Re: msfencode -k

[NetEvil <netevil () hackers it>]

Worked!
But I'm wondering if with this method could be applied also on already  
packet exe..

David

Sent from my mobile device
--------------------------------------

Il giorno 15/apr/2010, alle ore 15.53, Rob Fuller <mubix () room362 cha  
scritto:

> It works wonderfully with the original exe running with the payload
> working in another thread, and I think if you pack it after the fact
> that it will still work, but trying to use a packed binary as a
> template for msfpayload or msfencode I believe will always fail, (in
> its current incarnation)
>
>
> --
> Rob Fuller | Mubix
> Room362.com | Hak5.org | TheAcademyPro.com
> Ignore this:
> X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*
>
>
>
>
> On Thu, Apr 15, 2010 at 9:32 AM, NetEvil <netevil () hackers it> wrote:
> > Hi Rob
> > With a packed exe the encoding stops saying "is it a packet  
> > binary?" ..and i
> > have no output generated...
> > Then I've tried with surely not packed bins...all went ok ..but i  
> > still
> > cannot see this feature working....with the original exe running +  
> > payload
> > in another thread....
> >
> >
> >
> > Sent from my mobile device
> > --------------------------------------
> >
> > Il giorno 15/apr/2010, alle ore 15.22, Rob Fuller  
> > <mubix () room362 com> ha
> > scritto:
> >
> > > I could be wrong, but I doubt that msfencode and msfpayload deal  
> > > with
> > > packed binaries, try unpacking and repacking them after MSF- 
> > > symbiosis
> > > is achieve.
> > >
> > >
> > > --
> > > Rob Fuller | Mubix
> > > Room362.com | Hak5.org | TheAcademyPro.com
> > > Ignore this:
> > > X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*
> > >
> > >
> > >
> > >
> > > On Thu, Apr 15, 2010 at 3:45 AM, NetEvil <netevil () hackers it> wrote:
> > > > Hi guys,
> > > > I've tried to msfencode shikata ga nai with the -k option using  
> > > > various
> > > > templates...but in most of cases.. stops encoding cause finds an
> > > > incorrect
> > > > eof on packed files...or when goes well on unpacked exe the  
> > > > resulting bin
> > > > in
> > > > not working as the original...got running just the payload  ...on  
> > > > my xp
> > > > sp3
> > > > box..
> > > > Am i missing something?
> > > >
> > > > Thanks.
> > > > David
> > > >
> > > > Sent from my mobile device
> > > > --------------------------------------
> > > > _______________________________________________
> > > > https://mail.metasploit.com/mailman/listinfo/framework
_______________________________________________
https://mail.metasploit.com/mailman/listinfo/framework