Tutorial Demonstrates Packaging Shellcode in a PE and Debugging It with IDA Pro

· 4:47 · Watch on YouTube ↗

Summary

The tutorial shows how to use SC launcher to wrap shellcode in a PE file, inspect it in IDA Pro, and set breakpoints to step through it with the local Windows debugger.

Key points

  • SC launcher can create a PE file containing shellcode; the tutorial also mentions optional supporting content and a 64-bit output option.
  • The resulting PE can be opened in IDA Pro for disassembly; the speaker says IDA’s free versions disassemble PE files.
  • The demonstrated workflow sets a breakpoint and uses the local Windows debugger to step through the shellcode.
  • The generated executable can be run directly, rather than loading and executing the shellcode through SC launcher.

Article Details

Topics
  • [00:13] Configuring SC launcher to create a PE file from shellcode
  • [01:43] Opening and disassembling the shellcode-containing PE in IDA Pro
  • [03:19] Setting breakpoints and stepping through shellcode with the local Windows debugger
  • [03:55] Running the generated PE executable directly

Tools

Related Articles