Skip to main content

Posts

Showing posts from January, 2017

ExecveStack1434

"This blog post has been created for completing the requirements of the SecurityTube Linux Assembly Expert certification." http://securitytube-training.com/online-courses/securitytube-linux-assembly-expert/ Student ID: SLAE64-1434 Target Operating System : 64 bit Linux (x86_64 GNU/Linux) Resulting Shellcode Size (machine code bytes): 22   Published: https://www.exploit-db.com/exploits/41174/ GitHub Link : https://github.com/rtaylor777/nasm/blob/master/ExecveStack1434.nasm Testing Once you have downloaded the ExecveStack1434.nasm source code from the GitHub link above, you will need to assemble it. Assuming you have the NASM assembler ( http://www.nasm.us/ ): Assemble : nasm -felf64 ExecveStack1434.nasm -o ExecveStack1434.o Link : ld ExecveStack1434.o -o ExecveStack1434 Then Execute : ./ExecveStack1434 This will launch the /bin/sh shell. Object Dump Once you have the object file ExecveStack1434.o: objdump -M intel -D  ExecveStack1434.o
Init... Just as everything that exists has a beginning. Here is a short note to boot up this blog. About me When I was 15 (back in the late 1970s) I worked part time as a computer coder for the Government. Later I studied Fortran 77 in University. I obtained a 3rd Class Power Engineering diploma from SAIT (Southern Alberta Institute of Technology) in 1988. In 1989 I purchased my first PC. It was a 12 Mhz 80286 IBM compatible with 2 MB of ram. After having a few issues with my PC (mostly with hardware but also with software) I quickly became aware that I already knew more than the local PC repairman. I purchased several computer books over a short time frame and rapidly increased my PC expertise. That was my start. By 1996 I was a Network Administrator for a local Computer Based Training facility. I have worked full time in IT (Information Technology) ever since. I have run my own web sites since 1996. I have created my own guest book, blog, and ecard applications in the p