Metasploit mailing list archives

Encoder(?) problems.


From: hdm at metasploit.com (H D Moore)
Date: Sat, 30 Jun 2007 23:08:39 -0500

The payload decoders assume the stack is in a usable state. This can be 
problematic when the program counter is really close to the stack 
pointer. The solution for this is to add the 'StackAdustment' => -3500 
line to the Payload section of the modules information block.

-HD

On Saturday 30 June 2007 23:04, Reth wrote:
However, if I try to generate them from the exploit itself, the decoder
always seems to mess up decoding the payload. In GDB, usually only the
first half or so of the payload is decoded successfully. I have set
BadChars to exclude all the problem characters, so that doesn't seem
to be the cause.



Current thread: