December 2017
Intermediate to advanced
312 pages
7h 54m
Japanese
Content preview from カーハッカーズ・ハンドブック ―車載システムの仕組み・分析・セキュリティ
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
214
The Car Hacker
’
s Handbook
C
アセンブラのコードを書き換えて
NULL
値を取り除く方法もある。
MOV
命令と
NULL
値
を含んでいる値を、レジスタ消去命令と適切な値を加算する命令に置き換えることが典型
的な対処だ。例えば、
MOV RDI, 0x03
という命令を
16
進数に変換するとしよう。代入
する
3
という値が
32
ビットだと仮定すると、
0x00 0x00 0x00 0x03
となり、
3
の前に多
くの
NULL
値が前置きされてしまう。この場合はまず、
RDI
と
RDI
自身の
XOR
演算を行い
（
XOR RDI, RDI
）、
RDI
の値を
NULL
にしたのちに、
RDI
をインクリメント（
INC RDI
）
する演算を
3
回実行することで、
NULL
値を消去できる。その他の箇所についても同様の
工夫が必要だろう。
NULL
値を取り除くように調整を終えると、
string
型のバッファに注入可能なシェルコー
ドが作成できる。本書では変更を加えたアセンブラのコードは掲載しない。読みやすいコー
ドではないからだ。代わりに作成したシェルコードを次に示す
＊
2
。
Metasploit の ペイロードを 作 成
リスト
11 - 4
は、作成したシェルコードを使用した
Metasploit
のペイロードのための
テンプレートである。このペイロードを
Metasploit
のディレクトリ
modules/payloads/
singles/linux/armle/
の中に保存し、
flood_temp.rb
のように、コードの働きがわかる名前 ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.