Decompiling dumped shellcode

December 07, 2009

The following command will let us disassemble a payload/shell code if it’s dumped into a binary file (non-executable). You’ll need nasm kicking around somewhere (if that’s your asm suite of choice):

ndisasm -b 32 shellcode.bin > shellcode.asm

James Hagerman

Written by James Hagerman

© 2026