Payload Buffet

The payload buffet does not generate payloads that work with all Badger Shellcodes. The WaitForSingleObject shellcode seems to have the most consistently working callbacks. This particular shellcode can be generated in multiple different ways.

  1. Build a Default Stageless payload
  • Right Click Listener and select
    • Build Stageless Payload >> x64 Arch >> Default >> Shellcode Blob (bin) >> ExitMethod: WaitForSingleObject
  1. Build a Stealth Payload That Uses Syscalls
    • Build Stageless Payload >> x64 Arch >> Stealth >> Shellcode Blob (bin) >> ExitMethod: WaitForSingleObject
  2. Build a Staged Payload that uses SysCalls
  • Right Click Listener >> Staging >> Enable Staging
  • Right Click Listener >> Staging >> SysCall Stage Zero (bin) >> x64 >> ExitMethod: WaitForSingleObject