optiv / ScareCrow

ScareCrow - Payload creation framework designed around EDR bypass.
2.71k stars 503 forks source link

Exception during code execution #36

Closed clementsbr closed 2 years ago

clementsbr commented 2 years ago

Exception raised during execution of shellcode, shellcode was tested via different execution means and worked as expected. image

Tylous commented 2 years ago

So “shellcode was tested via different execution means and worked as expected.” that doesn’t really help me troubleshot and identify the problem. Does this happen with other loader times in scarecrow. Also what kind of shellcode are you using? The more details I have the more I can reproduce this to address it.

clementsbr commented 2 years ago

Shellcode is Sliver C2 v22, fails to execute and connect with both the DLL and Binary version.

Tylous commented 2 years ago

I am still looking into this.

Tylous commented 2 years ago

So I've tested this and I can't reproduce the issue with Sliver I think it's something in one of your command-line options because it works fine on my end.

image

Tylous commented 2 years ago

Closing due to lack of response will reopen if this issue reappears.