May I bring some friends to this madhouse ? Shellcode optimisation (with regards to size) is an important skill that an exploit developer/malware researcher is expected to possess. The problem is, a shellcode that achieves anything useful will need something more than just a few bytes/pages of memory. One may…

Communication is the key to success, let’s talk shell x_x In the previous article, we wrote shellcode to spawn a shell. While this is still useful, it may be more valuable to demonstrate a quick POC exploit that works locally. Till now, we have been dealing with local processes on…

Hope you’re talking to the CPU like never before x_x While writing code, there is almost always that you would like to reuse already existing libraries/frameworks to meet your purposes. This makes programming a lot easier since we do not want to reinvent the wheel. That’s exactly what we cannot…

I wonder what would you choose, blue or red x_x Hello folks, through a series of articles I plan to describe the area of Linux shellcoding (intel x86–64 CPU architecture) in enough depth to be able to bypass static based detections applied at defensive side (at least). This article intends…

Baby, I hate little secrets you keep from me x_x The article continues the previous one where we diffused phase 5 of bomb binary. Let’s get started with diffusing the last one, phase 6 on Linux platform using GNU Gdb. This writeup is a part of the article series — …

Baby, I hate little secrets you keep from me x_x The article continues the previous one where we diffused phase 4 of bomb binary. Let’s get started with phase 5 on Windows platform using Windbg. This writeup is a part of the article series — Software Reverse Engineering: Ripping Apart…

Baby, I hate little secrets you keep from me x_x The article continues the previous one where we diffused phase 3 of bomb binary. Let’s get started with phase 4 on Windows platform using Windbg. This writeup is a part of the article series — Software Reverse Engineering: Ripping Apart…

Baby, I hate little secrets you keep from me x_x The article continues the previous one where we diffused phase 2 of bomb binary. Let’s get started with phase 3 on Windows platform using Windbg. This writeup is a part of the article series — Software Reverse Engineering: Ripping Apart…

Baby, I hate little secrets you keep from me x_x The article continues the previous one where we diffused phase 1 of bomb binary. Let’s get started with phase 2 on Windows platform using Windbg. This writeup is a part of the article series — Software Reverse Engineering: Ripping Apart…