Are you passing this shellcode as a command-line argument? In that case, take a look at the ASCII code for 0x20 ;)
BlueRaja - Danny Pflughoeft
2010-03-18 02:33:27
+1
A:
Tks Raja to Aswer:]) So, I'm passing this by a function C of the kernel32.dll library call WinExec() and compiled by DEVC++ ..I'm try a Poc to my own deepening knowledge...Does what's wrong?
marcelo carvalho
2010-03-19 00:25:19
Yep that would do it; the usual solution is to surround the command-line argument with quotes, but I'm not sure how the command-line parser would handle this case - after all, you're not meant to be passing around shell-code like this ;)
BlueRaja - Danny Pflughoeft
2010-03-19 13:36:24