Printable View
I was wondering if anyone knows of any tutorals on expliots.... I searched google but to no avail, I only found expliots but no explinations or tutorals. I would like to learn how they work.
Thank you for your time.
[Edit] I want tuts on how they work, not how to write them (just clarifying) [/Edit]
first post - question about exploits.....and sig is a quote from the hacker manisfesto
[pong]ARG!! Here come the Negs!!![/pong]
Being that we don't know your TRUE intention's (even though you say it's for good use) we can not just give out exploit information. If you wanna learn about exploit's and you wanna find them, use google. We at AntiOnline don't promote sharing/giving exploit's out especially to people who might use them for a malicious purpose.
Oh sorry I dont want neg points, But yea I was just wondering becuse if I know how they work I can stop them right?
Ok new qustion, (tell me if this is a bad qustion) What do they use to use the exploits? (Like, how do you know if theres a security hole that they can use an expliot for?)
Oh and I am a hacker.... not a cracker :)
fast orange
werent you just recently banned....for asking these types of questions?????
egnaro tsaf
Same sig
Word of advise...."Carefull"
Someone call THESPECIALIST, I'm sure he'll find the right words to explain to him how he's not a hacker :D....I'm not even going to start negging/flaming this kid....doctor told me I need to relax and have fewer rages...including road rage.Quote:
Oh and I am a hacker.... not a cracker
LoL, considering you dont know me I dont see how you think im not a hacker.... but oh well....
Ummm yea I was banned, for asking how to disable listing devices..... yea.... but I pm'ed ennis about it and his advise was too start a new account and abide by the rules... (I dont see how my other posts where agesnt the rules but oh well)
Anyways I dont mean to break any rules here, I just want to know how they work.....
Hello Mr High Velocity Citrus Fruit, and welcome to the pleasuredome that is AO.
Best place to start is a google search for CERT and SANS...........that will give you plenty of examples.
As for the mechanism, a fairly basic answer is that a "VULNERABILITY" is a design/code flaw in an operating system (Windows?) or an application (Internet Explorer). An "Exploit" is the production of a malware application to take advantage of (exploit) these flaws.
That is about it, AFAIK
:)
Easy there pimp juice...I can smell it in the air that you're not a hacker...does that answer your question?Quote:
LoL, considering you dont know me I dont see how you think im not a hacker.... but oh well....
Ummm yea I was banned, for asking how to disable listing devices..... yea.... but I pm'ed ennis about it and his advise was too start a new account and abide by the rules... (I dont see how my other posts where agesnt the rules but oh well)
Anyways I dont mean to break any rules here, I just want to know how they work.....
Welcome to AO....hope you enjoy your stay, and hope you learn not to ask the wrong questions.
I do know you...who do u think put all those listening devices around your buddy's yard? ;)Quote:
LoL, considering you dont know me I dont see how you think im not a hacker.... but oh well....
my question is how can you claim the name hacker and be here looking for exploits?
Go and buy a copy of the shellcoders handbook (you can get it on Amazon), its as good a place to start as any ( rather then trawling through online tutorials).
Oh, and I`d suggest dropping the quote from mentor on your sig .
And also don`t start on the whole hacker cracker debate, right now, in this day and age, Hacker = Cracker, so arguing semantics is failry pointless.
Im not looking for exploits, I want to find out how they work, after all you can't stop something you dont know can you? How could I stop an expliot without knowing how they work....Quote:
my question is how can you claim the name hacker and be here looking for exploits?
LoL I like you, your funny.... but anyways *looks around all parinoid* We know who did it... and we found one.... but yea..... we still can't find the rest.....Quote:
I do know you...who do u think put all those listening devices around your buddy's yard?
awwww....want a hug? Don't like me...i'm dangerous when liked...Quote:
LoL I like you, your funny.... but anyways *looks around all parinoid* We know who did it... and we found one.... but yea..... we still can't find the rest.....
Sure you can...Nuke the rest of the world except hawaii...Quote:
Im not looking for exploits, I want to find out how they work, after all you can't stop something you dont know can you? How could I stop an expliot without knowing how they work....
Ummm... nukeing the world... I live in Texas so that would kill me too, and how would I get nukes? I would have to ask illigal things on this bord to get nukes..... lol
Anyways your dangerous when liked? That sucks I still like you..... lol
Anyways... I found some tutorals on expliots... would it be ok to post a link to them? They explain how they work, but also how to use/make them.....
for christ's sake its EXPLOIT, NOT EXPLIOT...no wonder you couldn't find anything on google.
Yes you would die too. How selfish...6.4 billion people would die...and all you care about is yourself...
Well then eveyones lucky I dont have nukes then right? LOL
Anyways yea I did spell it wrong on google but you gotta love that spell check thing :)
YAY I live in hawaii so Im safe from the nukes. that rocks. wait, nuclear radiation spreads in the atmosphere, I die anyway, oh screw it atleast I can watch the destruction.
