This is a shellcode that pop a MessageBox and show the text "Pwn3d by h4pp1n3ss". In order to accomplish this task the shellcode uses the PEB method to locate the baseAddress of the required module and the Export Directory Table to locate symbols. Also the shellcode uses a hash function to gather dynamically the required symbols without worry about the length.
- Author: h4pp1n3ss
- Date: Wed 09/23/2021
- Tested on: Microsoft Windows [Version 10.0.19042.1237]
This shellcode uses two Windows API
MessageBoxA Function Prototype
int MessageBoxA(
HWND hWnd,
LPCSTR lpText,
LPCSTR lpCaption,
UINT uType
);and
TerminateProcess Function Prototype
BOOL TerminateProcess(
HANDLE hProcess, -> 0xffffffff
UINT uExitCode -> EAX
);