Image
 
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 25 guests and 1 member online
EH-Net Donations

Enter Amount:
$

Google Ads
EH-Net News Feeds
Latest Additions
Book Recommendations





 
Advertisement

You are here: Home arrow Forum
Ethical Hacker Community Forums
January 09, 2009, 06:12:14 AM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: ChicagoCon 2009 - May 4 - 9. Boot Camps & an Ethical Hacking Conf. www.chicagocon.com
 
  Home Help Calendar Login Register  
  Show Posts
Pages: [1]
1  Ethical Hacking Discussions and Related Certifications / Programming / Re: understanding for rid null bytes from my code ??? on: December 11, 2008, 04:51:40 AM
Hi NickFnord,

Thanks for your opinion and it makes me realizes and comfort about writing shellcode  Smiley.

Thanks again for your help  Grin.


regards,
nubie
2  Ethical Hacking Discussions and Related Certifications / Programming / Re: understanding for rid null bytes from my code ??? on: December 10, 2008, 10:08:35 PM
Hi NickFnord,

thanks for the tutorial above, but from that that tutorial it makes me think/choose for
create a true code without NULL by using pure assembly code or fixing NULL bytes later
when code has set up  Huh, actually both of it i must still learn but i just ask some opinion
about this.

Thank's a lot . Smiley


regards,
nubie
3  Ethical Hacking Discussions and Related Certifications / Programming / Re: understanding for rid null bytes from my code ??? on: December 09, 2008, 03:03:34 AM
Hi all,
What i want to asking is about in line 16 in my code that i posted about %.LC0 when i search about LC0 it just about symbol/label for an address and i see using objdump the address is
0x8048500 and it contain one part NULL, i need some help/advices for rid that part of NULL from that address ?.
And also is my think is true based on this replies post, about if that just contain full NULL like ex:
    mov ebx, 0 (in shellcode it contain full NULL)
    so the change is: xor ebx, ebx
And how about is write movl $0,(%esp)(like my code in below, it showed)
is just the change just like : xor %esp,(%esp)

Thank you, but sorry if my language is confusing Embarrassed,

regards,
nubie
4  Ethical Hacking Discussions and Related Certifications / Programming / Re: understanding for rid null bytes from my code ??? on: December 08, 2008, 09:49:27 PM
Thank you NickFnord for your support and your help  Smiley,
and i'm really like/glad if you want to help me.

regards,
nubie  Smiley
5  Ethical Hacking Discussions and Related Certifications / Programming / Re: understanding for rid null bytes from my code ??? on: December 07, 2008, 11:14:59 PM
Hi all,

Thanks a lot for all your replies and sorry just post this reply now, cause
i had a problem internet connection( Cry in my country it's so difficult to find a good and cheap provider). And about code above that i' had compiled theoritically
i had understand that but why/or it is true when i compiled same code in different pc with different operating systems the results i've compiled had different cause i had use suse and cygwin for compiled that code to assembly code and the result seem different although if i read carefully the null byte is different Huh.
And i still try to rid that null in different OS like that cause i want to full understanding about this matter Grin. Thank's a lot again for your kind help
and sorry for this post  Smiley
6  Ethical Hacking Discussions and Related Certifications / Programming / understanding for rid null bytes from my code ??? on: December 04, 2008, 02:53:43 AM
Hi all,
i have a question about shellcode that  i learn:
  * i had create some c file and i had compiled it to exe but  when i
    use "objdump -d file.c" i saw there is a null bytes on my code so i had compile that c file to assembler
   file using gcc but when i got the assembler files i always failed to rid that null bytes from my assembler
   code that i just compile, here is the assembler code that i don't had modified:
 
Code:
  .file   "shell.c"
        .section        .rodata
.LC0:
        .string "/bin/sh"
        .text
.globl main
        .type   main, @function
main:
        leal    4(%esp), %ecx
        andl    $-16, %esp
        pushl   -4(%ecx)
        pushl   %ebp
        movl    %esp, %ebp
        pushl   %ecx
        subl    $36, %esp
        movl    $.LC0, -12(%ebp)
        movl    $0, -8(%ebp)
        movl    -12(%ebp), %edx
        movl    $0, 8(%esp)
        leal    -12(%ebp), %eax
        movl    %eax, 4(%esp)
        movl    %edx, (%esp)
        call    execve
        movl    $0, (%esp)
        call    exit
        .size   main, .-main
        .ident  "GCC: (GNU) 4.1.2 20061115 (prerelease) (SUSE Linux)"
        .section        .note.GNU-stack,"",@progbits
 
