Pham Trung Nghia

less info
35 reputation
5
bio website
location
age
visits member for 1 years, 5 months
seen Apr 16 at 9:20

May
12
accepted Is writing shellcode still a valid skill to have/learn?
May
9
revised Is writing shellcode still a valid skill to have/learn?
deleted 2 characters in body
May
8
awarded  Commentator
May
8
comment Is writing shellcode still a valid skill to have/learn?
@JasonH The legacy systems argument is definitely valid, but my students and peer sometimes don't accept this - despite it's being very true.
May
8
comment Is writing shellcode still a valid skill to have/learn?
@LucasKauffman Thanks for pointing out an actual example. Somehow I never thought of this as an assuring example of shellcode still living among us.
May
8
comment Is writing shellcode still a valid skill to have/learn?
Will have to look more closely to what you have pointed out. Thanks!
May
8
comment Is writing shellcode still a valid skill to have/learn?
Isn't this more relevant to systems than to programming? You can run an 'idiotic' program on a system with NX countermeasure, and shellcode would still be irrelevant.
May
8
awarded  Supporter
May
8
comment Is writing shellcode still a valid skill to have/learn?
Both answers so far are pointing at the 'knowledge and/or stepping stone' side. I would love to see some example of recent exploit techniques that still rely on the use of shellcode. Don't get me wrong though, learning shellcode as a method of understanding more is a very valid reason.
May
8
comment Is writing shellcode still a valid skill to have/learn?
So what you're saying is that it would serve as steps and knowledge to more recent exploits? Also, you said that it's still used, does this mean there are still legacy system that shellcode is still valid, or is there some solid usage of shellcode in newer exploits?
May
8
comment Is writing shellcode still a valid skill to have/learn?
@DeerHunter Can you elaborate a bit more?
May
8
asked Is writing shellcode still a valid skill to have/learn?
Mar
6
awarded  Scholar
Mar
6
accepted Occurence of ROP gadget
Mar
5
awarded  Student
Mar
5
awarded  Editor
Mar
5
comment Occurence of ROP gadget
Wow, thanks lynks. I actually clear up a few thing reading your answer. I'm waiting a few more days before marking yours the correct one. Cheer!
Mar
5
revised Occurence of ROP gadget
added 81 characters in body
Mar
1
comment Occurence of ROP gadget
Thanks for the link. If I understand correctly, then if POP/POP/RET is not present, I can just find something equivalent, e.g. 2 POP/RETs ? The same thing if I want to pop 3 thing, I just need to find a POP/POP/POP/RET or something that does the same thing?
Mar
1
comment Occurence of ROP gadget
Yes, that and any other gadget occurence. Sorry if I haven't been clear enough.