文档介绍：Shellcoding for Linux and Windows Tutorial
with example windows and linux shellcode
by steve hanna
/
steve./c/.******@gmail/.com
for puter security research check out: /
Table of Contents
Change Log 2
Frequently Asked Questions 2
1. What is shellcoding? 2
2. There are tons of shellcode repositories all around the , why should I write my own? 2
3. What do I need to know before I begin? 2
4. What are the differences between windows shellcode and Linux shellcode? 3
5. So, what about windows? How do I find the addresses of my needed DLL functions? Don't these addresses change with every service pack upgrade? 3
6. What's the hype with making sure the shellcode won't have any NULL bytes in it? Normal programs have lots of NULL bytes! 3
7. Why does my shellcode program crash when I run it? 4
8. Can I contact you? 4
9. Why did you use intel syntax, UGHHH?! 4
10. Why does my program keep segfaulting? Yes, I read item 7 above, but it STILL crashes. 4
Required Tools 5
Optional Tools 5
Linux Shellcoding 6
Example 1 - Making a Quick Exit 6
Example 2 - Saying Hello 7
Example 3 - Spawning a Shell 9
Windows Shellcoding 11
Example 1 - Sleep is for the Weak! 11
Example 2 - A Message to say "Hey" 12
Example 3 - Adding an Administrative Account 17
Advanced Shellcoding 20
Further Reading 23
Conclusion 23
Change Log
1. Created - July 2004
2. Advanced Shellcoding Methods Section Added - Sept 2005
3. Updated Faq regarding stack randomization. - June 2007
Frequently Asked Questions
1. What is shellcoding?
puter security, shellcoding in its most literal sense, means writing code that will return a remote shell when executed. The meaning of shellcode has evolved, it now represents any byte code that will be inserted into an exploit to plish a desired task.
2. There are tons of shellcode repositories all around the , why should I write my own?
Yes, you are correct, there are tons of repositories all around the for shellcoding. Namely, the metaspl