1

I am doing an exercise on creating custom shellcode (windows). The goal is to create shellcode that will delete the firewall log file. I successfully spawned a reverse shell with metasploit, using a python program I wrote, but when I try writing my own shellcode I am not successful yet. It's partly because Immunity is behaving in a strange way:

Reaching a certain point in the execution, Immunity exits. Yet when I press pause and step into again, I can see my filepath string in ebx. So my shellcode was executed, but I can't see the instructions being executed.

If you can help with immunity's behavior I would appreciate it...

Immunity exit

String in EBX

Here is a snapshot of the shellcode

Ben P
  • 11
  • 1

0 Answers0