How to write and execute PURE machine code manually without containers like EXE or ELF?

by

You can write in PURE machine code manually WITHOUT ASSEMBLY

Linux/ELF: https://github.com/XlogicX/m2elf. This is still a work in progress, I just started working on this yesterday.

Source file for “Hello World” would look like this:

b8    21 0a 00 00   #moving "!\n" into eax
a3    0c 10 00 06   #moving eax into first memory location
b8    6f 72 6c 64   #moving "orld" into eax
a3    08 10 00 06   #moving eax into next memory location
b8    6f 2c 20 57   #moving "o, W" into eax
a3    04 10 00 06   #moving eax into next memory location
b8    48 65 6c 6c   #moving "Hell" into eax
a3    00 10 00 06   #moving eax into next memory location
b9    00 10 00 06   #moving pointer to start of memory location into ecx
ba    10 00 00 00   #moving string size into edx
bb    01 00 00 00   #moving "stdout" number to ebx
b8    04 00 00 00   #moving "print out" syscall number to eax
cd    80            #calling the linux kernel to execute our print to stdout
b8    01 00 00 00   #moving "sys_exit" call number to eax
cd    80            #executing it via linux sys_call

WIN/MZ/PE:

shellcode2exe.py (takes asciihex shellcode and creates a legit MZ PE exe file) script location:

https://web.archive.org/web/20140725045200/http://zeltser.com/reverse-malware/shellcode2exe.py.txt

dependency:

https://github.com/radare/toys/tree/master/InlineEgg

extract

python setup.py build




sudo python setup.py install

More Related Contents:

  1. How to Calculate Jump Target Address and Branch Target Address?
  2. rbp not allowed as SIB base?
  3. How to read the Intel Opcode notation
  4. Call an absolute pointer in x86 machine code
  5. Assembly code vs Machine code vs Object code?
  6. x64 instruction encoding and the ModRM byte
  7. What does the /4 mean in FF /4?
  8. Segmentation fault when using DB (define byte) inside a function
  9. What is the difference between native code, machine code and assembly code?
  10. How to determine if ModR/M is needed through Opcodes?
  11. How to tell the length of an x86 instruction?
  12. What does “rep; nop;” mean in x86 assembly? Is it the same as the “pause” instruction?
  13. Get size of assembly instructions
  14. How to force NASM to encode [1 + rax*2] as disp32 + index*2 instead of disp8 + base + index?
  15. How to tell the length of an x86 instruction?
  16. How does the CPU know how many bytes it should read for the next instruction, considering instructions have different lengths?
  17. Why isn’t my assembly program setting r1 to the correct value?

Leave a Comment