Topics: Exploitation and reverse engineering. #book #exploit #reversing

Summary: 27 Chapters, 745 pages.
Year: 2007

This ebook shows you how exploits work with examples, demonstrating many techniques to abuse a vulnerability or bypass mitigations around known Operating Systems.

Topics: exploitation bypasses #exploit #reversing

This article shows some common bypasses for Stack Cookies, SAFESEH and SEHOP, DEP and ASLR. In order to bypass stack cookies, you need to exploit SEH or overwrite some pointer controlled by you that is called before the cookie verification function (like a pointer to a object), you can guess the cookie value too, but it is not common. For SAFESEH, you can use addresses outside the modules compiled with SEH, or search for modules without the SAFESEH flag. For SEHOP, you need to make a fake SEH (see https://t.me/p_file/10). For DEP, you use techniques like JOP and ROP to call Windows API and allocate memory or set memory as writable, you can also search in memory for your data, it may be located on a heap or a space with execute permission.
Lastly, you can partially overwrite the return pointer to bypass ASLR, or search for modules without ASLR flags.

https://www.corelan.be/index.php/2009/09/21/exploit-writing-tutorial-part-6-bypassing-stack-cookies-safeseh-hw-dep-and-aslr/

Topics: Emulation, programming, NES and C++. #emulation #programming #playlist

This playlist has 8 parts and teach you the main steps to make an emulator for NES.

https://www.youtube.com/playlist?list=PLrOv9FMX8xJHqMvSGB_9G9nZZ_4IgteYf

You can use these two links for additional information.

http://emulator101.com/

https://wiki.nesdev.com/w/index.php/Programming_guide

Topics: Programming, C++ #programming #cpp

The C++ Tutorial, this guide provides you the C++ concepts with advices and good practices.

https://www.learncpp.com/

Topics: Programming and DevOps. #programming #roadmap

An useful roadmap of the concepts you need to know to become a DevOps.

https://www.github.com/kamranahmedse/developer-roadmap/tree/master/img%2Fdevops.png

Topics: Reverse Engineering, Static Analysis #reversing

Since static analysis is often complicated in middle or bigger sized programs, it's important to exclude the standard functions of the scope of analysis, FLIRT is a solution made by Hex Rays in order to identify these standard functions and libraries used by an executable, this way the static process becomes easier and faster.

https://hex-rays.com/products/ida/tech/flirt/in_depth/

Topics: Programming, algorithms. #programming #roadmap

Roadmap about Algorithm Problem Solving, useful for programming and competitive programming.

Got from: https://t.me/chartsdobilly/672

Topics: Programming and Competitive Programming. #programming

This article shows the basic requirements to get into competitive programming.

https://www.geeksforgeeks.org/how-to-prepare-for-competitive-programming/

Topics: Computer Architecture, RISC vs CISC. #comp_arch

The differences between RISC and CISC architecture. While CISC use more cycles per instruction, RISC does the opposite, using less cycles per instruction, this can be seen with an example in the article. Although RISC needs more RAM to work, it has more performance, since uses less cycles per instruction and programmers can reuse the values of the last instruction (which couldn't be done in CISC, because the instruction erases the data stored in the registers after using it).

https://cs.stanford.edu/people/eroberts/courses/soco/projects/risc/risccisc/

Topics: Integrated Circuits (IC) Reverse Engineering. #reversing #comp_arch #ic

This is a wiki aimed to IC Reverse Engineering, providing a good approach of how ICs are built and how to reverse them.

http://www.siliconpr0n.org/wiki/doku.php

Topics: Memory Mapped I/O and Isolated I/O. #comp_arch

This article explains the differences between Memory Mapped I/O and Isolated I/O (or Port Mapped I/O). Basically, Isolated I/O provides two buses (Data bus and Address bus) and isolated space for both memory and the IO, they are accessed through specific instructions (eg OUT and IN instructions), the control line indicate which address space the CPU will access. In Memory Mapped I/O, the memory is shared with the I/O and can be used with the common memory instructions (eg MOV), although the memory has less space, this is not a big problem anymore, since the actual CPUs are at least 32-bit.

https://www.geeksforgeeks.org/memory-mapped-i-o-and-isolated-i-o/

Additional information

https://www.bogotobogo.com/Embedded/memory_mapped_io_vs_port_mapped_isolated_io.php

Topics: OS, wiki. #os #comp_arch

This wiki provides information about the creation of Operating Systems.

https://wiki.osdev.org/Main_Page

Topics: GCC Inline Assembly, Assembly. #assembly #c #cpp

Just beautiful. This document is a guide of how to use inline assembly in GCC for ARM architecture, Although i don't know ARM, this doc is really useful, since the syntax GCC uses for inline assembly is complex.

https://www.ic.unicamp.br/~celio/mc404-s2-2015/docs/ARM-GCC-Inline-Assembler-Cookbook.pdf

Topics: GCC Inline Assembly, assembly, C. #assembly #cpp #c

This is the documentation for inline assembly with C or C++. Maybe i'm dumb for not understanding this syntax very well, but i really don't like it, besides that, it uses AT&T syntax. Anyway i have been looking this guide and it shows how to use inline assembly for basic instructions (no operands) and instructions which require operands (registers, immediate values, etc), you can see that in the sections Basic Arm and Extended Arm, respectively. The Constraints section will help you to understand the constraints used when you need to use operands, either input or output operands, or registers.

https://gcc.gnu.org/onlinedocs/gcc/Using-Assembly-Language-with-C.html

This one is useful too.


https://www.ibiblio.org/gferg/ldp/GCC-Inline-Assembly-HOWTO.html

Topics: Hacking roadmap. #hacking #roadmap #ebook

This is a roadmap made by Unk9vvN with a list of tools and requirements for web hacking.

From: https://t.me/CyberSecArticles

Topics: Encoding.

A brief explanation of base64. Useful for implementation with programming.

https://fm4dd.com/programming/base64/base64_algorithm.shtm