shellcode_开发者

running shellcode + vs2010

I just tried the following code snippet for shellcode testing purposes:- #include<iostream> using namespace std;[详细]

2023-04-13 09:26 分类：问答

Need to exploit buffer overflow. Can't figure out how to uncorrupt the stack after executing exploit code?

Basic开发者_Python百科ally the function I am exploiting is this: int getbufn() { char buf[512]; Gets(buf);[详细]

2023-04-12 09:31 分类：问答

Alternatives to NOP for shellcode nop sleds

Does anyone know of any online source that provides instruction alternatives to a NOP opcode ? Like \'xchg ax, ax\' and the likes. I\'m pretty sure that there is also a tool for it开发者_StackOverflo[详细]

2023-04-10 01:13 分类：问答

Difference between - buffer overflow and return to libc attack

I want to comprehend the exact difference between these two types of attack. From what I have read: Buffer Overflow: It overwrites the ret address on the stack to point to another section of the code[详细]

2023-04-02 04:23 分类：问答

Homework - Cannot exploit bufferoverflow

I am trying to learn to exploit simple bufferover flow technique on Backtrack Linux. Here is my C program[详细]

2023-03-26 02:39 分类：问答

NULL-free shellcode

I am trying to convert an assembly prog开发者_StackOverflowram I wrote into NULL-free shellcode. However, I am unsure how to go about this for certain instructions.[详细]

2023-03-23 05:39 分类：问答

Perl's Pack('V') function in Python?

I\'ve been working on some exploit development recently to get ready for a training course, and I\'ve run into a problem with a tutorial. I\'ve been following along with all the tutorials I can find,[详细]

2023-03-13 14:22 分类：问答

calling kernel32.dll function without including windows.h

if kernel32.dll is guaranteed to loaded into a process virtual memory,why couldn\'t i call function such as Sleep without including windows.h?[详细]

2023-03-10 21:48 分类：问答

Do we overwrite EIP (return address) with an opcode or memory address?

char shellcode[] =\"\\xeb\\x2a\\x5e\\x89\\x76\\x08\\xc6\\x46\\x07\\x00\\xc7\\x46\\x0c\\x00\\x00\\x00\"\"\\x00\\xb8\\x0b\\x00\\x00\\x00\\x89\\xf3\\x8d\\x4e\\x08\\x8d\\x56\\x0c\\xcd\\x80\"\"\\xb8\\x01\\[详细]

2023-02-27 11:49 分类：问答

Shellcode as payload for buffer overflow (or other) exploits executed as root?

When I use shellcode such as the ones provided here* as payload to some vu开发者_StackOverflow社区lnerable program, how is the shell executed as root? I am asking about how the privileges are elevated[详细]

2023-02-26 06:50 分类：问答