Metasploit mailing list archives

Question on SEH, PROCESS, THREAD and integrating custom C Code


From: patrick at aushack.com (Patrick Webster)
Date: Sun, 10 Aug 2008 16:46:10 +1000

Well you can just create a binary:

./msfpayload windows/exec CMD=calc.exe X > shellcode.exe

I haven't tried on windows, but you may be able to test the byte array
using similar:

char sc[] = "\x41\x42\x43..";

main()
{
        int *ret;

        ret = (int *)&ret + 2;
        *ret = sc;
}

-Patrick



Current thread: