Re: win32 shellcoding

From: wirepair <wirepair(at)roguemail.net>
Date: Tue Jun 03 2003 - 14:51:38 EDT

On Sun, 1 Jun 2003 18:01:08 -0400
  "deepcode" <deepcode@sympatico.ca> wrote:
>Hey people.

I began investigating this as well, this may help, but i'm still confused on how people write such tiny connect back shellcode (kralor's webdav exploit comes to mind). http://sh0dan.org/files/llacmd.txt
-wire

Also this is hardcoded offsets for GetProcAddress and LoadLibraryA.. there are examples files for the addresses. check out
http://www.harmonysecurity.com/kungfoo.html

---

For the best comics, toys, movies, and more, please visit <http://www.tfaw.com/?qt=wmf> Received on Wed Jun 4 11:40:05 2003