SecurityTube

Description: Shellcode from public resources might not always be "ready for immediate use" - In many cases the author of the shellcode might have left placeholders for modification. If you do not know how to look into and make these modifications then the shellcode would be useless to you.

Here is one case: http://www.shell-storm.org/shellcode/files/shellcode-611.php

In this video, we first analyze the shellcode and see that it uses execve to run wget with the URL to download. The shellcode author has hardcoded the URL as "aaaa" which would be useless if you were a copy-paste person :)

We understand how the shellcode functions and use Python shortcuts to create the shellcode for the file name to download. This video is a quick and dirty guide to modifying shellcode :) Enjoy and Let me know your comments.

This free video is sponsored by SecurityTube Certifications: http://securitytube-training.com

Tags: hod , shellcode , modify , download , url ,

Latest from the SecurityTube Blog:

Comments (8):

• John-Nash on Sun 24 Feb 2013
  
  Interesting video! I am awaiting for the shellcode encoder one which you promised on Facebook.
• MaskedPhrogg on Mon 25 Feb 2013
  
  Whoo hoo! Another nice freebie clip :-D
  Just like your Assembly MegaPrimer this stuff is helping me understand Jon Erickson's book _Hacking: The Art of Exploitation_ better. Love how you keep going back to Python too. So easy to scratch up quick-n-dirty scripts to do simple tasks and there is so much included in the standard releases.
• Vivek-Ramachandran on Mon 25 Feb 2013
  
  @John-Nash the encoder video is up :) check it out.
  
  @MaskedPhrogg Thanks! yup, prototyping in Python is just fantastic :) love the language ...
• Engine007 on Sun 03 Mar 2013
  
  Thank you so much, Vivek! Amazing video.
• R3ZN0V on Tue 12 Mar 2013
  
  Marvelous video Vivek ,everything is clear and illustrated , by the way , i'am one of your students in the amazing course SLAE , thanks sooooooooo much , Viva Vivek . ;)
• warri0r_ on Wed 22 May 2013
  
  Good video.
• warri0r_ on Wed 22 May 2013
  
  Good video.

Login to post a comment