SecurityTubeBeta
Watch ... Learn ... Contribute
|
|
|
|
 |
|
|
|
|
Buffer Overflow Primer Part 4 (Disassembling Execve)
|
| |
|
| |
Welcome to Part 4 of the Buffer Overflow Primer. If you have not already done so, please start this series by viewing Part 1. The Buffer Overflow Primer requires that you know at least some basic Assembly Language. I have created a series of Assembly Language video tutorials for Hackers here, for those not familiar with the language.
In this video we will look at how to create shellcode for the Execve() syscall. We will first create a C program to spawn a shell using Execve(), then we will disassemble the program to understand how the syscall works and the kind of inputs it expects. We will cover this part in-depth and trace through individual instructions and recreate the program stack before execve() is called. Once the disassembled code has been understood, we will create our own program in assembly to spawn a shell using Execve(). This video is very important for those who want to learn how to convert a complex syscall() into its working assembly language equivalent.
|
|
|
|
|
|
|
|
|
|
|
|
We hate these ADs as much as you do! Help us stay FREE and CLEAN by making a Generous Donation!
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Related Videos from: Buffer Overflow Primer Series |
 |
| | | | | |
| | | You are Viewing this Video Now! | | |
17834 views | 5492 views | 5631 views | 4534 views | 4393 views | |
|
|
|
|
|
|
|
|
|
Author |
 |
Vivek
Ramachandran is a security evangelist and has been working in
computer security related fields for the past 7 years. In 2007,
Vivek spoke at world renowned conferences Defcon (WEP Cloaking Exposed) and Toorcon (The Caffe
Latte Attack). The discovery of the Caffe Latte Attack was
covered by CBS5 news, BBC online, Network World etc news
agencies.In 2006, Vivek was announced as one of winners of the
Microsoft Security Shootout contest held in India among 65,000
participants. He has also been a recipient of a Team Achievement
at Cisco Systems for his work
on 802.1x and Port Security modules on the Catalyst 6500 switches.
Currently he spends all of his time maintaining Security-
Freak.Net , SecurityTube.Net and is the
co-founder of Axonize. Vivek,
is a Bachelor in Electronics and Communications Engineering from
the prestigious Indian Institute of Technology, Guwahati.You can contact him at vivek[at]securitytube.net
|
|
 |
|
|
|
|
| |
 |
|