Autoplay
Autocomplete
Previous Lesson
Complete and Continue
Win32 Shellcoding
Finding Ntdll.dll base address
finding ntdll base address (26:52)
Finding Function address
Comparing two strings (27:24)
Finding function address (31:21)
Calculator Shellcode
CreateProcessA shellcode to popup calculator (24:55)
LoadLibraryA, GetProcAddress and MessageBoxA
Loading user32.dll and calling MessageBoxA (15:15)
Reverse Shell
Socket initialization - WSAStartup, WSASocketA, WSACleanup (16:50)
Connecting to our server - WSAConnect, inet_addr, htons (20:50)
Creating cmd process with socket io handles (33:54)
Fixing WaitForSingleObject (1:52)
Generating and Testing Shellcode
generating shellcode and testing (4:06)
Teach online with
finding ntdll base address
Complete and Continue
