Expliots

[methsnax]

Oh and I am a hacker.... not a cracker

People that tend to label themselves as part of a group are usually doing it to look cool. Often look for a quick easy way to do stuff because they don't care enough to actually learn; skiddies. Basically what TS is saying as well.

Actually buffer overflows in general is just inserted input. It goes on to a point where memory becomes corrupt and when that happends things tend to overwrite... the egg is usually reffered to what will replace the value of the variable in the program or whatever.

I never knew that. Thank you very much TS.

-Cheers-

[mjk]

Read Aleph One's "Smashing the Stack for Fun and Profit"

Phrack has a lot of articles on exploits. Read up.

[fyrewall]

Or if you know the name of an exploit that you wanna research into. try typing to name of the exploit in google or any search site or security site and its bound to come up with heaps of information

[Fast Orange]

Look, people who think I'm a cracker.... If I was I would portscan a site/comp then I would serch google for an expliot and repeat untill I found one that I got into.... easy.... I wouldnt be asking how they work.... but thanks to the people who gave me info...

[el-half]

Exploiting basic stack overflow problems is not hard at all, you may want to take a look here: http://www.wbglinks.net/pages/reads/bofs/index.html .

Look, people who think I'm a cracker.... If I was I would portscan a site/comp then I would serch google for an expliot and repeat untill I found one that I got into.... easy.... I wouldnt be asking how they work.... but thanks to the people who gave me info...

Never mind, certain people here are of the close-minded "white hat" (*shivers with the word hat which is bull*) type. Whitepapers are useless if you really want to learn something like this.

[nihil]

Well, how this thread has degenerated.................?

To bring some of us back to planet Earth, this was the original post:

I was wondering if anyone knows of any tutorals on expliots.... I searched google but to no avail, I only found expliots but no explinations or tutorals. I would like to learn how they work.

Now I take that to mean that the person wants to know about HOW IT WORKS not HOW TO DO it, or maybe I am just not used to using my mother tongue?

The guy says that he found exploits on Google, but not how they WORK .................that is what he needs to do his term paper/summer project?

I agree with Undies............possibly a "marginal" question, but a very valid one in my personal opinion...........particularly at this time of year.

Or do we just sit here an look at eachother and say nothing?

That is my view anyway


/off topic..........

Q: What is the difference between a computer, and the person who negged me for "talking in riddles"?

A: You have to punch information into both of them, but in the case of the computer, you only have to do it once.

/return

Have a nice week-end folks

[Hexem2000]

I'f you want to learn how exploits work and how to find them your gunna need to understand programming. I'd advise looking into C/ASM alot of exploits today are found in C programs due to functions like strcpy and many others that do not do proper bounds checking which often leads to common buffer overflows which is deffnitely the most common and most effective technique of exploitation. Google is thy friend.

Also if your intrested in writing exploits finding security holes etc take a look at this book:

[The Shellcoders Handbook]

[methsnax]

Look, people who think I'm a cracker.... If I was I would portscan a site/comp then I would serch google for an expliot and repeat untill I found one that I got into.... easy.... I wouldnt be asking how they work.... but thanks to the people who gave me info...

Stop talking. You are making more people hate or question you, than do me.

Keep your mouth shut and people think you're a fool, open your mouth they'll know you're a fool.

-Cheers-

[el-half]

Stop talking. You are making more people hate or question you, than do me.

What kind of bullshit is this, he's just trying to learn something.

[Cybr1d]

methnax...relax...everyone deserves a chance. Some just...take a little longer to learn ....

Orange Juice, before you can jump into exploits, learn the basics first... for example, Operating Systems...then you'll learn in depth what makes things tick. Even if you read how an exploit does what it does, you wont learn much unless you know whats being affected and how. Thats my take on it.