I am doing an exercise on creating custom shellcode (windows). The goal is to create shellcode that will delete the firewall log file. I successfully spawned a reverse shell with metasploit, using a python program I wrote, but when I try writing my own shellcode I am not successful yet. It's partly because Immunity is behaving in a strange way:

Reaching a certain point in the execution, Immunity exits. Yet when I press pause and step into again, I can see my filepath string in ebx. So my shellcode was executed, but I can't see the instructions being executed.

If you can help with immunity's behavior I would appreciate it...

Immunity exit

String in EBX

Here is a snapshot of the shellcode

  • 1
    Did you check for bad characters ? – game0ver Jul 27 '18 at 18:55
  • you'd probably have better luck in stack overflow. While this is security-related, programming is more stack overflow's area of expertise. – SomeGuy Jul 27 '18 at 19:38

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.