Emulating basic windows shellcode based on LdrLoadDLl() that prints a message:

___________________________
@hacking_Attack
@Hacking_Video

The console allow to view an edit the current state of the cpu: h --- help --- q ...................... quit cls .................... clear screen h ...................... help s ...................... stack v ...................... vars r ...................... register show all r reg .................. show reg rc ..................... register change f ...................... show all flags fc ..................... clear all flags fz ..................... toggle flag zero fs ..................... toggle flag sign c ...................... continue ba ..................... breakpoint on address bi ..................... breakpoint on instruction number bmr .................... breakpoint on read memory bmw .................... breakpoint on write memory bc ..................... clear breakpoint n ...................... next instruction eip .................... change eip push ................... push dword to the stack pop .................... pop dword from stack fpu .................... fpu view md5 .................... check the md5 of a memory map seh .................... view SEH veh .................... view vectored execption pointer m ...................... memory maps ma ..................... memory allocs mc ..................... memory create map mn ..................... memory name of an address ml ..................... memory load file content to map mr ..................... memory read, speficy ie: dword ptr [esi] mw ..................... memory read, speficy ie: dword ptr [esi] and then: 1af md ..................... memory dump mrd .................... memory read dwords mds .................... memory dump string mdw .................... memory dump wide string mdd .................... memory dump to disk mt ..................... memory test ss ..................... search string sb ..................... search bytes sba .................... search bytes in all the maps ssa .................... search string in all the maps ll ..................... linked list walk d ...................... dissasemble dt ..................... dump structure enter .................. step into">--- console ---
=>h
--- help ---
q ...................... quit
cls .................... clear screen
h ...................... help
s ...................... stack
v ...................... vars
r ...................... register show all
r reg .................. show reg
rc ..................... register change
f ...................... show all flags
fc ..................... clear all flags
fz ..................... toggle flag zero
fs ..................... toggle flag sign
c ...................... continue
ba ..................... breakpoint on address
bi ..................... breakpoint on instruction number
bmr .................... breakpoint on read memory
bmw .................... breakpoint on write memory
bc ..................... clear breakpoint
n ...................... next instruction
eip .................... change eip
push .............. ..... push dword to the stack
pop .................... pop dword from stack
fpu .................... fpu view
md5 .................... check the md5 of a memory map
seh .................... view SEH
veh .................... view vectored execption pointer
m ...................... memory maps
ma ..................... memory allocs
mc ..................... memory create map
mn ..................... memory name of an address
ml ..................... memory load file content to map
mr ..................... memory read, speficy ie: dword ptr [esi]
mw ..................... memory read, speficy ie: dword ptr [esi] and then: 1af
md ..................... memory dump
mrd .................... memory read dwords
mds .................... memory dump string
mdw .................... memory dump wide string
mdd .................... memory dump to disk
mt ..................... memory test
ss ..................... search str ing

___________________________
@hacking_Attack
@Hacking_Video

sb ..................... search bytes
sba .................... search bytes in all the maps
ssa .................... search string in all the maps
ll ..................... linked list walk
d ...................... dissasemble
dt ..................... dump structure
enter .................. step into
The cobalt strike (https://www.kitploit.com/search/label/Cobalt%20Strike) api loader is the same that metasploit, emulating it:

___________________________
@hacking_Attack
@Hacking_Video

Cobalt Strike API called:

___________________________
@hacking_Attack
@Hacking_Video

Metasploit rshell API called:

___________________________
@hacking_Attack
@Hacking_Video

Bug Bounty Methodology — Bug Hunting Checklist (PART-1)

Hey, it’s me again back with another checklist. I saw various articles and tools specifically designed to exploit one vulnerability. It…Continue reading on Medium »
Read more...

C.S.T.I Lead To Account Takeover $$$

Hello amazing hunter, Today i want to tell you a short story but this story has long memory for me. In this story i found some…Continue reading on Medium »
Read more...

FB Lite All Users Active Status Changed

I’m glad you’re here. Please have fun reading (nmochea).Continue reading on Medium »
Read more...

Bug Bounty Methodology — Bug Hunting Checklist (PART-1)
https://aaryanapex.medium.com/bug-bounty-methodology-bug-hunting-checklist-part-1-3274ad868209?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hey, it’s me again back with another checklist. I saw various articles and tools specifically designed to exploit one vulnerability. It…Continue reading on Medium » (https://aaryanapex.medium.com/bug-bounty-methodology-bug-hunting-checklist-part-1-3274ad868209?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

C.S.T.I Lead To Account Takeover $$$
https://m7-arman.medium.com/c-s-t-i-lead-to-account-takeover-f21ea07d9141?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello amazing hunter, Today i want to tell you a short story but this story has long memory for me. In this story i found some…Continue reading on Medium » (https://m7-arman.medium.com/c-s-t-i-lead-to-account-takeover-f21ea07d9141?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

FB Lite All Users Active Status Changed
https://nmochea.medium.com/fb-lite-all-user-active-status-changed-99c5c36029e5?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video