1

I injected shellcode into an executable.
Entrypoint is set to first shellcode instruction.

Shellcode:

nop
nop
label:
nop
nop
jmp
label
nop
nop

which translate to: \x90\x90\x90\x90\xeb\xfc\x90\x90

Correct Values in PE can be seen with PE-Explorer

pe explorer

There are other values displayed in the debugger which translate to wrong instructions.

debugger

What am I doing wrong here?

Thanks

1
  • is this PE-Explorer from there? heaventools.com Never knew it could show the instructions – codevert Mar 8 at 11:12

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.