THREAD: Software Exploitation (Introduction - Debugging - Shellcode)
  1. 05-16-2017, 05:39 PM
    Hydrogen's Avatar
    Hydrogen
    Super Mod
    Hydrogen's Avatar
    Hydrogen
    Super Mod
    5,370
    Posts
    91,450
    Reputation
    Aug 2015
    NextGenUpdate
    You must login or register to view this content.


    Sup guys, many of you all are some great programmers here on NextGenUpdate. So taking it to another level of reversing and hacking. Found some clean slides that will help you gain more knowledge when it comes to Software Exploitation. This will be broke down into three different categories in order:


    1. Introduction to Software Exploitation
    2. Debugging to Software Exploitation
    3. Shellcode to Software Exploitation

    I went through them, and they seem to be very organized. More creativity to a certain topic makes it fun to learn, correct? Hopefully this helps any of you all who are curious over this, good luck!

    1.) You must login or register to view this content.
    2.) You must login or register to view this content.
    3.) You must login or register to view this content.
    Last edited by Hydrogen ; 05-16-2017 at 05:47 PM.

  2. The Following User Thanked Hydrogen For This Useful Post:


  3. 05-17-2017, 08:01 AM
    Oneup's Avatar
    Oneup
    Guest
    Oneup's Avatar
    Oneup
    Guest
    n/a
    Posts
    n/a
    Reputation
    Once upon a time...
    NextGenUpdate
    Originally Posted by Hydrogen View Post
    You must login or register to view this content.


    Sup guys, many of you all are some great programmers here on NextGenUpdate.


    You are talking to like 8 people and of those 8 people 0 are probably interested.
  4. The Following User Thanked Oneup For This Useful Post:


  5. 05-17-2017, 08:09 AM
    21
    Posts
    423
    Reputation
    Nov 2013
    NextGenUpdate
    Don't want to offend you but I think those threads that you keep on making add zero value to the sub because the topic are very generic and people interested in learning will most likely easily find similar content by a quick search on google.
    People need to bring their own content, show off shit and such... In the past 24 hours you posted links to 3 books, a one thousand pages pdf and about 120 slides. I have a hard time believing that even you had to time to read all of it in such a short time lapse...
    You're just saturating the section with useless content.
  6. 05-17-2017, 08:18 AM
    6,766
    Posts
    64,013
    Reputation
    May 2009
    NextGenUpdate
    Originally Posted by theDaftDev View Post
    Don't want to offend you but I think those threads that you keep on making add zero value to the sub because the topic are very generic and people interested in learning will most likely easily find similar content by a quick search on google.
    People need to bring their own content, show off shit and such... In the past 24 hours you posted links to 3 books, a one thousand pages pdf and about 120 slides. I have a hard time believing that even you had to time to read all of it in such a short time lapse...
    You're just saturating the section with useless content.


    Not really useless as people with this interest can find it here...

    Don't see what's wrong in posting a thread...

    If you want useless look at oneup's comment.... 10/10 helpful
  7. 05-17-2017, 08:25 AM
    Oneup's Avatar
    Oneup
    Guest
    Oneup's Avatar
    Oneup
    Guest
    n/a
    Posts
    n/a
    Reputation
    Once upon a time...
    NextGenUpdate
    Originally Posted by EYE View Post
    Not really useless as people with this interest can find it here...

    Don't see what's wrong in posting a thread...

    If you want useless look at oneup's comment.... 10/10 helpful

    If you want useless, reinstate you as staff. 10/10 dont think you even do shit.

    The point being this is all he does. Find something he doesn't understand on another site and pastes it here. What daft is talking about is if you are going to do that at least do something with it. Write a tutorial, make a project but don't just paste shit you find somewhere for fuck all reason.
  8. 05-17-2017, 08:27 AM
    21
    Posts
    423
    Reputation
    Nov 2013
    NextGenUpdate
    Originally Posted by EYE View Post
    Not really useless as people with this interest can find it here...

    Don't see what's wrong in posting a thread...

    If you want useless look at oneup's comment.... 10/10 helpful


    Do you seriously think that out of the few members that are active in the section any of them will think that the first place where they will find relevant information about any specific topic is the barely alive programming section of NGU? That's just stupid.
    This information is easily accessible anywhere else and it's less of a hassle to look for it on google. I don't think oneup's comment is useless; like him I wish threads like this didn't contribute in making this place mundane and devoid of any original content
  9. 05-17-2017, 08:28 AM
    6,766
    Posts
    64,013
    Reputation
    May 2009
    NextGenUpdate
    Originally Posted by Oneup View Post
    If you want useless, reinstate you as staff. 10/10 dont think you even do shit.

    The point being this is all he does. Find something he doesn't understand on another site and pastes it here. What daft is talking about is if you are going to do that at least do something with it. Write a tutorial, make a project but don't just paste shit you find somewhere for fuck all reason.


    That makes sense, and your probably correct about the un-needed insult/truth aimed at me.
  10. 05-17-2017, 08:29 AM
    Oneup's Avatar
    Oneup
    Guest
    Oneup's Avatar
    Oneup
    Guest
    n/a
    Posts
    n/a
    Reputation
    Once upon a time...
    NextGenUpdate
    Originally Posted by EYE View Post
    That makes sense, and your probably correct about the un-needed insult/truth aimed at me.


    I can only work with what you give me, if you wish to start the shit talking expect to get it back. Simple as that.
    In case you forgot:
    Originally Posted by EYE View Post


    If you want useless look at oneup's comment.... 10/10 helpful
  11. 05-17-2017, 08:48 PM
    Specter's Avatar
    Specter
    Pro Memer
    Specter's Avatar
    Specter
    Pro Memer
    921
    Posts
    44,397
    Reputation
    Aug 2012
    NextGenUpdate
    Originally Posted by Hydrogen View Post
    You must login or register to view this content.


    Sup guys, many of you all are some great programmers here on NextGenUpdate. So taking it to another level of reversing and hacking. Found some clean slides that will help you gain more knowledge when it comes to Software Exploitation. This will be broke down into three different categories in order:


    1. Introduction to Software Exploitation
    2. Debugging to Software Exploitation
    3. Shellcode to Software Exploitation

    I went through them, and they seem to be very organized. More creativity to a certain topic makes it fun to learn, correct? Hopefully this helps any of you all who are curious over this, good luck!

    1.) You must login or register to view this content.
    2.) You must login or register to view this content.
    3.) You must login or register to view this content.


    Has some good diagrams but it seems the slides assume a lot of things, and you probably won't really understand these without a base knowledge in x86/x64 anyway. But the disassembly shown can be very different because of

    1) compiler optimizations
    2) calling convention (CDECL vs. STDCALL)
    3) userland or kernel
    4) architecture, these slides seem to be x86-oriented
    5) flags passed to the compiler such as security flags like -fstack-protector which adds stack cookies into the mix

    Resources are still pretty good though for getting a concept of certain things like how the stack is managed in memory and understanding it's a FIFO system, and endianness.
  12. The Following User Thanked Specter For This Useful Post:


  13. 05-18-2017, 02:34 PM
    boomcas3's Avatar
    boomcas3
    Pokemon Trainer
    boomcas3's Avatar
    boomcas3
    Pokemon Trainer
    65
    Posts
    130
    Reputation
    Jan 2016
    NextGenUpdate
    usefull