Shellcode from Rust binaries do not work very well.

[trickster0]

Hello,

So i have been trying to make shellcode from rust binaries, but unfortunately it acts quite weird. I have tried all options about changing arch, adding or removing entropy or add -z but it results in these weird issues where even a simple hello world application will not work. It might work partially sometimes and then crash like show below from cmd. To clarify the below attempts are from EXACTLY the same shellcode file, i did not generate it with different options for every time i ran it below. If you need any help for compiling in rust or anything hit me up in twitter @trickster012

C:\Users\test\Desktop>f:\runsc.exe -f C:\Users\test\Desktop\test.bin -x

[ run shellcode v0.2 [ reading code from C:\Users\test\Desktop\test.bin [ executing code...thread panicked while processing panic. aborting.

C:\Users\test\Desktop>f:\runsc.exe -f C:\Users\test\Desktop\test.bin -x

[ run shellcode v0.2 [ reading code from C:\Users\test\Desktop\test.bin [ executing code...Hello, world!

C:\Users\test\Desktop>f:\runsc.exe -f C:\Users\test\Desktop\test.bin -x

[ run shellcode v0.2 [ reading code from C:\Users\test\Desktop\test.bin [ executing code...thread panicked while processing panic. aborting.

C:\Users\test\Desktop>f:\runsc.exe -f C:\Users\test\Desktop\test.bin -x

[ run shellcode v0.2 [ reading code from C:\Users\test\Desktop\test.bin [ executing code...thread panicked while processing panic. aborting.

[TheWover]

To be clear, this is the same shellcode from the same binary every time?

I am not very familiar with Rust. Does it use a runtime / VM? If you are getting different results every time you run the shellcode maybe it is because something in the runtime is doing some multi-threaded logic that has a race condition, etc.

[trickster0]

Yes this is the same shellcode. There is really no easy answer to this. Google though says "Does Rust have a runtime? Not in the typical sense used by languages such as Java, but parts of the Rust standard library can be considered a “runtime”, providing a heap, backtraces, unwinding, and stack guards. There is a small amount of initialization code that runs before the user's main function."

I am quite the beginner in rust, so i don't know much about its internals.

[halrick13]

i am a bit late, but got the solution : you need to put whole rust code in unsafe( ) mode

[Hello-xBugs]

May I ask how you solved it in x64 rust binary

[lovelyjuice]

Use windows-gnu instead of msvc. https://github.com/hasherezade/pe_to_shellcode/issues/38#issuecomment-1620432184