the first step is to close immunity debugger if it' still running and close any instances of calc exe now fire up calc exe and run your code injection script you should see output like thispython code_inject py [*found calc exe with pid [*hunting for physical offsets please wait [*found good shellcode location[*virtual address [*physical address [*injecting shellcode [*found our trampoline target at abccd [*writing trampoline [*done injecting code beautifulit should show that it found all of the offsetsand injected the shellcode to test itsimply drop into your vm and do quick + and hit the button you should see message pop upnow you can try to reverse engineer other applications or services aside from calc exe to try this technique against you can also extend this technique to try manipulating kernel objects which can mimic rootkit behavior these techniques can be fun way to become familiar with memory forensicsand they're also useful for situations where you have physical access to machines or have popped server hosting numerous vms [ download immunity debugger here[ if you want to write your own messagebox shellcodesee this tutorial