Klasik PoC Shellcode - Windows x86 - 109 Bytes

Windows/x86 MessageBox Shellcode - 109 Bytes

Buffer overflow zafiyeti ispati icin kullanilan zararsiz PoC shellcode. Gercek saldiri yerine yalnizca ekranda dialog kutusu gostererek sistemin somuruldugunu kanitlar.

Hex Opcode

Shellcode icindeki hash tabanli API lookup ile user32.dll MessageBoxA bulunur ve cagrilir.

\x31\xd2\xb2\x30\x64\x8b\x12\x8b\x52\x0c \x8b\x52\x1c\x8b\x42\x08\x8b\x72\x20\x8b \x12\x80\x7e\x0c\x33\x75\xf2\x89\xc7\x03 \x78\x3c\x8b\x57\x78\x01\xc2\x8b\x7a\x20 \x01\xc7\x31\xed\x8b\x34\xaf\x01\xc6\x45

VirtualAlloc ile Test

#include char sc[] = "\x31\xd2..."; // yukaridaki hex int main() { LPVOID m = VirtualAlloc(NULL, sizeof(sc), MEM_COMMIT, PAGE_EXECUTE_READWRITE); memcpy(m, sc, sizeof(sc)); ((void(*)())m)(); }

BUG BOUNTY PoC Standardi

Gercek exploit kanitlamada calc.exe veya MessageBox gostermek, zafiyetin guvenli kaniti olarak kabul edilir.