how to compile exploits

[ZomBieMann77]

If you dont know how to compile them then that means u probably didnt code them yourself. wich leads me to believe that if you look hard enough you will probably be able to find theese files allready compiled. Im not trying to be a jerk but its simple fact. and if its virii your worried about from allready compiled code....do you understand enough about programing to inspect for malicous code before you compile? otherwise it seems like making more work for yourself then necesary. I could be wrong about all this and will apologize ahead of time incase i am. I dont know a LITTLE aboput programing and not much more about using exploits... Im still a security newBie. but if i am wrong could somebody please take the time to explain the failure of my logic... I am allways willing to learn something new

[Tedob1]

perl scripts dont need to be compiled but you need to have the perl engine installed. try active perl for windows.

if your not going to set up a linux box install cygwin on your computer. it comes with GCC and many exploits will compile on it but your going to need a basic understanding of the bash shell

[santoshp]

sorry to post such sought of question .plzzz dont assign any antipoints to me as i am a newbie.i ensure that it will not be repeated again.
well any way i need to know abt compiling programs and socket codes and all.....thats it...as i found that exploits have very harsh codes that do not get compiled and lead to errors so i posted this post....

[|The|Specialist]

The power of google bud enjoy... wow!!! look and I didn't even need to ask stupid things or download exploits & it only took 3 seconds for me to find...
http://www.linuxgazette.com/issue74/tougher.html

Ok now im going to eat while I listen to GG Allin & other forms of hard rock... while I do that you can enjoy this program I made just for you, pally.

[ReLik]

I really hate how people try to humiliate people who asks these questions. And telling them to go use Google just looks like a quest to up your post count. Any answer can be answered via Google, if you tell them to use Google then you could say that in 98% of threads in this BBS.

Downgrade me if you must, but that's my view. If you don't have anything nice to say then STFU.


I'd suggest going to learn C/C++ a little, not necessarily learn the languages but learn how to read the syntax and understand it, as alot of exploits out there carry some form of error during the transition from site to site and report to report.

Also, learn to use GCC, you really only need to learn how to compile, and that command has already been said, but I'd suggest reading up on it and learning the different flags.

Once you understand the basics of C or C++ then combine that with GCC (oh thats a compiler btw for unix systems) and you know how to use GCC, you're good to go.

[prodikal]

as i found that exploits have very harsh codes that do not get compiled and lead to errors so i posted this post....

Sorry to say either you are trying to compiler code wrote for a UNIX type system or the author of the code has wrote some flaws in to it so only programmers will know whats wrong and fix the code so it will compile, To be able to do this you will need to learn C and perl because most exploits are wrote in those 2 languages and php exploits are becoming more common to oh and theres java script that can be used to there is so mnay ways to break security its unbelivable all in all you will need to learn to code preferrably get on a UNIX type system learn tcp/ip read RFC'c learn about unicode exploits cross site scripting attacks buffer/heap/stack/one byte overflows format string vulnerabilities learn about subnets and how they work
if you havent got the nack to read all of the above and more you will never be a hax0r

some links--------------------------------------------------------------------------------------------------------------------------------------
http://lib.daemon.am/Books/C/ <--- Teach youself C in 21 days

http://wwwacs.gantep.edu.tr/programming/perl-ebook/ <-- Teach your self perl in 21 days

www.php.net <-- self explanitory

http://www.cs.ucsb.edu/~jzhou/security/overflow.html <-- The famous smashing the stack for fun and profit by aleph1
http://www.phrack.com/show.php?p=55&a=8 <-- The frame pointer overwrite (one byte overflows) by Klog

http://www.securiteam.com/securityre...DP0N1P76E.html <-- SQL injection attacks

http://www.securiteam.com/securityreviews/archive.html <-- just a lot of good papers

www.phrack.org <-- phrack

http://www.owasp.org/asac/canonicali.../unicode.shtml <-- Unicode

http://users.med.auth.gr/~serafim/tcpip/index0.html <-- Teach your self tcp/ip in 14 days

thats just scraped te barrel there is litterally hundreds of type of attcks that happen on the internet but they links should give you a start the now and from there on you should be able to find your way from there

[er0k]

Originally posted here by phaza7
Try Sams teachyourself C or C++ there very informative and fun. Then from there maybe try writing your own exploits. There is the real fun test on your own machine

I would have to disagree, the Sams Teach yourself books aren't very informative at all. I would recommend "The C Programming Language" - By K&R or "The C++ Programming Language" - By Bjarne Stroustrup if you are looking for *good* c/C++ books, always get the ones by the creator, or at least an Oreilly book. The sams books don't tell you very much at all in terms of 1. good example code or 2. learning path ie they have a weird order.

[bballad]

If you are trying to compile and its failing there should be a nice debuger that tells you why its blowing up, Make sure you have all of the header files taht are required...check your includes directory.