javascript shellcode to c shellcode

最新推荐文章于 2024-08-10 07:52:46 发布

FFE4

最新推荐文章于 2024-08-10 07:52:46 发布

阅读量800

点赞数

CC 4.0 BY-SA版权

分类专栏：心情杂货铺

本文链接：https://blog.youkuaiyun.com/cssxn/article/details/105078639

心情杂货铺专栏收录该内容

47 篇文章

订阅专栏

分析脚本类的shellcode时，需要转成C版本的，更方便调试一些，为此写了一个010editor脚本，一键转换成c格式，并自动复制到剪切板。

新开打开一个tab文件，使用crtl+shift+v粘贴shellcode，删除第一个字节垃圾数据

在这里插入图片描述

然后再用scdbg跑一下shellcode，简单看下调用了哪些API

在这里插入图片描述

#define TITLE "js-shellcode-to-c"


void Main(void)
{
    int iIter;
    int iStart;
    int iSize;
    string sToClipboard;
    string sTemp;

    if (FileCount() == 0)
    {
        MessageBox(idOk, TITLE, "At least one file needs to be open.");
        return;
    }

    // Initializes the variables
    iSize = GetSelSize();
    iStart = GetSelStart();

    // Check that bytes were selected, otherwise process complete file
    if (iSize == 0)
    {
      iSize = FileSize();
      iStart = 0;
    }

    if (iSize > 10000 && MessageBox(idYes | idNo, TITLE, "It could take a long time to process %d bytes, do you want to continue?", iSize) == idNo)
      return;

     int i;
     sTemp = "unsigned char sc[] = \"";
     for(i = 0;i < iSize; i+=6)
     {
       if(i % 8 == 0)
       {
        sTemp += "\n";
       }
       sTemp += "\\x";
       sTemp += ReadString(iStart+i+4,2);
       sTemp += "\\x";
       sTemp += ReadString(iStart+i+2,2);
        
        
       //Printf("%s\n",ReadString(iStart+i+2,4));        
     }
     sTemp+= "\";\n";
     Printf(sTemp);
     ClearClipboard();
     CopyStringToClipboard(sTemp);
     FileNew("Hex");
    
     Printf("Successfully created a new tab with [ 0x%x ] bytes.\n", i);
    
}

Main();