Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos



Vulnerability Development: Re: creating a "cc" opcode from ASCII shell code

Re: creating a "cc" opcode from ASCII shell code

From: <Valdis.Kletnieks_at_vt.edu>
Date: Fri, 22 Jun 2007 14:20:00 -0400

On Fri, 22 Jun 2007 03:58:24 MDT, Aaron Adams said:

> Maybe I am just tired.... My guess is that I must
> seed a register with an ASCII value and then
> and/xor/not it with approriate value. I have tried
> using add/sub with no luck.

Yes, that's your best option at that point - you can't get a 0xcc
in there because of the 0z10-0z79, but you *can* start with a 0x40,
shift that left 1 to get a 0x80, and then OR that into a 0x4c.

(Getting a shift-left may be a problem - if so, try "multiply by 2"
or "add to itself" or similar alternatives. Maybe loading a 16-bit
0x4020 and shifting it *right* 7 bits will work. Play around. ;)

  • application/pgp-signature attachment: stored
Received on Jun 22 2007
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
edgeos