11 reputation
3
bio website
location
age
visits member for 2 years
seen Aug 9 '12 at 10:07

Aug
1
awarded  Scholar
Aug
1
accepted on stack execution on windows 7 :: metasploit :: meterpreter :: executable crypter
Aug
1
revised on stack execution on windows 7 :: metasploit :: meterpreter :: executable crypter
added 90 characters in body
Aug
1
comment Intepreting PE (Portable Executable) headers of suspicious malware files
from my experience I have seen that most of the time there's unpacker stub is at the end of the PE which is in most case padded with zero bytes
Aug
1
comment on stack execution on windows 7 :: metasploit :: meterpreter :: executable crypter
please check my new edits
Aug
1
revised on stack execution on windows 7 :: metasploit :: meterpreter :: executable crypter
added 208 characters in body
Aug
1
awarded  Editor
Aug
1
revised on stack execution on windows 7 :: metasploit :: meterpreter :: executable crypter
added 6 characters in body
Aug
1
comment on stack execution on windows 7 :: metasploit :: meterpreter :: executable crypter
Good point, I tested it using windows xp sp2, thanks for links, I'll look into it.
Aug
1
comment on stack execution on windows 7 :: metasploit :: meterpreter :: executable crypter
@D.W. Basically the question is not about A\V evasion, it more of a question about on stack execution on Windows 7
Aug
1
comment on stack execution on windows 7 :: metasploit :: meterpreter :: executable crypter
@schroeder yes the code is compiled into PE, I asked my friends who have standard windows 7 installed... BTW like I initially said I compiled, test myself in virtualized windows xp which was running on linux host.
Jul
31
awarded  Student
Jul
31
asked on stack execution on windows 7 :: metasploit :: meterpreter :: executable crypter