Google Chrome 4 has been released…
Two crashes caused by NULL pointer dereferences have been discovered in MSIE 6.0/7.0. These issues do not affect MSIE 8.0…
http://skypher.com/SkyLined/heap_spray/small_heap_spray_generator.html
I’ve created a heap-spray generator…
Unfortunately, our wiki is broken. Due to having a social life, it may be a while before we can restore functionality.
I’ve released the source for a 97 byte shellcode that executes calc.exe.
Everyone and their dog seems to want to use download and execute shellcode in their exploits. Even though this has some drawbacks:
You need to create an .exe file on the system, which will very likely draw unwanted attention…
During shellcode development, it makes sense to have a program that can easily load your shellcode at a controlable location, allows you to set registers and memory to certain values and execute the shellcode by setting EIP through a RET or CALL instruction.
The Testival project aims to do all those things and more: it also allows you to test ret-into-libc attacks, set the type of memory allocation you want (RWE flags, etc…), report exceptions in your code to stdout as well as load DLLs to test shellcode in DllMain.
Testival is used by ALPHA3 for automatically testing if all the en-/decoders work.
Testival requires SkyBuild to automatically build all files.
I realized that if I would wait until I had fully documented everything in ALPHA3, it would probably never get released…
w32-bind-ngs-shellcode is a small, null-free 32-bit Windows port-binding shellcode. The total shellcode is currently 214 bytes and supports Windows 5.0-7.0 all service packs…
