The assembly tag has no wiki summary.
2
votes
1answer
51 views
Intel SGX and MSRs - what do developers need to know?
Intel SGX is an intriguing new technology that will ship as part of upcoming Intel processors. It is designed to enable running software in a secure enclave. Code running in the enclave will be ...
2
votes
0answers
50 views
Assembly decoder with jmp-pop-call technique
This is a part of code in which I cannot figure out the mistake. I am using the jmp-pop-call technique and what I get is "Segmentation Fault". Tried to use GDB but things are really vague. Each byte ...
0
votes
0answers
79 views
How can the .rsrc section of a PE used for evil?
I was doing some work with a bootable iso and ClamXav notified me that if found a potential security threat in one of the drivers, nvstor32.sys, located in the iso. I was really curious, so I googled ...
0
votes
1answer
37 views
Is there a solution for runing processes in encrypted mode on runtime?
Is there any solution for securely running encrypted processes on an untrusted machine over the WAN?
In public clouding, you can split your processes and send process request over the WAN, but you ...
1
vote
1answer
247 views
Metasploit generating strange shellcode
So I just used metasploit to generate the payload/linux/x86/shell_bind_tcp payload without null bytes (generate -t raw -b '\x00' -f shellcode). Here's the shellcode:
$ xxd -p shellcode
...
1
vote
1answer
37 views
When I controll EIP, how do I discover what the next steps are?
Lets say I can control the EIP CPU Register, and I want to jump to a specific function of which I know the correct memory address. This address is inside the same memory page. We have no exploit ...
-2
votes
4answers
127 views
Trying to secure a code
I am trying to make hard to a code to be modified. Security is my concern.
Ok, I know what you guys will say about piracy, bla bla bla. Lets refrain from that discussion.
I am trying to collect ...
2
votes
1answer
700 views
Difference Between Binary Exploitation and Reverse Engineering?
I am a beginner in Reverse Engineering and am trying to improve my skill by participating in any CTF's I can and solving CrackMe's. I am trying to find out why Binary Exploitation and Reverse ...
-1
votes
1answer
53 views
Do disassemblers detect standard functions?
Do disassemblers detect the use of C/C++ standard functions and specify them in the output code, adding the #include line to the appropriate header file (such as stdio.h or even windows.h)?
If not, ...
2
votes
1answer
552 views
Fuzzer causes crash. Now what?
Can anyone point me in the direction of some good tutorials regarding how to identify the type of vulnerability as reported by !exploitable and where to go from there?
Essentially I've got myself a ...
4
votes
1answer
619 views
Explaining a buffer overflow vulnerability in C
Given this C program:
#include <stdio.h>
#include <string.h>
int main(int argc, char **argv) {
char buf[1024];
strcpy(buf, argv[1]);
}
Built with:
gcc -m32 -z execstack prog.c -o ...
0
votes
1answer
772 views
Stack buffer overflow confusion
I am trying to dig deeper into the nuts and bolts a stack buffer overflow using the classical NOP-sled technique.
Reading some articles and watching videos brought me to a confusion which can be ...
0
votes
3answers
281 views
Why does Assembly seem so important in IT security? [duplicate]
As I watch a lot of tutorials, read answers, and just in general interact with the IT security community I find that a high percentage of them know assembly. I'm wondering why this percentage is so ...
2
votes
1answer
784 views
Study roadmap to write a crypter / backdoor
Recently I came across a site called SecurityTube.net, which has a ton of amazing security stuff. I'm following their Python Scripting Expert videos which are totally worth it. I also came across the ...
21
votes
2answers
2k views
Is it possible to write shellcode in C++?
Usually I write assembly programs and then dump their contents to get the shellcode. What I was wondering is whether I could write a C++ program instead of assembly, then dump and use that instead of ...
2
votes
1answer
288 views
Stack Smashing problem
I'm currently reading the popular article "Smashing the Stack for fun and profit" by Aleph One but I have a problem. I will try to isolate the problem and present to you only that detail.
Even if I ...
11
votes
4answers
4k views
Processor microcode manipulation to change opcodes?
I had recently thought of an extreme way of implementing security by obscurity and wanted to ask you guys if it's possible.
Would a person with no access to special processor documentation be able ...
8
votes
1answer
519 views
Better way to import Win32 APIs from injected shellcode
I'm injecting native x86 code into a .NET application, via a TLS callback in the binary image. Unfortunately, .NET executables only import mscorlib.dll within the PE, and have kernel32.dll mapped ...
1
vote
0answers
969 views
Why do complex viruses tend to be written in assembly? [closed]
For example Simile is extremely complex and is written in assembly. If something is going to be complicated isn't it best NOT to write it in assembly?
4
votes
3answers
1k views
Are there any tools that focus on shellcode analysis?
Shellcode presents certain challenges for disassembly. It often self-modifies, jumps to the stack (where the shellcode will likely be placed), and relies on certain unusual tricks that standard ...
