2class & otherz - HeapOverflow Computer Security Community & Forums : Heap Overflow.com

HeapOverflow Computer Security Community & Forums : Heap Overflow.com

		HeapOverflow Computer Security Community & Forums : Heap Overflow.com > Computer Security: Discussions > Hacking
2class & otherz

Mark Forums Read

Notices

Welcome to you visitor! This community is mainly dedicated to the computer and security, if you're looking for DFind scanner or others exploits codes you will find them into the Projects section, feel free to start Blogging and remember to always keep an eye and start talking about security Advisories & public Exploits.

Hacking Discuss the art of hacking, your experiences, etc...

2class & otherz

This is a discussion on "2class & otherz" within the Hacking part of the Computer Security: Discussions section; hi! plz help me, ima newbie in exploiting, i need help, class, you are master in exploiting, plz say me where gets requests in exploits, i.e. in LSASS exploit, RPC DCOM EXPloit etc.. where exploiters gets req to send, ...

Reply

#1 (permalink)

Old

13-07-05

uidzer0 is offline

Junior Member

Join Date: Jun 2005

Posts: 1

Thanks: 0

Thanked 0 Times in 0 Posts

Rep Power: 5

uidzer0 is on a distinguished road

Default

2class & otherz

hi!

plz help me, ima newbie in exploiting, i need help, class, you are master in exploiting, plz say me where gets requests in exploits, i.e. in LSASS exploit, RPC DCOM EXPloit etc.. where exploiters gets req to send, they are sniffing it?? with what? and how?

i need your help, plz help, w8in' help

Reply With Quote

Sponsor

Advertiser

#2 (permalink)

Old

13-07-05

class101 is offline

Administrator

Join Date: May 2005

Location: France

Age: 27

Posts: 592

Blog Entries: 3

Thanks: 18

Thanked 7 Times in 7 Posts

Rep Power: 10

class101 has disabled reputation

Send a message via MSN to class101

Default

no pb , we are all noobs anyway.
When I was advanced noob into this like you, I was trying to understand all those exploiting stuff without real results, because I was trying to jump a step like you wich was to learn C.
So I have took SFind sources, learned C with it , (coded a new one by the way

) and I came back on exploitation, and all was so easier to learn with C understanding. ALl that to say that you need to understand the basics of the C at least to do this, I m not saying that exploitation = C, but today, most papers, tutorials , are referring to the C, wich is I think the langage #1.

And once you understand the C, I recommand you to read "The Shellcoder's Handbook" by aitel,mehta,hassel,litchfield and cie.

Else to find req like you say, yeah the #1 tool I guess is Ethereal, you sniff between client <=> server, nor you identify wich protocol is running on the port as NDMP, RPC, SSL etc , and you look around the correct requests possible, nor harder, you debug the service, you send a large amount of datas to the ports and you debug steps at steps how the buffer is processed, nor you reverse engineer a patch released to go back to the vulnerable service and so on, t go back to the vuln, etc...

__________________
Security community webmaster
100% Free Directory
100% Cool milw0rm javascript

Reply With Quote

#3 (permalink)

Old

15-07-05

ZoraX

Guest

Posts: n/a

Default

Quote:

Originally Posted by class101

And once you understand the C, I recommand you to read "The Shellcoder's Handbook" by aitel,mehta,hassel,litchfield and cie.

Im working on the C part atm:P 1.August im starting as a System Administrator at a school(only apprentice), and when i was on the interview, the guy told me that there is alot of sparetime around winter time. He suggested that i got myself some hobby that i can do when im waiting for something to do at work:P My plan is to learn C\C++ and then later learn how Exploiting works and how to find bugs. I have already started on the C part of my plan, and i want to start get ready for the next part. sooo...

Anybody has a link for a ebook version of: "The Shellcoder's Handbook" ?

Reply With Quote

#4 (permalink)

Old

15-07-05

class101 is offline

Administrator

Join Date: May 2005

Location: France

Age: 27

Posts: 592

Blog Entries: 3

Thanks: 18

Thanked 7 Times in 7 Posts

Rep Power: 10

class101 has disabled reputation

Send a message via MSN to class101

Default

no there is no ebook of it nor it's a warez and you won't get it here.

__________________
Security community webmaster
100% Free Directory
100% Cool milw0rm javascript

Reply With Quote

#5 (permalink)

Old

16-07-05

ZoraX

Guest

Posts: n/a

Default

Quote:

Originally Posted by class101

no there is no ebook of it nor it's a warez and you won't get it here.

Guess im going to the used book store to see if im lucky then, my pay the next year will suck since im only a apprentice...

(havent checked the price on it yet:P but i bet its expensive :P)

Reply With Quote

#6 (permalink)

Old

16-07-05

eXowle is offline

Junior Member

Join Date: Jun 2005

Posts: 5

Thanks: 0

Thanked 0 Times in 0 Posts

Rep Power: 6

eXowle is on a distinguished road

Default

Quote:

Originally Posted by ZoraX

Quote:

Originally Posted by class101

no there is no ebook of it nor it's a warez and you won't get it here.

Guess im going to the used book store to see if im lucky then, my pay the next year will suck since im only a apprentice...

(havent checked the price on it yet:P but i bet its expensive :P)

You can get it for $31.50 on amazon

Maybe u can find it cheaper on other stores (online/real)
But it looks like it worths every penny

http://www.amazon.com/exec/obidos/tg/si ... 16-6576048

Reply With Quote

#7 (permalink)

Old

16-07-05

Spook is offline

Junior Member

Join Date: Jun 2005

Posts: 11

Thanks: 0

Thanked 0 Times in 0 Posts

Rep Power: 7

Spook is on a distinguished road

Default

On the same site as eXowle posted you also have "Hacking: The Art of Exploitation" by Jon Erickson. I recently saw this book in a shop, I did not actually read it but took a quick look at it.
It seemed to cover the basics pretty well (also more advanced functions)

Reply With Quote

#8 (permalink)

Old

18-07-05

sonic is offline

Junior Member

Join Date: Jul 2005

Posts: 2

Thanks: 0

Thanked 0 Times in 0 Posts

Rep Power: 5

sonic is on a distinguished road

Default

do you read the rules?

Reply With Quote

#9 (permalink)

Old

24-07-05

Guest

Posts: n/a

Default

Quote:

Originally Posted by class101

no there is no ebook of it nor it's a warez and you won't get it here.

well there is one which published secretly and few people who really need this has it . in 95% countries you can easily go to a bookshop and request .
but in 5% there is no chance to buy such a book , so like the famous proverb " every instinct has an answer in our world" there should be an answer for people who need these thingz and dont have access to them .
this ebook(which doesnt have even a public ebook version) is counted as "warez!" , so "Dont bother me by your PMs"

have fun and go spend your money in the right way and respect the rulz !! :wink:

Reply With Quote

Sponsor

Advertiser

Reply

Tags
2class, otherz

« scanner perso | HTTPS over C »

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Posting Rules
You may not post new threads You may not post replies You may not post attachments You may not edit your posts BB code is On Smilies are On [IMG] code is On HTML code is Off Trackbacks are On Pingbacks are On Refbacks are On

heapoverflow.com - SEOmeter SEO tools

Locations of visitors to this page

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72