Shulou(Shulou.com)05/31 Report--

This article is to share with you about how to use Shellex. The editor thinks it is very practical, so share it with you as a reference and follow the editor to have a look.

Shellex

Shellex is a powerful C-shellcode converter that can help researchers convert C-shellcode to hexadecimal code and paste and execute shellcode in gdb, windbg, radare2, ollydbg, x64dbg, immunity debuggers and 010 editors.

With the help of Shellex, the majority of researchers can convert C-shellcode code to hexadecimal code, and it can also be converted at compile time in C compiler. The whole process only needs to execute Shellex, copy the shellcode code and press enter.

For example, we can convert multiple lines of C-shellcode mixed with ASCII code (notice the mixing section\ x68//sh\ x68/bin\ x89):

"\ x6a\ x17\ x58\ x31\ xdb\ xcd\ x80"\ x6a\ x0b\ x58\ x99\ x52\ x68//sh\ x68/bin\ x89\ xe3\ x52\ x53\ x89\ xe1\ xcd\ x80"

The Shellex output is as follows:

6A 17 58 31 DB CD 80 6A 0B 58 99 52 68 2F 2F 73 68 68 2F 62 69 6E 89 E3 52 53 89 E1 CD 80

Transform the C-shellcode that contains the comment code:

"\ x68"\ x7f\ X01\ X01" / / type sc.txt "\ x6a\ x17\ x58\ X31\ xdb\ xcd\ x80"\ x6a\ x0b\ x58\ x99\ x52\ x68//sh\ x68/bin\ x89\ xe3\ x53\ x89\ xe1\ xcd\ x80" C:\ Users\ Dreg\ Desktop\ shellex\ bins > type sc.txt | shellex.exe

Write multi-line files under Linux:

Dreg@fr33project# cat sc.txt "\ x6a\ x17\ x58\ x31\ xdb\ xcd\ x80"\ x6a\ x0b\ x58\ x99\ x52\ x68//sh\ x68/bin\ x89\ xe3\ x52\ x53\ x89\ xe1\ xcd\ x80" dreg@fr33project# cat sc.txt | shellex Thank you for reading! This is the end of the article on "how to use Shellex". I hope the above content can be of some help to you, so that you can learn more knowledge. if you think the article is good, you can share it for more people to see!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.