Meatballs 25ed68af6e Land #3017, Windows x86 Shell Hidden Bind ...

A bind shellcode that responds as 'closed' unless the client matches the
AHOST ip.

2014-06-08 13:49:49 +01:00

..

block

Land #3017, Windows x86 Shell Hidden Bind

2014-06-08 13:49:49 +01:00

kernel

Forgot the updated build.py, also add in a link to a blog post I wrote for this shellcode.

2010-02-26 14:27:13 +00:00

migrate

Commit the updated APC injection stubs. fixes a nasty issue in some edge cases whereby when using APC injection for a process in another session then the current host process the injected APC can cause an access violation in kernel32 during a call the kernel32!CreateThread caused by the APC's host thread not having an initialized Activation Context inside its TEB. We now test for this and create a dummy ActivationContext entry to appease the kernel. This will both improve DLL injection reliability as well as meterpreter migration reliability.

2010-03-11 17:00:19 +00:00

single

Land #3017, Windows x86 Shell Hidden Bind

2014-06-08 13:49:49 +01:00

stage

Overhaul of the metasploit payloads from Stephen Fewer - smaller/cleaner/new hashing/support for WinNT 4.0 -> Win7 with size reductions for the stagers and minimal size increases for the singles

2009-07-31 17:50:10 +00:00

stager

Unify reverse_http and reverse_https

2014-02-04 09:09:12 -06:00

hash.py

Overhaul of the metasploit payloads from Stephen Fewer - smaller/cleaner/new hashing/support for WinNT 4.0 -> Win7 with size reductions for the stagers and minimal size increases for the singles

2009-07-31 17:50:10 +00:00

test_rc4.asm

Whitespace

2013-04-10 09:28:45 -05:00