Printable View
When and how do we use exploits ? Atually i've heard alot about them and tried searchin for some tutorials about them, but didnot find any !
I wanna know how they r executed and under what circumstances would they be ready for execution? Is a prog. lang. a "must" for the understandin of their use ?
much obliged !
Is it a must no and there is several diffrent kinds of vulnerabilities. Some sploits are C code some are perl some are web apps it just really depends IMO too broad a subject
We don't use exploits......We guard against exploits. If you wish to learn how exploits work, to help guard against them, then yes you should probably understand the programing that they are coded in.
Moxnix nailed it. We guard against exploit's, however to understand an exploit it's best to know the language it was coded in. And 90% of the time (IMO atleast I think) that language would be C.
This comeing from a guy who claims he doesn't really even touch 'em...Quote:
If you wish to learn how exploits work, to help guard against them, then yes you should probably understand the programing that they are coded in
A bit exaggerated. You will never learn how buffer overflows & things work with C or perl alone. Whats the point of learning C or perl, only to find you are limited to editing the source code of others without actually even knowing what a stack overflow is really all about... yet alone know what things like stack or heap allocation is in the first place. You'll never learn one dang thing about the programs you plan on exploiting... this is where grabing an assembler comes in.
mov EAX, 10 ;value 10 to the EAX register
push EAX ;to stack
Quote:
When and how do we use exploits
Uhhh how cute.Quote:
I wanna know how they r executed and under what circumstances would they be ready for execution?
Whenever you want. Download, compile, run, & enjoy... shmuck.
An exploit is a general term for breaking something that wasn't meant to be broken... or similar.
It's not like you learn a specific exploit programming language or anything... exploits are written in whatever they need to be written in to exploit a vulnerability. If you have a binary, then it's not necessary in most cases to know how they are written. If you want to write an exploit, you need to know of a vulnerability in the first place.
0147
I would suggest that you search for "Windows Vulnerabilities" and similar. As has been implied, you really need to understand vulnerability before you will be able to make much sense of an exploit.
The CERT site might be a good starting place, then browse some of the security updates that MS have issued and look at the detailed descriptions of the vulnerabilities that they are supposed to fix.
It is a very large subject so don't expect to understand the issues in five minutes ;)
Yep, as u've mentioned before guys, i've never put my hands on an exploit and that's y iam askin about them. And as nihil suggesed i should first start understandin vulnerabilities and then move on to the exploits part.
If i have any further problem , ill let ya know..
Thanks in advance ..
For a better understanding of exploitation go get:
http://www.amazon.com/exec/obidos/tg...glance&s=books
I would agree with that. I just got that book (Hacking: the art of exploitation) and although I haven't read much of it yet, so far it seems good. It doesn't just whizz past all the detail and give you code, it attempts to explain the way that the computer works, and the way that memory is organised. I'm enjoying it so far.
[edit]Plus it's got a neat cover :P[/edit]
ac
The problem is, i havent got a credit card, so i dont think iam gonna get that book?
do u have any alternative source for learning about exploits ?
thnks
How about using your local library. They can search using the ISBN and order it in from other libraries if need be, or order it if demand is sufficient.Quote:
Originally posted here by 0147
The problem is, i havent got a credit card, so i dont think iam gonna get that book?
do u have any alternative source for learning about exploits ?
thnks
Just a thought!
The library option is out of question coz we havent got a damn library here !
I tried searchin the net , but didnt come up with any useful results !
To be honest you don't _need_ to know how the code behind an exploit works. Could it help you if you are presented with an exploit that is unpatched as yet.... Maybe, but the opportunity to be able to do something to self patch the service is minimal at best. Assuming we are talking about a remote exploit you are better off being able to use an IDS like Snort and being able to read the raw packets and come up with a reset rule that resets the connection when the pattern is recognized prior to the exploit being complete.....
Look at this thread... im sure he will not want to patch or prevent anything. 0147 what do you want us to do about your incompetence to find things? Oh wait, never mind :pQuote:
Assuming we are talking about a remote exploit you are better off being able to use an IDS like Snort and being able to read the raw packets and come up with a reset rule that resets the connection when the pattern is recognized prior to the exploit being complete.....
http://www.google.com/search?hl=en&l...rflow+examples
http://www.google.com/search?hl=en&i...amples&spell=1
http://guinness.cs.stevens-tech.edu/...r-overflow.pdf
Well books reading helps, as you dont have to search the exploit yourself.
But at the same time dont forget you need to learn how to search for information.
Most of the exploit mention in the book are either fixed or out dated.
( By the time they found, author wrote, publish, circulate...... that takes time)
So you cant really "use" them. As those company who employ you to do
security check would have patched them.
If you dont want to buy books, discussion group and www is your best place to start.
As a bonus, you learn how to search for updated info as well!
Thanks ppl for helpin me out !! :D