td> <td style="border: 1px solid #ccc; padding: 5px;"> func+save regs </td> <td style="border: 1px solid #ccc; padding: 5px;"> func+stack </td> <td style="border: 1px solid #ccc; padding: 5px;"> func+stack+regs </td> </tr><tr> <td style="border: 1px solid #ccc; padding: 5px;"> x86 </td> <td style="border: 1px solid #ccc; padding: 5px;"> 72 </td> <td style="border: 1px solid #ccc; padding: 5px;"> 75 </td> <td style="border: 1px solid #ccc; padding: 5px;"> 77 </td> <td style="border: 1px solid #ccc; padding: 5px;"> 77 </td> <td style="border: 1px solid #ccc; padding: 5px;"> 84 </td> <td style="border: 1px solid #ccc; padding: 5px;"> 84 </td> </tr><tr> <td style="border: 1px solid #ccc; padding: 5px;"> x64 </td> <td style="border: 1px solid #ccc; padding: 5px;"> 85 </td> <td style="border: 1px solid #ccc; padding: 5px;"> 90 </td> <td style="border: 1px solid #ccc; padding: 5px;"> 98 </td> <td style="border: 1px solid #ccc; padding: 5px;"> 105 </td> <td style="border: 1px solid #ccc; padding: 5px;"> 106 </td> <td style="border: 1px solid #ccc; padding: 5px;"> 112 </td> </tr><tr> <td style="border: 1px solid #ccc; padding: 5px;"> x86+x64 </td> <td style="border: 1px solid #ccc; padding: 5px;"> 113 </td> <td style="border: 1px solid #ccc; padding: 5px;"> 118 </td> <td style="border: 1px solid #ccc; padding: 5px;"> 179 </td> <td style="border: 1px solid #ccc; padding: 5px;"> 188 </td> <td style="border: 1px solid #ccc; padding: 5px;"> 188 </td> <td style="border: 1px solid #ccc; padding: 5px;"> 196 </td> </tr> </table>

Features

Credits

<a href="http://skylined.nl/">Skylined</a> and <a href="http://pferrie.host22.com/">Peter Ferrie</a>