Thanks a lot before and sorry for this stupid question(still noob about asm  Embarrassed ),

Thank you,  Smiley
7  Ethical Hacking Discussions and Related Certifications / Programming / Re: find libraries include in c programming on: October 10, 2008, 11:42:01 PM
Hi, this is a code that come from the ebook and i had try to modify this code in order that to running this code in my pc but it's useless cause i failed and even i had download hack.h from koders.com it failed too because it's a lot more include file i need to run this code,
     
Code:
#include <stdio.h>
#incude "hack.h"

int main(int argc, char * argv[])
{
int port = 8080;
char* targetip;

if (argc < 2)
{
      printf("Webgrab Usage:\r\n");
      printf("    %s <TargetIP> [port]\r\n", argv[0]);
      return(0);
}
   
targetip = argv[1];
char* output;
   
if (argc >= 3)
{
        port = atoi(argv[2]);
}
if (argc >= 4)
{
        output = get_http(targetip, port, argv[3]);
}
else
{
        output = get_http(targetip, port, "/");
}
 
         if( is_string_in("Error 40", output )                ||
             is_string_in("302 Object Moved", output )        ||
              is_string_in("404 Not Found", output )          ||
              is_string_in("404 Object Not Found", output ))
         {
              printf("Page doesn't Exist");
         }
         else
         {
              printf("%s", output);
         }

return(0);
 
}

And also i want to know what can we do if got a c code that we don't have enough include file in our system? that code must be can't be compiled/running isn't it?, or we can just download an include file that we don't have like i do with a code above(but i failed)?, This question i ask if i got a code that don't have any readme files and in a future if something happens i had prepared.

Thank's a lot for a replies guys and i'm need an advices again, sorry  Smiley
8  Ethical Hacking Discussions and Related Certifications / Programming / find libraries include in c programming on: October 07, 2008, 05:27:05 AM
hi all, i want to ask some question,
how to solve some problem about libraries in c ?
cause sometimes i got some code and when i try it, it shows error
like this "unable to open include file'hack.h'.
and i realize it happen cause i don't have file hack.h on my folder include.
Is there any way to fix it cause i had download file hack.h from internet and copy paste to folder include but after that it shows error again cause in file hack.h there are more another file must need, or i must had knowledge
about create my own libraries cause i think it's very complex for me to do
that?

Thank's a lot and i'm need an advices about this.  Smiley
9  Ethical Hacking Discussions and Related Certifications / Malware / Re: write my own exploits ? on: September 22, 2008, 09:37:30 PM
Thank's a lot guys for all of your advices, i'll deep learning on my c programming cause i never touch c programming for 1 year and because of that i must repeat my c again  Tongue
Thank you so much guys.  Smiley
10  Ethical Hacking Discussions and Related Certifications / Malware / write my own exploits ? on: September 15, 2008, 03:39:13 AM
Hi all, i want to ask something about writing exploits:
  - What i need to write my own exploits ?
  - about language, sometimes i'm rather confused about what language i
    must use to write exploits or it depends on what exploit i want to make ?
I'm very need advices and criticsm about this thing.  Smiley
Thank's alot and sorry for this stupid question.  Smiley
11  Ethical Hacking Discussions and Related Certifications / Malware / Re: Messbots.exe ??? on: July 05, 2008, 12:05:11 AM
Thank's a lot for all your replies and advices, it's very help me and i don't
know anyone give that .exe file to me cause when i checked my linux pc that file is in my folder, by the way i will try to upload that file in virustotal.
Thank you so much guys.
 Smiley
12  Ethical Hacking Discussions and Related Certifications / Malware / Messbots.exe ??? on: July 04, 2008, 05:38:15 AM
Hi guys, sorry for disturbing your time, can i get some explanation
about file Messbots.exe is this file like a malware or what? cause i had googling and found that this file is unknown about safe or not.
Thank's a lot to this Forum.
 Smiley
Pages: [1]
Powered by MySQL Powered by PHP Powered by SMF 1.1.7 | SMF © 2006-2007, Simple Machines LLC
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.056 seconds with 22 queries.
 
Sponsors

cwnp_moto__120x90.gif

Polls
How many security events including conferences and training do you attend a year:
 
Support EH-Net


Support EH-Net by
Buying all of your
Amazon items using
the search bar above.

cbtnuggets_logo_125.jpg
Try CBT Nuggets Free!
Recent Forum Topics
Vote For EH-Net

progenic.com
Click here to Vote!

binarica.com
Binarica Logo

Add to Technorati Favorites
technorati fave

 
         
Advertisement

© 2009 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.