Collaborate Disseminate
To get its engineers thinking about design for assembly back in the 1980s, Westinghouse made a video about a product optimized for assembly: the IBM Proprinter. The technology may be dated, but the film presents a great look at how …read more
Continue reading Retrotechtacular: Design for Assembly, 1980s-Style
My goal is to obfuscate metasploit windows payloads’ assembly code (adding junk code to the payload itself), then adding the obfuscated shellcode to inline assembly in C. The issue is there is no format command line argument (-f) that prov… Continue reading msfvenom: how to output assembly of windows payload for inline assembly in C?
Being gadgets change per each system and architecture (do they?), how would an attacker be able to determine the offsets of various Return Oriented Programming gadgets, would an attacker first need to determine:
-The operating system?
-The… Continue reading How do attackers determine ROP gadgets remotely?
So I got recently interested in buffer overflow and many tutorials and recourses online have this CTF like attack where you need to read the content of a flag file (using cat for example).
So I started looking online for assembly examples … Continue reading How to deal with a bad char in a shellcode buffer overflow?
I recently was studying x86 buffer overflows + ret2libc attacks from https://www.ret2rop.com/2018/08/return-to-libc.html and I noticed the order is as follows:
bytes to fill buffer + address of system + return address for system/address of… Continue reading Understanding ret2libc return address location
I’m new to exploit development and while watching a tutorial I came across the topic of "Bad character identification". I’m referring to the process of sending all possible characters to the vulnerable process to see if there are… Continue reading What is source of bad characters exist in buffer overflows
I’m new to exploit development and while watching a tutorial I came across the topic of "Bad character identification". I’m referring to the process of sending all possible characters to the vulnerable process to see if there are… Continue reading What is source of bad characters exist in buffer overflows
Let’s say I have this piece of code that changes the 10 address to the value 20 and the following one to 30
mov ebx,10
mov [ebx],20
add ebx,1
mov ebx,30
How can the address change each time it is executed?
is it require change that the c… Continue reading How does ASLR work if in the assembly code the addresses are the same
Found a bug in a function in a loop where I can go past a loop in assignment where value is read from past malloced memory
The function has no call, int or other assembly instructions afterwards.
Instruction I control is movzbl. I control … Continue reading Exploit – Code execution without assembly call instruction, int etc on ia_64
Building a retro computer, or even restoring one, is a great way to understand a lot of the fundamentals of computing. That can take a long time and a lot of energy, though. Luckily, there is a Twitter bot out there that can let you experience an old 8-bit Atari …read more