add 0day 3.2 shellcode

diff --git a/learn/AcePlay/AcePlay.playground/playground.xcworkspace/xcuserdata/Ace.xcuserdatad/UserInterfaceState.xcuserstate b/learn/AcePlay/AcePlay.playground/playground.xcworkspace/xcuserdata/Ace.xcuserdatad/UserInterfaceState.xcuserstate
index cdb9f75acfe75bf146c2611e280875e593781128..ba649d1f6a0ca166f8e94b340263043004708176 100644 (file)
Binary files a/learn/AcePlay/AcePlay.playground/playground.xcworkspace/xcuserdata/Ace.xcuserdatad/UserInterfaceState.xcuserstate and b/learn/AcePlay/AcePlay.playground/playground.xcworkspace/xcuserdata/Ace.xcuserdatad/UserInterfaceState.xcuserstate differ

diff --git a/learn/test/overflow/0day.3.2.asm b/learn/test/overflow/0day.3.2.asm
new file mode 100644 (file)
index 0000000..4fdea7c
--- /dev/null
+++ b/learn/test/overflow/0day.3.2.asm
@@ -0,0 +1,20 @@
+; 《0dayp安全》3.2 shellcode 代码(nasm)
+; 2016-07-20 22:00:21
+    ADD     ESP, -0x80
+    MOV     EBP, ESP
+    XOR     EAX, EAX
+    PUSH    EAX
+    PUSH    0x74736556        ; 'tseV'
+    PUSH    0x2E656341        ; '.ecA'
+    MOV     EBX, ESP
+    PUSH    EAX
+    PUSH    EBX
+    PUSH    EBX
+    PUSH    EAX
+    MOV     EBX, 0x77D507EA    ; MessageBoxA
+    CALL    EBX
+
+    PUSH    EAX
+    MOV     EBX, 0x7C81CAFA    ; ExitProcess
+    CALL    EBX
+

diff --git a/tools/AceBox/AceBox.xcodeproj/project.xcworkspace/xcuserdata/Ace.xcuserdatad/UserInterfaceState.xcuserstate b/tools/AceBox/AceBox.xcodeproj/project.xcworkspace/xcuserdata/Ace.xcuserdatad/UserInterfaceState.xcuserstate
index 8170e0dfe90aca1974528f069761d04aa212a8eb..d764726221036a4bb0f24c0ddce46700cff8f091 100644 (file)
Binary files a/tools/AceBox/AceBox.xcodeproj/project.xcworkspace/xcuserdata/Ace.xcuserdatad/UserInterfaceState.xcuserstate and b/tools/AceBox/AceBox.xcodeproj/project.xcworkspace/xcuserdata/Ace.xcuserdatad/UserInterfaceState.xcuserstate differ