Shell-spawning shellcode that is smaller than 295 bytes

Question

I want shell-spawning shellcodes that is smaller than 295 bytes. Metasploit usually produces shell-spawning shellcodes that are (far) more than 300 bytes.

Or is there anyway I can compress the shell-spawning shellcode?

Edit: I need these shellcodes for Windows XP/2003.

Q: Are you a good guy, or are you trying to write an exploit? — paulsm4, Sep 02 '12 at 03:59
@paulsm4 wannabe-penetration tester :) So good guy. But that involves bits of writing an exploit.. — user1613156, Sep 02 '12 at 03:59
The size of the shellcode depends pretty heavily on what you want it to do... — DCoder, Sep 02 '12 at 05:37
This question was also asked [on security.stackexchange.com](http://security.stackexchange.com/q/19632) — glenn jackman, Sep 02 '12 at 12:54

score 1 · Answer 1 · answered Sep 02 '12 at 05:30

1

Try using aleph1's shellcode. It should be small enough. http://www.phrack.org/issues.html?issue=49&id=14#article

answered Sep 02 '12 at 05:30

yzernik

1,161
2
13
19

score 0 · Answer 2 · answered Jan 13 '13 at 16:32

Did you try Shell-Storm?

http://www.shell-storm.org/shellcode/shellcode-windows.php

There are a few shell-spawning shellcodes, and other payloads as well. For example:

http://www.shell-storm.org/shellcode/files/shellcode-710.php

http://www.shell-storm.org/shellcode/files/shellcode-705.php

Or you would try a download-and-exec shellcode and put the Metasploit payload in an EXE file.

Shell-spawning shellcode that is smaller than 295 bytes

2 Answers2