Skip to content

Latest commit

 

History

History

demos

Folders and files

NameName
Last commit message
Last commit date

parent directory

..
README.md
README.md
 
 
knock.cpp
knock.cpp
 
 
knock_test.py
knock_test.py
 
 
peb_lookup.h
peb_lookup.h
 
 
pop_calc.cpp
pop_calc.cpp
 
 
popup.cpp
popup.cpp
 
 
popup_arr.cpp
popup_arr.cpp
 
 

README.md

masm_shc

demos

Examples of the code to be refactored to shellcode:

  1. popup.cpp - a simple "Hello World" Message Box
  2. knock.cpp - a simple server, opening ports, waiting for a defined input, giving response

Howto

  1. Compile the example from C to MASM, using MSVC from a commadline
cl /c /GS- /FA <file>.cpp
  1. Use masm_shc to clean the obtained MASM, inline the strings etc.
masm_shc.exe <file>.asm <cleaned_file>.asm

It should automatically resolve most of the issues. The remaining issues should be resolved manually following the diplayed hints. It will also inform if the Entry Point was changed

  1. Compile the resulting file by MASM into a PE (use ml for 32-bit files and ml64 for 64 bit files analogicaly)
ml <cleaned_file>.asm /link /entry:<my_entry_func>

  1. Use PE-bear to dump the .text section from the resulting PE. This will be our shellcode.

  2. Use runshc to test the shellcode (remember that the bitness of runshc must be the same as the bitness of the shellcode)