EvilZone

Hacking and Security => Hacking and Security => : fr0wnR November 18, 2012, 01:28:42 PM

: Win7 to write exploits
: fr0wnR November 18, 2012, 01:28:42 PM

On which OS do you write your exploits (e.g. for a Filezilla Server or in general windows applications)?
I started to try out some tutorials about writing exploits, but on Windows 7, and i cant figure it out to exploit a Buffer Overflow Vuln. Is this because of the ASLR thingy on win7 or am i just too stupid?
This is the tutorial: https://www.corelan.be/index.php/2009/07/19/exploit-writing-tutorial-part-1-stack-based-overflows/ (https://www.corelan.be/index.php/2009/07/19/exploit-writing-tutorial-part-1-stack-based-overflows/)

: Re: Win7 to write exploits
: geXXos November 18, 2012, 01:36:52 PM

Take a look here (http://www.greyhathacker.net/?p=585) for some info.

: Re: Win7 to write exploits
: proxx November 18, 2012, 03:14:04 PM

Buffer overflows are also caught by DEP if im not mistaking.
https://en.wikipedia.org/wiki/DEP

: Re: Win7 to write exploits
: ande November 19, 2012, 10:12:22 AM

I guess the question is not on what OS you are writing your exploit, as it makes no difference. The question is what OS you are targeting, with DEP and ASLR and all that. So either you write your exploit on the target platform or on something else, does it matter? You still have to deal with DEP, ASLR and whatnot if you want to make a usable exploit anyway.