how to compile exploits

hi
can any one please tell me where can i compile exploits like many of them are written in "C'
so should i compile them in Turbo c++ or ms c++ bcoz some programms have
<windows.h> and many others so which is better to comile exploits
till now i never compiled an exploit so please help me.and also i also
find some prel exploits on web so how do i compile them too do i need
any special software or compiler...

-santosh.p
email : [email protected]
msn messenger : [email protected]
yahoo messenger : [email protected]

This question is probably going to get you into some trouble.
I hope you only need these to learn about exploits

But chances are if you need help compiling the exploit you will probably need help in using it.

Im not trying to be a dick or anything but since you did not really describe what you need the exploits for most people will probably think you are up to no good and then give you anti points

Quote:

---

Originally posted here by Euclid


Im not trying to be a dick or anything but since you did not really describe what you need the exploits for most people will probably think you are up to no good and then give you anti points

---

Im not really sending any negs but who can blame my fellow AOers for neging... Once agian the phrase: "Hi im lame and I need help with useing tools that I didn't even make or debug/edit so it'll work better." this is not a good way to get what you want or introduce yourself to other peaple in a (SECURITY SITE).

There is a nice search engine people use, it is called Google. On this little engine you can learn all sorts of things from nuclear physics, gormet cooking, pr0n and *gasp* what C is, how to compile C programs, what C compilers do and even detailed instructions on how to make your very own programs.

Now. Get off your lazy ass and look the **** up yourself.

gcc -o exploit_name exploit_name.c

Quote:

---

Originally posted here by the_JinX
gcc -o exploit_name exploit_name.c

---

That won't work for him the_JinX, unless he's got the windows port of gcc, but if he's asking for help.. then I really doubt it.. especially since he mentioned Turbo C++ and MS C++.


I think the first thing you should do santoshp is listen to everyone else, and learn how c/c++ works before asking questions that are going to hurt your status here. Then instead of just grabbing random exploits off the net cuz you wanna be l33t, learn why these exploits work, and how to accomplish them on your own... In a windows environment you are never gonna get smurf.c or pimp.c to compile, unless you have a serious understanding of how the operating system works and how the language works with the operating system. 99% of the exploits you find the source code will only compile on *nix environments, so you'd better learn the language and get ready to start porting some source code. Now the ones that have windows.h will compile on Win (assuming there are no errors in the code), so hit compile and see if it works... Make sure you have all the .h files that are included (check the Includes directory).

Try Sams teachyourself C or C++ there very informative and fun. Then from there maybe try writing your own exploits. There is the real fun test on your own machine:cool:

I don't understand why alot of you guys are posting your email and things inside your posts. Most of that stuff can be placed inside your profile and if anyone takes any interest in you then thats probably the first thing someone would check anyways.

Since you mentioned... or atleast tried to say the name perl... I assume your trying to compile mostly *nix exploits and even if you did compile it then it would only work for a *nix box but the windows stuff should work ("If you have the right compiler and OS"). linuxguy99, forgot to mention that there are also free compilers out there and not just info about C/C++.

Now go look for them Http://www.google.com

P.S. Make sure your opening a project file instead of clicking on random files such as your recources and things. :D LMAO

ive compiled a share of exploits myself and they are on C++, C and VB. I have Visual Studio which has all of those even a J++ (which i think is a cross between Java and C++). Theres a specific compiler for every language. and u cant JUST compile it, Java in particular is a lil bitch with compiling. LOL

Why don't use Visual C or Visual Basic. I think almost program exploit write in C and Basic.

If you dont know how to compile them then that means u probably didnt code them yourself. wich leads me to believe that if you look hard enough you will probably be able to find theese files allready compiled. Im not trying to be a jerk but its simple fact. and if its virii your worried about from allready compiled code....do you understand enough about programing to inspect for malicous code before you compile? otherwise it seems like making more work for yourself then necesary. I could be wrong about all this and will apologize ahead of time incase i am. I dont know a LITTLE aboput programing and not much more about using exploits... Im still a security newBie. but if i am wrong could somebody please take the time to explain the failure of my logic... I am allways willing to learn something new

perl scripts dont need to be compiled but you need to have the perl engine installed. try active perl for windows.

if your not going to set up a linux box install cygwin on your computer. it comes with GCC and many exploits will compile on it but your going to need a basic understanding of the bash shell

sorry to post such sought of question .plzzz dont assign any antipoints to me as i am a newbie.i ensure that it will not be repeated again.
well any way i need to know abt compiling programs and socket codes and all.....thats it...as i found that exploits have very harsh codes that do not get compiled and lead to errors so i posted this post....

