full-disclosure - Shellcoding Tutorial

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <c31ca9c6040902111538aa6fcb@mail.gmail.com>
From: mshirley at gmail.com (Mark Shirley)
Subject: Shellcoding Tutorial

Sure, there will eventually be a point in time when, because of
complete redesigns of os's, buffer overflows won't work anymore. 
However as time progresses new architectures will sprout and new
opporunties for explotation will arise.  I remember when red boxing
worked on every pay phone in existance.  The more it's exploited, the
more people know about it, the less likely it is to work the next
time.  It's the nature of technology and evolution.

On Thu, 2 Sep 2004 09:42:55 -0700 (PDT), bipin gautam
<visitbipin@...oo.com> wrote:
> we have been hearing many promishing technology...
> SOUNDS LIKE, Buffer overflow exploits will be a
> ...........ONCE UPON A TIME story, very soon???
> 
> bipin
> 
> 
> --- Steve <shanna@...c.edu> wrote:
> 
> > So I released a basic tutorial on Windows and Linux
> > shellcoding. For all of those interested, with
> > absolutely no idea how it works, the tutorial can be
> > found here:
> >
> http://www.vividmachines.com/shellcode/shellcode.html
> >
> > Like I said, this isn't an extremely advanced
> > tutorial, but I think it will be helpful to a lot of
> > people.
> >
> > C and basic x86 assembly knowledge are helpful.
> >
> > Comments are welcome and please be nice :-D.
> >
> > Notice: I use hardcoded addresses for the Windows
> > Example, I left hashing and sorting through the IAT
> > to a later talk.
> >
> >
> > *  *  *  *  *  *  *  *  *  *  *  *  *  *  *  *  *  *
> >  *  *  *  *  *  *  *  *  *
> > Steve Hanna
> > UIUC Undergraduate in Computer Engineering
> > http://www.vividmachines.com/
> > *  *  *  *  *  *  *  *  *  *  *  *  *  *  *  *  *  *
> >  *  *  *  *  *  *  *  *  *
> 
>                 
> __________________________________
> Do you Yahoo!?
> Yahoo! Mail is new and improved - Check it out!
> http://promotions.yahoo.com/new_mail
> 
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html
>