Discussion:
alpha numeric exploitation
(too old to reply)
Nick FitzGerald
2005-05-26 12:08:18 UTC
Permalink
I'm trying to develop an alphanumeric payload that needs to do a JMP -600 bytes...
Anyone got any ideas how to do this with only alpha numeric chars?
'eb' and 'e9' are obviously out of the question...
Think "encoding/decoding" and "self-modifying".

EICAR.COM has been doing it for more than decade to get its INT (cd) op-
codes executed, so this is hardly revolutionary new territory...

Beyond that, I'd be extremely surprised if someone hasn't written
tutorials on doing alphanumeric-only payloads, if not even provided
toolkits to take arbitrary code and "ASCII-fy" it.


Regards,

Nick FitzGerald

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
Kristian Hermansen
2005-05-27 02:16:32 UTC
Permalink
Anyone got any ideas how to do this with only alpha numeric chars?
Would dissembler do what you want? It should be able to squeeze the
ascii shellcode for you ;-)

http://www.phiral.com/research/dissembler.html
--
Kristian Hermansen <***@ht-technology.com>
Loading...