search

HavocFramework / Havoc

The Havoc Framework.
GNU General Public License v3.0
6.31k stars 903 forks source link

[File a bug report for the Demon Implant]: Do not work x32 x86 bit payloads #398

Open SergANT85 opened 9 months ago

SergANT85 commented 9 months ago

Contact Details

No response

What happened?

Hello!

I generate format x32 x86 bit payload, and it do not work. But when I am testing on x64 platform - it work good.

Also I have problem inject bin file x32 format.

X64 is working very well.

Tnx.

Did You Do a Pull First?

Latest (You performed a pull first)

Did You Try With the Dev Branch?

Yes (You tried using the dev branch but the problem persist)

Relevant log output

No response

Did You Read Over Your Issue First?

curie71 commented 8 months ago

I found the same problem!

033d782380bacaa4e3aab37cae84b45
muhyuddin commented 5 months ago

Facing same issue, getting Access Violation error in Windows 7 32 bit, when running x86 executable. Whille running in WinDbg ret address goes to 00000000, while reading out of bound data. I might be wrong.

curie71 commented 5 months ago

Facing same issue, getting Access Violation error in Windows 7 32 bit, when running x86 executable. Whille running in WinDbg ret address goes to 00000000, while reading out of bound data. I might be wrong.

It seems like the newest code solve the problem.

muhyuddin commented 5 months ago

Nope, crashing on the latest code. I just cloned and build and issue is same. Windows 7 Ultimate Version 6.1 (Build 7601: Service pack 1)

muhyuddin commented 4 months ago

Any updates ? @SergANT85

I have debugged the shellcode, its crashing on NtProtectVirtualMemory call inside the shellcode. Cant traceback the issue in C code. Works on WoW64, but crashes on x86 with ACCESS_VIOLATION.

MrEmpy commented 3 months ago

The same problem happens to me. When booting demon x86 I just see the process die quickly. I'm using Windows 7 Enterprise Service Pack 1