[RST] Writing shellcodes for Windows x64

[Nytro]

Writing shellcodes for Windows x64

On 30 June 2019 By nytrosecurity

 

Long time ago I wrote three detailed blog posts about how to write shellcodes for Windows (x86 – 32 bits). The articles are beginner friendly and contain a lot of details. First part explains what is a shellcode and which are its limitations, second part explains PEB (Process Environment Block), PE (Portable Executable) file format and the basics of ASM (Assembler) and the third part shows how a Windows shellcode can be actually implemented.

 

This blog post is the port of the previous articles on Windows 64 bits (x64) and it will not cover all the details explained in the previous blog posts, so who is not familiar with all the concepts of shellcode development on Windows must see them before going further.

 

Of course, the differences between x86 and x64 shellcode development on Windows, including ASM, will be covered here. However, since I already write some details about Windows 64 bits on the Stack Based Buffer Overflows on x64 (Windows) blog post, I will just copy and paste them here.

 

As in the previous blog posts, we will create a simple shellcode that swaps the mouse buttons using SwapMouseButton function exported by user32.dll and grecefully close the proccess using ExitProcess function exported by kernel32.dll.

 

Articol complet: https://nytrosecurity.com/2019/06/30/writing-shellcodes-for-windows-x64/

[run3donlineaz]

This is definitely a great article. Thank you so much for taking the time to play snake detail all of this for all of us. It was a great guide!
 

[Nytro]

Un bot mi-a laudat articolul, tot o lauda este, me happy si nu sterg spamu ❤️ 

[thomasrichard]

Shellcode is a sequence of commands that a computer's processor executes when instructed to do so. A shellcode is used to execute an exploit on a target computer, with the goal of gaining access to the computer's resources. There are many types of shellcode, including those that inject malicious code into a running process, those that escalate privileges, and those that spawn a reverse shell to bypass firewalls. [EDIT]

[Nytro]

Evolueaza si spamul, nice.