Fast Orange ... Don't worry about these uptight a-holes, on a power trip. You see "Anti Points" are the only way these plebians can be alpha. You'll get used to it. :rolleyes:
Shut up. You can never really know; the best bet is to inform then hope they make the right decision about the use of the information.Quote:
Being that we don't know your TRUE intention's (even though you say it's for good use) we can not just give out exploit information. If you wanna learn about exploit's and you wanna find them, use google. We at AntiOnline don't promote sharing/giving exploit's out especially to people who might use them for a malicious purpose.
www.securityfocus.org
-Cheers-
Hmm......
I saw him first..................proper order please.........and I will decide the order.................... :DQuote:
Yes you would die too. How selfish...6.4 billion people would die...and all you care about is yourself...
If he is that interested I could send him a large quantity of 80 column punched cards........work on IBM360 technology...................it is viable for a 120Kt atomic :D
That was MANY years ago
Hey, HVCF (high velocity citrus fruit) is not a TROLL..................just a little new and overenthusiastic IMHO?
Please give him 10 more posts..............just for me?
Thanks
He's NOT a troll, BUT I've got to balance SOMEWHERE............:eek:
10 posts it is then :(
I am not one to easily agree with sexybadgirl,
fastorange.. asked how exploits work.. not how to create them.. I found the original post to be a fair question.. borderline but fair.
The reality of a Exploit is where a weakness is found in a program or operating system or what ever.. the exploit is the a program that makes use of the weakness to the writers desire..
How you use this to protect your self I don't know.. Personaly I prefer to apply the needed Patch, THEN, Use whatever tools are available to check that the weakness is no longer there.
If your intent is to protect.. then you only need to know what exploits you are not protected against,, what patches you still need to apply and how uptodate your security scanning tools are..
How to use the exploit is left to 2 possabilities.. 1/ if you are writing your own scan tools, 2/ you are a lame arse cracker (who's energy could be better spent elsewhere)
Cheers
-------------------------------------------------------------------------------------------
http://www.secinf.net/harmless_hacki...it_Files_.html
http://www.infosecwriters.com/texts.php?op=list&id=8
http://www.securityfocus.com
http://secunia.com
http://securitytracker.com
http://sec.drorshalev.com
http://www.cert.org/
http://www.zone-h.com
http://www.insecure.org
www.k-otik.com/
http://iebug.com
--------------------------------------------------------------------------------------------
Which was exactly my point, dumbass -- you CAN'T ever really know. :rolleyes: It's amazing how stupid people really are. Especially when they don't read a post.Quote:
Shut up. You can never really know
Now that I think about it, vulnerability scanners such as Retina for example, will tell you what the vulnerability is, and how to patch it up. Also it will tell you what the vulnerability does. Does SSS do the same?
http://www.microsoft.com/technet/sec...CurrentDL.aspx
I'm gonna run for my life now for posting a microcash link
nihil, just a little new and overenthusiastic? No... those guys usually fill the place up with tutorials... some of which they didn't write others are crap. Oh and those guys tend to say things like "OMG! thanks!" for nothing at all. I would say he's just another h4x0r type who REALLY should think about doing something about that whole inferiority complex thing that guys like that have. These guys hummm... how sould I put this... oh yeah, they generally suck on a nut. Now then...
Stack overflows
Integer overflows
Click & read something dumb-ass!
If he wants to learn how exploits work then he's going to need to grab an assembler and get very fluent with it then use wdasm or what have you. Man, dont click on the links everyone gave you. It's a waste of time. You won't learn a damn thing by browseing through that stuff, esspecially when you don't even fully understand what it is you are looking at. As for browser based exploits... they are THE BIGEST waste of time ever.
I could teach a four year old how to (ab)use URL spoofing vulnerabilies and setup sites of buisnesses which don't exist.. or exists just not in the same corner of the web. And how many times do peaple need to explain how to base64/uuencode encode files then find ways of opening these files or execute commands VIA: the browser without things getting a bit boreing and redundant?
Quote:
Yea right. Do it! Do it! Do it wuss! I've got balls the size of Durian fruit, you don't scare me.
Quote:
Anyways yea I did spell it wrong on google but you gotta love that spell check thing :)
It loves you to, giving it so much job security like that.
It was very funny though watching him snap on you and be like "EXPLOIT DAMN IT!!!!"
LOL, like he just couldn't take your stupidity.
If you want to learn exploits, I'd recommend first learning Assembly.
If you want to learn "expliots" I'd recommend learning English.
