Exploitation 102: Mitigations and Shellcode

Security researcher Dino Dai Zovi discusses advanced techniques in exploitation, as well as exploit mitigation and shellcoding...

Windows Exploitation Part 2

In part two of his lecture on exploiting Microsoft Windows, Dino Dai Zovi discusses specific techniques for attacking Windows machines...

Exploitation 101: Exploiting Windows

Security researcher and former penetration tester Dino Dai Zovi delivers a lecture at the Polytechnic Institute of New York University on exploiting Windows...

Q&A: Dino Dai Zovi

Dino Dai Zovi has gained a reputation as one of the top Apple security researchers in the industry and is the author of a new book on Apple security, “The Mac Hacker’s Handbook.” In this interview, he talks about the state of Apple security, why the company hasn’t implemented better memory...

Dino Dai Zovi on Mac security, 'no more free bugs'

Digital Underground podcast with Dennis Fisher In this episode, Dennis Fisher talks with Dino Dai Zovi, a security researcher and co-author of “The Mac Hacker’s Handbook,” about the ease of exploiting Mac OS X, the value of vulnerability research and his “no more free bugs” campaign. Download...

OSX/PPC - Remote findsock by recv() Key Shellcode

OSX/PPC - Remote findsock by recv Key Shellcode. Shellcode exploit for OSXPPC platform ;;; ;;; PowerPC OSX remote findsock by recv key shellcode ;;; ;;; Dino Dai Zovi , 20040816 ;;; .globl shellcode .text .set KEY, 0x5858580a .set PTHREADEXIT, 0x90017021 ; OSX 10.3.X shellcode: Lfindsock: addis...

DNS Spoofing Helper Service

This module provides a DNS service that returns TXT records indicating information about the querying service. Based on Dino Dai Zovi DNS code from Karma. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'resol...

Windows 9x/NT/2k/XP PEB method 29 bytes

No description provided by source. // // PEB way of getting kernel32 imagebase by loco. // Compatible with all Win9x/NT based operating systems. // // Gives kernel32 imagebase in eax when executing. // 29 bytes, only eax/esi used. // // Originally discovered by Dino Dai Zovi. // // include stdio....

[SA16318] Metasploit Framework "defanged" Mode Bypass Vulnerability

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

Windows 9x/NT/2k/XP PEB method 29 bytes

Windows 9x/NT/2k/XP PEB method 29 bytes. Shellcode exploit for win32 platform // // PEB way of getting kernel32 imagebase by loco. // Compatible with all Win9x/NT based operating systems. // // Gives kernel32 imagebase in eax when executing. // 29 bytes, only eax/esi used. // // Originally...

windows 9x/NT/2k/XP PEB method 29 bytes

Exploit for win32 platform in category shellcode ======================================= Windows 9x/NT/2k/XP PEB method 29 bytes ======================================= // // PEB way of getting kernel32 imagebase by loco. // Compatible with all Win9x/NT based operating systems. // // Gives kernel...