full-disclosure - alpha numeric exploitation

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <429664F2.26406.6C82D35@localhost>
Date: Thu May 26 13:10:10 2005
From: nick at virus-l.demon.co.uk (Nick FitzGerald)
Subject: alpha numeric exploitation

RaMatkal wrote:

> I'm trying to develop an alphanumeric payload that needs to do a JMP -600 bytes...
> 
> Anyone got any ideas how to do this with only alpha numeric chars?
> 
> 'eb' and 'e9' are obviously out of the question...

Think "encoding/decoding" and "self-modifying".

EICAR.COM has been doing it for more than decade to get its INT (cd) op-
codes executed, so this is hardly revolutionary new territory...

Beyond that, I'd be extremely surprised if someone hasn't written 
tutorials on doing alphanumeric-only payloads, if not even provided 
toolkits to take arbitrary code and "ASCII-fy" it.

Regards,

Nick FitzGerald