Hello there.
My name is Denthor (Grant Smith) of the South African demo group ASPHYXIA. This is a trainer that have been writing on and off for the last few months
in order to help out budding young graphics programmers.
235 kb
v. 2
02/05/2012 00:37
Luis vlan7
Barton Miller (et al) published 1988-1989 "An empirical study of the reliability of UNIX Utilities" in the ACM. With relatively simply (by todays standards) fuzzing, they were "able to crash 25-33% of the utility programs on any version of UNIX that was tested" Ver
El CERT publico un advisory en 1989 con un parche para un overflow en passwd en BSD 4.3, que segun cuentan ellos mismos fueron previamente informados por un folk de Berkeley en diciembre-1988.
Una version (hack the hack) del exploit original del BoF en NCSA httpd 1.3 Esta hecha a la manera en que lo explica Aleph1 en el mitico articulo de la Phrack que todos conocemos.
Y aqui tenemos un exploit del tercer BoF conocido de la historia. El shellcode esta hecho al modo como explicó Mudge en el primer texto sobre shellcoding publicado. El codigo esta "overbloated".
Route (daemon9)
Home: /u1/daemon9
Shell: /usr/bin/tcsh
No mail.
Route (daemon9) is not presently logged in.
Last seen at netcom18 on Fri May 24 12:26:46 1996
Linux/x86 ASLR bypass exploiting ret2eax classical SUID privilege elevation. Video complementario a la tercera entrega de las ASM/Shellcoding Series.
11453 kb
v. 4
01/02/2012 11:45
Luis vlan7
Sin duda, el texto mas citado de Exploiting en cualquier trabajo Ver
.oO Phrack 49 Oo.
Volume Seven, Issue Forty-Nine
File 14 of 16
BugTraq, r00t, and Underground.Org
bring you
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
Smashing The Stack For Fun And Profit
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
by Aleph One
aleph1@underground.org
The Story of Alice and Bob Extract from the Alice and Bob After-Dinner Speech given at the Zurich Seminar, April 1984, by John Gordon by invitation of Professor James Massey
El codigo fuente del gusano de Morris. Es la primera explotacion de un buffer overflow conocida (entre otras muchas cosas que ingeniosamente atacaba el worm).
ASM / Shellcoding Series
