stageless shellcode exit about aceldr HOT 5 CLOSED

i will try later, thank you so much!

from aceldr.

Can you tell me more about the test environment? OS, architecture, loaded CNA scripts, loader implementation (how is memory allocated, written, executed).

from aceldr.

win10, cs4.7, x64, example.profile, only load aceldr.cna,
use runshc64.exe from https://github.com/hasherezade/pe_to_shellcode/releases/tag/v1.1 to execute the stageless bin

from aceldr.

The problem is here: https://github.com/hasherezade/pe_to_shellcode/blob/4badc3b769ce7c1ceb6f2d098516bfca82ecd94d/loader_v2/peloader.cpp#L174

This loader appears to cast the shellcode as a function pointer, executes it, and then returns. As stated in the readme, AceLdr is not compatible with loaders that rely on the shellcode thread staying alive. Try adding a WaitForSingleObject((HANDLE)-1,INFINITE); below that line to keep the loader from exiting.

from aceldr.

it works well.
btw, i can't build the raw petoshellcode project, but i build a new shellcode loader by golang to test this

from aceldr.