jmp esp error Windows XP

Expected behavior

• Mona should provide the output of the instruction jmp esp upon executing !mona jmp -r esp

Actual behavior

• Mona errors out, like below

Steps to reproduce the problem

• Open Immunity debugger and load mona.py
• Search for jmp esp instruction with !mona jmp -r esp command and observe the output

Other useful information (mona version, debugger & debugger version, OS version, etc)

• Windows Version: XP
• Immunity Debugger Version: 1.85
• Mona Version: Latest Patch
• Python Version: 2.7.18
• Other mona commands work, !mona find -s '\xff\xe4' this works fine

[corelanc0d3r]

understood - unfortunately I am not able to rely on module updates or the use of non-standard modules… but you’re right, that would be a workaround indeed

[dhaneshsivasamy07]

Hi @corelanc0d3r, Indeed, its the problem with python in xp

perhaps windows XP does not support modern crypto/HTTPS connections, causing the update process to fail. I don’t think this is a mona problem, I’m closing the issue 😃

• Found a work around for this,

python -m pip install urllib3 certifi

• Add the following in the mona.py file

import ssl

ctx = ssl.create_default_context()
ctx.check_hostname = False
ctx.verify_mode = ssl.CERT_NONE

# add the following in line 13499
u = urllib.urlretrieve(updateurl, context=ctx)

• Line to be updated here