15 replies to this topic

[barabas]

This is something I found while checking my old docs. I wrote it originally for whitehat.co.il. Enjoy it.

Attached Files

•  slmailbo.pdf   1.91MB   798 downloads

[dfx]

I've always been interested in learning how to exploit flaws in programs. I've never had the time to look for good tutorials, though. Thanks for the post.

[whi7er]

entertaining and easy to follow good job!

[webdevil]

This tutorial makes it very simple for me to learn, couldnt be better! thanks!

[Skydriver]

hi barabas long time whats up

[skydance]

i cant download it

[t3ctrix]

woops! me neither...

[Erra]

Right click and save as works. Left clicking on it doesnt. THanks for the tut mate

[Trinitron]

Well, kinda good but this tutorial didn't enlighten us on the asm knowledge needed for this exploit. ( For example, what is an EIP and how it works ).

Oh well. I've been looking for that sort of a tutorial where you first deliberately write an insecure program in C and then you exploit it.

[Vhaerun]

If you don't know those terms you should read Aleph1's article about buffer overflows. A EIP is the Instruction Pointer - it points to the address of the next instruction that is about to be executed. A ESP is the Stack Pointer,EBP is the Base Pointer,and a NOP is a operation that does "No OPeration" - it sounds bogus,but that's what it does .

[abelhao]

Nice white paper!

Edit: Edu: no thanks buddy, and look at the topic dates before posting please!

[Ken]

It looks like an interesting read, but I can't download it.


Edu says : trial guys cant download attachments in this section

[mango1122]

Ok it's here - hxxp://rapidshare.com/files/146862909/slmailbo.pdf
Stop bumping old threads

[mango1122]

oops duplicate post