From: AceVest <zhaoyanbai@126.com>
Date: Wed, 20 Jul 2016 14:01:51 +0000 (+0800)
Subject: add 0day 3.2 shellcode
X-Git-Url: http://zhaoyanbai.com/repos//%22http:/%22%29?a=commitdiff_plain;h=38de261934e4c9b86230d96aceb45fe8a71b976b;p=acecode.git

add 0day 3.2 shellcode
---

diff --git a/learn/AcePlay/AcePlay.playground/playground.xcworkspace/xcuserdata/Ace.xcuserdatad/UserInterfaceState.xcuserstate b/learn/AcePlay/AcePlay.playground/playground.xcworkspace/xcuserdata/Ace.xcuserdatad/UserInterfaceState.xcuserstate
index cdb9f75..ba649d1 100644
Binary files a/learn/AcePlay/AcePlay.playground/playground.xcworkspace/xcuserdata/Ace.xcuserdatad/UserInterfaceState.xcuserstate and b/learn/AcePlay/AcePlay.playground/playground.xcworkspace/xcuserdata/Ace.xcuserdatad/UserInterfaceState.xcuserstate differ
diff --git a/learn/test/overflow/0day.3.2.asm b/learn/test/overflow/0day.3.2.asm
new file mode 100644
index 0000000..4fdea7c
--- /dev/null
+++ b/learn/test/overflow/0day.3.2.asm
@@ -0,0 +1,20 @@
+; 《0dayp安全》3.2 shellcode 代码(nasm)
+; 2016-07-20 22:00:21
+    ADD     ESP, -0x80
+    MOV     EBP, ESP
+    XOR     EAX, EAX
+    PUSH    EAX
+    PUSH    0x74736556        ; 'tseV'
+    PUSH    0x2E656341        ; '.ecA'
+    MOV     EBX, ESP
+    PUSH    EAX
+    PUSH    EBX
+    PUSH    EBX
+    PUSH    EAX
+    MOV     EBX, 0x77D507EA    ; MessageBoxA
+    CALL    EBX
+
+    PUSH    EAX
+    MOV     EBX, 0x7C81CAFA    ; ExitProcess
+    CALL    EBX
+
diff --git a/tools/AceBox/AceBox.xcodeproj/project.xcworkspace/xcuserdata/Ace.xcuserdatad/UserInterfaceState.xcuserstate b/tools/AceBox/AceBox.xcodeproj/project.xcworkspace/xcuserdata/Ace.xcuserdatad/UserInterfaceState.xcuserstate
index 8170e0d..d764726 100644
Binary files a/tools/AceBox/AceBox.xcodeproj/project.xcworkspace/xcuserdata/Ace.xcuserdatad/UserInterfaceState.xcuserstate and b/tools/AceBox/AceBox.xcodeproj/project.xcworkspace/xcuserdata/Ace.xcuserdatad/UserInterfaceState.xcuserstate differ