Full title: Windows/x86 - Locate kernel32 base address / Stack Crack method NullFree Shellcode (171 bytes) 
Category: shellcode
Platform: win64
171 bytes small Windows/x86 shellcode with a new method to find the kernel32 base address by walking down the stack and look for a possible Kernel32 address using a custom SEH handler. Each address found on the stack will be tested using the Exception handling function. If it's valid and starts with 7, then it's a possible kernel32 address.

# 0day.today @ http://0day.today/