Comments on: Create a custom shellcode using System() function

By: EA

EA — Fri, 29 Mar 2019 13:58:33 +0000

Would your command above work without escaping the backslashes?

frankgrimes — Thu, 18 May 2017 15:50:17 +0000

A couple of things about the assembly you used that I think could shorten it up.

I believe you can just “call ” instead of loading the address of system() in a register and calling the register.

Instead of putting the address of the top of the stack (ESP) in EDI and then pushing that to the stack, I also think you can just do a “PUSH ESP”

konstantinos — Mon, 07 Dec 2015 15:03:18 +0000

Nice post.!! Very informative!!!
i was wondering if we could use other functions except system() and winexec to accomplish the same results.