Metasploit Revealed: Secrets of the Expert Pentester

Determining space limitations

The Space variable in the Payload field determines total size of the shellcode. We need to assign enough space for the Payload to fit in. If the Payload is large and the space allocated is less than the shellcode of the payload, it will not execute. In addition, while writing custom exploits, the shellcode should be as small as possible. We may have a situation where the available space is only for 200 bytes but the available shellcode needs at least 800 bytes of space. In this situation, we can fit a small first stage shellcode within the buffer, which will execute and download the second, larger stage, to complete the exploitation.

For smaller shellcode for various payloads, visit http://www.shell-storm.org/shellcode/ ...