# Emulate Shellcode at Specific Offset
> Run shellcode that starts at an offset within a larger binary

**Tools:** [[tools/scdbgc|scdbgc]]
**FOR610 Lab:** 3.5, 4.6

## Commands
```bash
# Emulate from file start
scdbgc /f <shellcode.bin> /s -1
# Emulate from specific offset (hex)
scdbgc /f <shellcode.bin> /foff <hex_offset> /s -1
# Emulate with a file handle pre-opened (for exploits)
scdbgc /f <shellcode.bin> /foff <offset> /fopen <carrier.doc> /s -1
```

#recipe #scdbgc