Smiasm - Reverse engineering framework

Smiasm - Reverse engineering framework What is Miasm? Miasm is a a free and open source GPLv2 reverse engineering framework. Miasm aims at analyzing/modifying/generating binary programs. Here is a non exhausting list of features: opening/modifying/generating PE/ELF 32/64 le/be using Elfesteem...

Ассемблер для самых маленьких.

Ассемблер для самых маленьких План: 1 Введение 2 Пару слов про асм 3 Tasm 4 Регистры, сегменты 5 Команды асма 6 Первая прога 7 Разбор программы 8 Функции 9 Стек 10 Команды перехода 11 Циклы 12 Процедуры 13 Include 14 Написание программы, используя полученные знания 15 Вывод Начнем. I Введение...

Any combination of instructions to achieve free kill-vulnerability warning-the black bar safety net

Note:writing flower instructions,refer to the following pairs of instructions,can be arbitrary free combination. Free to killeffect. push ebp pop ebp push eax pop eax push esp pop esp push 0 push 0 push 1 0 -------which numbers can be arbitrary,note the following correspondence push -10...

OllyDbg Format String 0day analysis and use-vulnerability and early warning-the black bar safety net

This article has been published in the hacker line of Defense of the 2 0 0 7 years 6 monthly. The author and the hacker line of Defense on the retention of copyright, reproduced, please indicate the original source. For the reader: overflow of lovers Pre-knowledge: Assembly language, buffer...

Fuzzing in Microsoft Word overflow analysis and use-vulnerability and early warning-the black bar safety net

This article has been published in the hacker line of Defense of the 2 0 0 7 years 7 monthly. The author and the hacker line of Defense on the retention of copyright, reproduced, please indicate the original source. For the reader: overflow of lovers Pre-knowledge: Assembly language, buffer...

Modifications introduced into the table to create penetration KIS6 download-vulnerability warning-the black bar safety net

Article author: gyzy E. S. T it www.gyzy.org） Information source: evil octal information security team www.eviloctal.com） This article has been published in the hacker line of Defense of the 2 0 0 7 year 2 monthly. The author and the hacker line of Defense on the retention of copyright, reproduce...

From head to toe understanding the buffer overflow-vulnerability warning-the black bar safety net

In this guide, we will discuss what is buffer overflow and how to use it. You must understand the C language and Assembly language, if you are familiar with GDB while more is good, of course it is not very necessary. Memory organizationmemory is divided into 3 parts 1. The text areaprogram area...

Bypass Windows Rootkit detection systems-vulnerability warning-the black bar safety net

Introduction PatchFinder is a design very cleverprocedure, based on EPAexecution path analysistechniques are used to detect the intrusion of kernel Rootkits. Appendix 1 and 2 allows you to understand how it works. This article will provide a bypass of the EPA method. Method The EPA Intel-based...

os-x/PPC simple write() 75 bytes

Exploit for os-x/ppc platform in category shellcode ================================ os-x/PPC simple write 75 bytes ================================ / PPC OSX/Darwin Shellcode by B-r00t. 2003. Does write; exit; See ASM below. 75 Bytes. / char shellcode = "\x7c\x63\x1a\x79\x40\x82\xff\xfd"...

linux/x86 ipchains -F 49 bytes

No description provided by source. include stdio.h include string.h / asm" sub $0x4,%esp Con esto conseguimos que la shellcode nunca se popl %esp sobreescriba... gracias RaiSe : xorl %edx,%edx %edx a cero pushl %edx y ponemos los zeros del final del string en memoria pushw $0x462d tenemos -F0000...