Ideal for for a stage one JIT sprayed egg hunter to find and disable DEP on a stage two shellcode - used in Double Star

Basic shellcode to be used in conjunction with testing advanced exploit mitigation systems such as EMET and its succesors. Utilized in conjunction with my 32-bit re-creation of CVE-2020-0674 for EAF/EAF+ bypass

Name hash module (via PEB) and API (via EAT) resolution hash - executes notepad.exe

Name hash module (via PEB) and API (via EAT) resolution hash - pops MessageBoxA to desktop window session