Exploits work in different ways, usually you make a program do something it never intended to do. For example:
That's an egg. Or Buffer Overflow...Whatever. Learn assembly.Code:Char Shell code [] =
"\xeb/x1f\x5e/x89\x76\x08\x31\xc0\x88\x46\x07\x89\x46\x0c\xb0\x0b"
"\x89\xf3\x8d\x4e\x08\x8d\x56\x0c\xcd\x80\x31\xdb\x89\xd8\x40\xcd"
"\x80\xe8\xdc\xff\xff/bin/sh";
Actually buffer overflows in general is just inserted input. It goes on to a point where memory becomes corrupt and when that happends things tend to overwrite... the egg is usually reffered to what will replace the value of the variable in the program or whatever.Quote:
Well you generally use a compiler or an interpreter to aid you on your quests to "point click and FIRE!". To actually find a vulnerability I've already posted what you need and Gore has basicly repeated what has already been said :rolleyes: .Quote:
What do they use to use the exploits? (Like, how do you know if theres a security hole that they can use an expliot for?)
Either way... folks who tend to want to fit in or attempt to try to push others into your (class of people) are generally annoying. These peaple care more about a socialized ranking or being appart of something big more than the very computers and computer related hobbies which gives them the excuse to be appart of it all. Agian... guys like that really should do something about their whole inferiority complex thing.Quote:
Oh and I am a hacker.... not a cracker
People that tend to label themselves as part of a group are usually doing it to look cool. Often look for a quick easy way to do stuff because they don't care enough to actually learn; skiddies. Basically what TS is saying as well.Quote:
Oh and I am a hacker.... not a cracker
I never knew that. Thank you very much TS.Quote:
Actually buffer overflows in general is just inserted input. It goes on to a point where memory becomes corrupt and when that happends things tend to overwrite... the egg is usually reffered to what will replace the value of the variable in the program or whatever.
-Cheers-
Read Aleph One's "Smashing the Stack for Fun and Profit"
Phrack has a lot of articles on exploits. Read up.
Or if you know the name of an exploit that you wanna research into. try typing to name of the exploit in google or any search site or security site and its bound to come up with heaps of information
Look, people who think I'm a cracker.... If I was I would portscan a site/comp then I would serch google for an expliot and repeat untill I found one that I got into.... easy.... I wouldnt be asking how they work.... but thanks to the people who gave me info...
Exploiting basic stack overflow problems is not hard at all, you may want to take a look here: http://www.wbglinks.net/pages/reads/bofs/index.html .
Never mind, certain people here are of the close-minded "white hat" (*shivers with the word hat which is bull*) type. Whitepapers are useless if you really want to learn something like this.Quote:
Look, people who think I'm a cracker.... If I was I would portscan a site/comp then I would serch google for an expliot and repeat untill I found one that I got into.... easy.... I wouldnt be asking how they work.... but thanks to the people who gave me info...
Well, how this thread has degenerated.................?
To bring some of us back to planet Earth, this was the original post:
Now I take that to mean that the person wants to know about HOW IT WORKS not HOW TO DO it, or maybe I am just not used to using my mother tongue?Quote:
I was wondering if anyone knows of any tutorals on expliots.... I searched google but to no avail, I only found expliots but no explinations or tutorals. I would like to learn how they work.
The guy says that he found exploits on Google, but not how they WORK .................that is what he needs to do his term paper/summer project?
I agree with Undies............possibly a "marginal" question, but a very valid one in my personal opinion...........particularly at this time of year.
Or do we just sit here an look at eachother and say nothing?
That is my view anyway
/off topic..........
Q: What is the difference between a computer, and the person who negged me for "talking in riddles"?
A: You have to punch information into both of them, but in the case of the computer, you only have to do it once.
/return
Have a nice week-end folks :D
I'f you want to learn how exploits work and how to find them your gunna need to understand programming. I'd advise looking into C/ASM alot of exploits today are found in C programs due to functions like strcpy and many others that do not do proper bounds checking which often leads to common buffer overflows which is deffnitely the most common and most effective technique of exploitation. Google is thy friend.
Also if your intrested in writing exploits finding security holes etc take a look at this book:
[The Shellcoders Handbook]
Stop talking. You are making more people hate or question you, than do me.Quote:
Look, people who think I'm a cracker.... If I was I would portscan a site/comp then I would serch google for an expliot and repeat untill I found one that I got into.... easy.... I wouldnt be asking how they work.... but thanks to the people who gave me info...
-Cheers-Quote:
Keep your mouth shut and people think you're a fool, open your mouth they'll know you're a fool.
What kind of bullshit is this, he's just trying to learn something.Quote:
Stop talking. You are making more people hate or question you, than do me.
methnax...relax...everyone deserves a chance. Some just...take a little longer to learn ;)....
Orange Juice, before you can jump into exploits, learn the basics first... for example, Operating Systems...then you'll learn in depth what makes things tick. Even if you read how an exploit does what it does, you wont learn much unless you know whats being affected and how. Thats my take on it.