Metasploit mailing list archives

Executable Download and Execute - payload


From: jms at bughunter.ca (J.M. Seitz)
Date: Sun, 16 Dec 2007 09:05:39 -0800

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I try to exploit some app and in my exploit I overwrite SEH - this shellcode
does not work for this exploit.

I am not 100% sure what you're saying here: do you mean that you can
successfully control EIP, but the shellcode doesn't execute?

If you are using the typical POP/POP/RET trampoline for your SEH
overwrite, then set a breakpoint on the address of the POP/POP/RET and
make sure that it's actually being hit.

JS
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFHZVrjKEj7ZJktQNsRAjHkAJ9Q2sEsJeGjE0MS9CmwbWQ/kPEjzwCePtbr
2HdJZkt88cwIp5ItUGMMDNo=
=TDTD
-----END PGP SIGNATURE-----



Current thread: