all right so the video a goal long at to block are or to pole this is the to see a little world getting re read write next cue e. and that uh and in line sham blaine are knot channel so let's get started we're gonna down load the source for the examples first uh i i demonstrate all this from a bone to uh a long term service using only free tools you can replicate this set up with all free software so let's take a look at the source uh no and uh i uh remove the d. but the build from the makefile but uh there's a can't in the blog hour to coal on how to uh how to add a back and uh do the demonstrate that but build work so first let's do the main it deep other trough for output and mean we can see that it loads and t. old protection the gnu protection and that's uh and is verifying find it was separable ink it so there's that we get some mornings about at casting things properly un doesn't break anything in a is all static is that we control uh examining the source is done let's tracey the execution in to the d. all all and you here we are we can search for all other las more calls we gonna be loading a library as hear in verify that were the right low library call can a profit dress and then we're going to you i call the uh call the function so we can just play hmmm and we get the brake points et their we can step in i just a preamble we were talking about that's to for knots so now we can come to their is really for knobs right there right so this is where we're going the uh p. placing are encoder decoder payload everything and that'll la yeah that'll be that so we we need to make sure look we have re right next key promotion for this memory section uh we did it with a debug bill but we can also good to you uh i non actually go or module's we can gone a memory come down to a low be a low oh tech section is the for one action so if we give it to you cue p. o. are or well we can see a we can we right next cue now we go back to you c. be u. when no and we are in the for one section so yeah there's that oh and the program but so the python script now we verified that we just i generated this shell code up then five oh this is the example uh text representation of the show code uh as to binary representation now for you go and were i i run hex editor free hex editor for a when does we can run an the side of wind it works fine opened the shall code out ben that we just generated we can see if that the output is as we expect rim here all right no i can do you how object dump stuff we've got a i'm jig doubt i disassemble binary format architectures uh ex eighty six and we wanna see in channel and you can see that it dumps as really lawn whatever this is what it did look like previously we can see the the off set the in struck and thing i buy code and the instruction some pen that we're gonna have to fix el is word's got the ease jumps to uh jump to off set if your doing in line assembly if we then uh it lease with some assemblers you have to i uh you have to use jump tell a label and then insert your people's so this is the actual could one at cleaned up hmmm you can see that we've got the jumps at all pointing the labels hmmm they should all c. be available to download the a procedure is a little tedious group but the simplest way to do it is i hi les all your jobs and then go through an hmmm it fixed an up one by one uh you the once you don't have to fix up or or one stitch champ to read just rip show uh_huh and that uh uh that to procedure for fixing that out the then you have to strip the left en columns you can do that not all python script you v. just takes the um split on a uh it's is split on either a large number of space as your time i don't recall which one and take here uh i take your negative one index at at the uh how at a v. right and you done i i mean sect to seconds and ten you have to we go back and forth fixing up where you were chum chi but that's uh uh that's all their is to that and yep we're done so the think if for a listening and uh i hope you enjoy your a bowl all a could could samples hour their are are and verified working and will get into the actually putting together the encoder to of a the neighbour's in the uh uh their are are call and will fix our uh we'll use some mixed and it assembly so that we can do uh it's that we can do uh c. calls from assembly are or set or get data in assembling handed back to c. call uh that way we can move hour or uh we can remove the mark or function and we can move hour get a right next keefe in side of the um uh in side of the uh and sigh of the payment function
|
www.youtube.com
Writing Self-modifying Code Part 1 - InfoSec Institute
In the first part of this tutorial, Andrew King...
2011/11/21
|
Full text
Candidates
PlayStopAuto play
Seconds
| When you find recognition errors, you can contribute by correcting some of them and press "save" for sharing with other users. You can also confirm that a speech recognition result is correct by pressing `o' on it. |
Corrected (Blue indicates that an error was corrected)
Confirmed (Green indicates that a speech recognition result was confirmed to be correct)
Degree of speech-recognition reliability (Red indicates that a speech recognition result might include an error)
|
Comment