In this tutorial, you will learn how to write a tcp_bind_shell that does not contain null bytes, which can be used for shellcode testing of vulnerability exploitability. After reading this tutorial, you will not only learn how to write shellcode that binds a shell to a local port, but also understand how to write shellcode … Read more
0. Introduction Recently, I wrote about the DVRF series topics, and I still feel a bit overwhelmed by the construction of ROP, so I decided to delve deeper into how to construct ROP chains during the May Day holiday. Note: The entire process should be replicated using Ubuntu 16.04. Do not use 18.04 or 20.04, … Read more
This article is a highlight from the Kanxue Forum Author ID on Kanxue Forum: CatF1y House of Cat A new method of exploiting IO in GLIBC discovered in May, applicable to any version (including glibc2.35), named House of Cat and presented in the 2022 Strong Network Cup. Introduction House of Emma is one of the … Read more
1 Problem-Solving Ideas The final number of solutions for this problem is 42, as the difficulty level is not high and generally meets expectations. The problem is coded in Rust, and it was decided to remove symbols without providing the source code the night before the competition. This not only made it very difficult for … Read more
Translated from https://www.praetorian.com/blog/reversing-and-exploiting-embedded-devices-part-1-the-software-stack Author Elvis Collado Posted Thursday, June 02, 2016, 11:17 AM CDT by In the past few months, I have been traveling to guide people on how to exploit vulnerabilities in embedded devices. Just slides are not sufficient to convey enough information, so I have written everything down for better knowledge digestion. The … Read more