decoder

QuickZip Stack BOF 0day: a box of chocolates

Published March 27, 2010 |

Over the last couple of weeks, ever since I published 2 articles on the Offensive Blog, I have received many requests from people asking me if they could get a copy of those articles in pdf format. My blog does not include a pdf generator, but it has a “print” button, so you can get […]

Posted in 001_Security, Exploit Writing Tutorials, Exploits | Tagged 0day, 0day-cisco, character set, corelan-quickzip, corelan-safeseh, corelanc0d3r, decoder, encoder, esp-ebp, filename, limitation, memory-heap-stack-esp-ebp, metasploit-cyclic-pattern, Peter Van Eeckhoutte, quickzip, seh, stack-esp-ebp, try harder, windbg-wscr-scripts, zip

Exploit writing tutorial part 9 : Introduction to Win32 shellcoding

Published February 25, 2010 |

By Peter Van Eeckhoutte (corelanc0d3r)

Over the last couple of months, I have written a set of tutorials about building exploits that target the Windows stack. One of the primary goals of anyone writing an exploit is to modify the normal execution flow of the application and trigger the application to run arbitrary code… code that is injected by the […]

Posted in 001_Security, Exploit Writing Tutorials | Tagged asm, assembly, bad chars, beta3, bits 32, bytecode, calc, charset limitation, decoder, encoder, ExitFunc, ExitProcess, ExitThread, exploit, exploit writing, find function, fstenv, fstenv_mov, GetProcess, hash, intel, introduction win, kernel32, loadlibraryA, loopd, MessageBoxA, metasploit, nasm, null bytes, opcode, part introduction, peb, pvefindaddr, pvereadbin.pl, pvewritebin.pl, seh, shellcode, shikata_ga_nai, skylined, topstack, tutorial part, user32, w32-testival, win shellcoding, win32, WinExec, writing, writing tutorial, x86

Exploit writing tutorial part 7 : Unicode – from 0x00410041 to calc

Published November 6, 2009 |

By Peter Van Eeckhoutte (corelanc0d3r)

Finally … after spending a couple of weeks working on unicode and unicode exploits, I’m glad and happy to be able to release this next article in my basic exploit writing series : writing exploits for stack based unicode buffer overflows (wow – that’s a mouthful). You may (or may not) have encountered a situation […]

Posted in 001_Security, Exploit Writing Tutorials, Exploits | Tagged 00410041, 0x00410041, 0x06, 0xeb, alpha2, BufferRegister, Building IA32 'Unicode-Proof' Shellcodes, chris anley, code page, Creating Arbitrary Shellcode in Unicode Expanded string, dave aitel, decoder, eax, eip, exploit, fx, msfencode, MultiByteToWideChar, nseh, null bytes, ollyuni, prepend, pvefindaddr, seh, shellcode, skylined, unicode, unicode jump seh, utf-16, utf-7, utf-8, venetian, vense.pl

Corelan Cybersecurity Research

:: Knowledge is not an object, it's a flow ::

QuickZip Stack BOF 0day: a box of chocolates

Exploit writing tutorial part 9 : Introduction to Win32 shellcoding

Exploit writing tutorial part 7 : Unicode – from 0x00410041 to calc

Corelan Training

Donate

Corelan Team Merchandise

Corelan on Slack

Actions

Categories

Hi there!

We have good news for you!