The power of google bud :) enjoy... wow!!! look and I didn't even need to ask stupid things or download exploits & it only took 3 seconds for me to find...
http://www.linuxgazette.com/issue74/tougher.html

Ok now im going to eat while I listen to GG Allin & other forms of hard rock... while I do that you can enjoy this program I made just for you, pally.

I really hate how people try to humiliate people who asks these questions. And telling them to go use Google just looks like a quest to up your post count. Any answer can be answered via Google, if you tell them to use Google then you could say that in 98% of threads in this BBS.

Downgrade me if you must, but that's my view. If you don't have anything nice to say then STFU.


I'd suggest going to learn C/C++ a little, not necessarily learn the languages but learn how to read the syntax and understand it, as alot of exploits out there carry some form of error during the transition from site to site and report to report.

Also, learn to use GCC, you really only need to learn how to compile, and that command has already been said, but I'd suggest reading up on it and learning the different flags.

Once you understand the basics of C or C++ then combine that with GCC (oh thats a compiler btw for unix systems) and you know how to use GCC, you're good to go.

Quote:

---

as i found that exploits have very harsh codes that do not get compiled and lead to errors so i posted this post....

---

Sorry to say either you are trying to compiler code wrote for a UNIX type system or the author of the code has wrote some flaws in to it so only programmers will know whats wrong and fix the code so it will compile, To be able to do this you will need to learn C and perl because most exploits are wrote in those 2 languages and php exploits are becoming more common to oh and theres java script that can be used to there is so mnay ways to break security its unbelivable all in all you will need to learn to code preferrably get on a UNIX type system learn tcp/ip read RFC'c learn about unicode exploits cross site scripting attacks buffer/heap/stack/one byte overflows format string vulnerabilities learn about subnets and how they work
if you havent got the nack to read all of the above and more you will never be a hax0r

some links--------------------------------------------------------------------------------------------------------------------------------------
http://lib.daemon.am/Books/C/ <--- Teach youself C in 21 days

http://wwwacs.gantep.edu.tr/programming/perl-ebook/ <-- Teach your self perl in 21 days

www.php.net <-- self explanitory

http://www.cs.ucsb.edu/~jzhou/security/overflow.html <-- The famous smashing the stack for fun and profit by aleph1
http://www.phrack.com/show.php?p=55&a=8 <-- The frame pointer overwrite (one byte overflows) by Klog

http://www.securiteam.com/securityre...DP0N1P76E.html <-- SQL injection attacks

http://www.securiteam.com/securityreviews/archive.html <-- just a lot of good papers ;)

www.phrack.org <-- phrack

http://www.owasp.org/asac/canonicali.../unicode.shtml <-- Unicode

http://users.med.auth.gr/~serafim/tcpip/index0.html <-- Teach your self tcp/ip in 14 days

thats just scraped te barrel there is litterally hundreds of type of attcks that happen on the internet but they links should give you a start the now and from there on you should be able to find your way from there

Quote:

---

Originally posted here by phaza7
Try Sams teachyourself C or C++ there very informative and fun. Then from there maybe try writing your own exploits. There is the real fun test on your own machine:cool:

---

I would have to disagree, the Sams Teach yourself books aren't very informative at all. I would recommend "The C Programming Language" - By K&R or "The C++ Programming Language" - By Bjarne Stroustrup if you are looking for *good* c/C++ books, always get the ones by the creator, or at least an Oreilly book. The sams books don't tell you very much at all in terms of 1. good example code or 2. learning path ie they have a weird order.

If you are trying to compile and its failing there should be a nice debuger that tells you why its blowing up, Make sure you have all of the header files taht are required...check your includes directory.