Collaborate Disseminate
I was trying to research about anti-debugging techniques here, but i failed to make sense of what stack segment manipulation’s. Could anyone have a good explanation for what it means or nice resources to read up more about it?
I wrote a NASM program that uses the execve system call to run wget inside a newly spawned shell and execute the retrieved page:
[bits 64]
global _start
section .text
_start:
xor rcx, rcx
push rcx ; first 4
mov rcx, &qu… Continue reading Linux x86_64 Assembly works standalone, but Segfaults when ran as shellcode in C
The PDP-11, the Altair 8800, and the IMSAI 8080 were some of the heroes of the computer revolution, and they have something in common — front panel switches, and a …read more Continue reading Bootstrapping the Old Fashioned Way
The PDP-11, the Altair 8800, and the IMSAI 8080 were some of the heroes of the computer revolution, and they have something in common — front panel switches, and a …read more Continue reading Bootstrapping the Old Fashioned Way
I am trying to bypass the ASLR using the returntoplt attack for this I have to use a gadget pop rdi; ret I was able to find this gadget in __libc_csu_inint but for some reason whenever I use this address it gets corrupted in the stack. I c… Continue reading _libc_csu_init address is getting corrupted in x86_64
Ever wondered what it would take to roll your own OS? [Sebastian]’s Snowdrop OS might just provide you with some insight into that process, and maybe even some inspiration. [Sebastian] …read more Continue reading Homebrew an OS From Scratch? Snowdrop Shows How It’s Done
I am performing some Windows malware research on a rogue AV software called SpySheriff (password: infected). I want to edit the IP address within the PE (.exe) file to change it to my honeypot IP address. I know it is easier to set-up IP T… Continue reading Hex editing an IP address of a different length
I’m doing a binary challenge from pwnable.kr and I’m examining a some ROP gadget.
Until now I’ve always used gadget ending with ret or syscall/int 0x80, but now ROPgadget gave me a gadget ending with ret 0.
What’s the difference wrt ret?
For the majority of workloads, fiddling with assembly instructions isn’t worth it. The added complexity and code obfuscation generally outweigh the relatively modest gains. Mainly because compilers have become quite …read more Continue reading AVX-512: When The Bits Really Count
I’m not sure if this makes sense, I have no programming experience, but I’m just curious whether it’s possible to exploit a system by exploiting a vulnerability in the programming language the system uses, or by turning that system’s progr… Continue reading Can you hack something using assembly code vulnerability?