Debugging Shellcode with SCLauncher and WinDBG

Summary

A tutorial demonstrates using SCLauncher with WinDBG and X32 to load shellcode, attach a debugger, set breakpoints, inspect memory, and step through execution.

Key points

• SCLauncher can load shellcode into allocated writable, readable, and executable memory and execute it.
• The tutorial shows how to select an entry-point offset when shellcode does not begin at the start of the file.
• Using SCLauncher’s pause option lets the user attach a debugger before execution begins.
• The presenter demonstrates attaching WinDBG to the process, setting a breakpoint at the allocation base, and inspecting memory.
• SCLauncher can insert a software breakpoint into the shellcode; the tutorial notes that debugger behavior may vary.
• The demonstrated shellcode is described as a basic template whose functions lack required arguments.

People

Tools