easternerd
Mar 26 2004, 09:41 PM
Analysis of the Exploitation Processes
by Steven Hill
| QUOTE |
Table of Contents:
~~~~~~~~~~~~~~~~~~
I. Forward
II. Types of Vulnerabilities
a: Stack overwrite
b: Heap overwrite
c: Function pointer overwrite
d: Format string
III. Exploitation Methods
a: Stack exploitation
b: Heap exploitation
c: Function pointer exploitation
d: Format string exploitation
e: Return-to-libc exploitation
IV. Summary
V. References
|
If you are interested ..
You can download the pdf file attached herein.
Please leave your comments and links if you have better texts.
tweakz20
Mar 26 2004, 10:02 PM
pretty informative, it goes over all the different kind of exploit ways with some detail on how it actually works, i like it
(it takes for granted you know C, Linux Shell, and ASM though)
Blackknight
Mar 26 2004, 10:56 PM
c linux and asm are easy to learn... very basic concepts..
there is a good book the art of exploitation which goes really in depth.. Even if you think you know it all you can always learn something new.. from a different point of view etc
tweakz20
Mar 26 2004, 11:48 PM
basic concepts??? what??? C's considered a foreign language, ASM's considered COMPUTER language (not just a programming language), and linux... well... it's pretty hard for a full time windows user
yeah, after you learn about them, it does make more sense, but still lol... i've been working on learning ASM for the past 3 months (only book they had was HLA... so it combines 2 programming languages.. the highlevel one is off of C and pascal, and the ASM part is barely mentioned... GRRRR... what a waste of time..)
DiabloPatch
Mar 27 2004, 02:37 AM
very nice indeed.
this goes right between the art of explotation as mentioned before the shellcoders handbook and exploiting software.
setthesun
Mar 27 2004, 04:11 AM
Thanks for paper, it looks great, but how can I start this process ?
I'm C beginner and I don't know assembler, But I'm programming VB more than 3 years. Any good papers to start them, or just go and learn C and ASM then come back
?
tweakz20
Mar 27 2004, 05:29 AM
lol.. you have to understand Linux command line to understand this totally too... if you're just beginning C, yeah, it probably would be a good idea to learn more about it before getting in this deep.. but i guess you don't HAVE to... read up on how it works and pay close attention to commands you saw in the code (what i do...) because sometimes there's commands that are really hard and people just look over it and get lost... or maybe commands that are really hard and people pay attention to but you'll never use in the real world...
point being- i suggest doing both (learning C and reading C exploits) at the same time.. that's what i do/did (with new languages)
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please
click here.
