Home > Software engineering >  Rundll32. EXE external ID write shellcode questions of memory
Rundll32. EXE external ID write shellcode questions of memory

Time:09-16

RUNDLL32. EXE calls the API can be passed BYTE parameters? (to put it bluntly this question is the question)

BYTE []={97,98,111,117,116,109,101,0,206,210,202,199,115,104,101,108,108,99,111,100,101,33,0,96,184,128,30,200,118,106,0,104,0,0,240,0,104,8,0,240,0,106,0,255,208,97,195,144}
This is a SHELLCODE
Today a whim to rundll32 to call WriteProcessMemory
This can be achieved?


Application memory is to use external program to apply for the
WriteProcessMemory this directly to write


The following a failure don't know what wrong


BBS great god!!!!!!!!!!!!!!!!!!!!
Rundll32 kernel32. DLL, WriteProcessMemory "" 964" "15728640",98,111,117,116,109,101,0,206,210,202,199,115,104,101,108,108,99,111,100,101,33,0,96,184,128,30,200,118,106,0,104,0,0,240,0,104,8,0,240,0,106,0,255,208,97,195,144 {97} "48 0
  • Related