mailing list archives
Bug in shikata_ga_nai encoder ?
From: alok.menghrajani at ilionsecurity.ch (Alok Menghrajani)
Date: Wed, 18 Oct 2006 12:00:32 +0200
Yes, the problem is with the direction flag ! Adding 0xfc solved everything.
The funny thing, is that it seems LoadLibraryA wants this flag cleared.
My code doesn't call loop, so I'm not relying on this flag.
Thanks so much.
H D Moore wrote:
The most common problem is that the payload assumes something about the
stack layout or CPU state that is no longer true after the shikita
encoder runs. Some things you may want to try:
1) Normalize the stack as the first part of your payload:
2) Reset the direction flag