Posted by SkyLined on March 4th, 2010 in ASP, Browsers, HTTP servers, JavaScript and Programming Languages ·
Today I am releasing another old project called ASPsh. The goal of this project was to create an ASP page that can be used on a server to provide a “command line shell”-like experience when opening the page in a webbrowser…
Posted by SkyLined on March 1st, 2010 in Browsers, HTML, Internet Explorer, JavaScript, PoC, Programming Languages and Security ·
In 2005 I released Internet Exploiter 2, which helped make heap spraying popular in browser exploits…
Posted by SkyLined on January 20th, 2010 in Browsers, Internet Explorer, JavaScript, Programming Languages, Repro and Security ·
Two crashes caused by NULL pointer dereferences have been discovered in MSIE 6.0/7.0. These issues do not affect MSIE 8.0…
Posted by SkyLined on January 11th, 2010 in Assembler, Programming Languages, Security and Shellcode ·
Everyone and their dog seems to want to use download and execute shellcode in their exploits. Even though this has some drawbacks:
You need to create an .exe file on the system, which will very likely draw unwanted attention…
Posted by SkyLined on January 11th, 2010 in Assembler, C/C++, Programming Languages, Security, Shellcode and Tools ·
During shellcode development, it makes sense to have a program that can easily load your shellcode at a controlable location, allows you to set registers and memory to certain values and execute the shellcode by setting EIP through a RET or CALL instruction.
The Testival project aims to do all those things and more: it also allows you to test ret-into-libc attacks, set the type of memory allocation you want (RWE flags, etc…), report exceptions in your code to stdout as well as load DLLs to test shellcode in DllMain.
Testival is used by ALPHA3 for automatically testing if all the en-/decoders work.
Testival requires SkyBuild to automatically build all files.
Posted by SkyLined on January 10th, 2010 in Assembler, PoC, Programming Languages, Python, Security and Tools ·
I realized that if I would wait until I had fully documented everything in ALPHA3, it would probably never get released…
Posted by SkyLined on January 2nd, 2010 in Assembler, Programming Languages, Security and Shellcode ·
One limitation of most alphanumeric shellcode decoders, including those in ALPHA2 and the soon-to-be-released ALPHA3 is that they need to know where they are located in memory in order to decode themselves and run correctly…
Posted by SkyLined on January 2nd, 2010 in Assembler, Programming Languages, Security and Shellcode ·
w32-bind-ngs-shellcode is a small, null-free 32-bit Windows port-binding shellcode. The total shellcode is currently 214 bytes and supports Windows 5.0-7.0 all service packs…
Posted by SkyLined on January 2nd, 2010 in Assembler, C/C++, Programming Languages and Python ·
SkyBuild is a simple build system written in Python that I created to be able to build my source codes in various environments without having to figure out what compilers are installed and having to manually execute them with the right flags and figure out dependencies. It’s similar to “make” in many ways…
