BlackHole icon indicating copy to clipboard operation
BlackHole copied to clipboard

Published 20 hours ago • verified publisher icon hussein-aitlahcen

payload.h explaining

Open s1st3r opened this issue 6 years ago • 1 comments

Hi, i wish to understand how you generated the payload (seemed like shellcode, but its not), just a small pointer to a resource i can learn from.

static unsigned char RawData[] = { 0x4D, 0x5A, 0x90, 0x00, 0x03, 0x00, 0x00, 0x00, 0x04, 0x00, 0x00, 0x00, 0xFF, 0xFF, 0x00, 0x00, 0xB8, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 .........................................................................................................

s1st3r avatar Nov 24 '18 12:11 s1st3r

I figured out its a byte array, but how did you generate it? Is it the one that helps build the loaders PE?

Why not directly make your own IMAGE_NT_HEADERS using Microsoft WINAPI?

s1st3r avatar Nov 25 '18 16:11 s1st3r