('binary' encoding is not supported, stored as-is)
We had pretty much the same problem a few weeks ago, also exploiting an email app. What you can do is to use a loader code that constructs the real shellcode, in your case "run calc.exe". It is a little time consuming, but it works! With that approach, you can also use the loader code to construct the \xcc character. If you are only interested in a working calc.exe shellcode, drop me an email. The process described above has been documented by steve hanna. Just google for "shellcode ascii linux windows".
regards
skillTube Team
Received on Jun 25 2007