Gallopsled/pwntools — pull request #129 by zachriggle (2014-09-22 18:36:21+00:00)
Title: Windows loader for greenhornd

Steal the executable MZ header from [Metasploit](https://github.com/rapid7/metasploit-framework/blob/master/lib/msf/core/payload/windows/reflectivedllinject.rb#L59).

Add a stager shellcode for stdin, given that the IAT addresses of `ReadFile` and `GetStdHandle` are known.