Sockets, Shellcode, Porting, and Coding: Reverse Engineering Exploits and Tool Coding for Security Professionals

NOTE

When working with a closed-source application, an exploit developer will often

use a debugger to help understand how the closed-source application functions

internally. In addition to helping step through the program assembly instruc-

tions, it also allows a developer to see the current state of the registers,

examine the virtual memory space, and view other important process informa-

tion. These features are especially useful in later exploit stages when one must

determine the bad characters, size limitations, or any other issues that must be

avoided.

Two of the more popular Windows debuggers can be downloaded for

free at:

www.microsoft.com/whdc/devtools/debugging/default.mspx ...