Finding function address | PointerSec

Autoplay
Autocomplete

Previous Lesson Complete and Continue

Win32 Shellcoding

Finding Ntdll.dll base address

finding ntdll base address (26:52)

Finding Function address

Comparing two strings (27:24)
Finding function address (31:21)

Calculator Shellcode

CreateProcessA shellcode to popup calculator (24:55)

LoadLibraryA, GetProcAddress and MessageBoxA

Loading user32.dll and calling MessageBoxA (15:15)

Reverse Shell

Socket initialization - WSAStartup, WSASocketA, WSACleanup (16:50)
Connecting to our server - WSAConnect, inet_addr, htons (20:50)
Creating cmd process with socket io handles (33:54)
Fixing WaitForSingleObject (1:52)

Generating and Testing Shellcode

generating shellcode and testing (4:06)

Teach online with

Finding function address

Lesson content locked

If you're already enrolled, you'll need to login.

Enroll in Course to Unlock