Compiling Exploits
Results 1 to 3 of 3

Thread: Compiling Exploits

  1. #1
    Member
    Join Date
    Sep 2003
    Posts
    42

    Compiling Exploits

    Hello all,

    I was wondering if anyone had or knew of any tutorials on compiling exploits (properly) in Linux. For example, I would like to experiment with the following exploit posted on FrSIRT.

    http://www.frsirt.com/exploits/20060105.ms05-055.c.php

    I understand the concept behind making it "go", but I lack the knowledge on how to technically build it and get it running. Some background so I don't get flamed for not knowing programming and asking a question like this... I deal mostly with network security in my job and as a hobby. I haven't had time to really dig into exploit building and/or programming. The main reason I would like to learn the basic knowledge to get an exploit such as this running is so I can do forensic inspection on the network traffic to make (useful) IDS signatures.

    Any help, or direction to help would be appreciated. Thank you all.

  2. #2
    Leftie Linux Lover the_JinX's Avatar
    Join Date
    Nov 2001
    Location
    Beverwijk Netherlands
    Posts
    2,535
    Funny that you mention that url and wanting to compile it on linux..
    Code:
    #include <stdio.h>
    #include <stdlib.h>
    #include <string.h>
    #include <windows.h>
    Looking at the includes Microsoft VisualC++ would be a better choice..

    But most other exploits would be
    Code:
    gcc -o exploit exploit.c
    And some compile flags (usualy found in the source comments).

    Some good exploit writers also break their code slightly to stop scriptkiddies that don't read the comments (or don't understand them) from being able to use the exploit..

    My short compiling software on linux tutorial might be helpfull if you have never heard of terms like gcc or make..
    ASCII stupid question, get a stupid ANSI.
    When in Russia, pet a PETSCII.

    Get your ass over to SLAYRadio the best station for C64 Remixes !

  3. #3
    Member
    Join Date
    Sep 2003
    Posts
    42
    Haha, thanks for pointing that out. Like I said, I don't know much about programming.

    Thank you for the quick tip and reference to your tutorial. I'm familiar with compiling open source software. I think I am just getting confused when the software isn't in the usual package I'm used to.

    This should get me started.

    Thank you.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •