Home page logo

fulldisclosure logo Full Disclosure mailing list archives

Re: alpha numeric exploitation
From: Nick FitzGerald <nick () virus-l demon co uk>
Date: Fri, 27 May 2005 00:08:18 +1200

RaMatkal wrote:

I'm trying to develop an alphanumeric payload that needs to do a JMP -600 bytes...

Anyone got any ideas how to do this with only alpha numeric chars?

'eb' and 'e9' are obviously out of the question...

Think "encoding/decoding" and "self-modifying".

EICAR.COM has been doing it for more than decade to get its INT (cd) op-
codes executed, so this is hardly revolutionary new territory...

Beyond that, I'd be extremely surprised if someone hasn't written 
tutorials on doing alphanumeric-only payloads, if not even provided 
toolkits to take arbitrary code and "ASCII-fy" it.


Nick FitzGerald

Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]