So, as promised, I start here a series of articles dedicated to the world of exploitation: at the end of this one, I will go deeper with the x86 Assembly series. First thing said: “what is an exploit?”. It could be described as a piece of code (or a series of commands as well) that […]
In the last post I wrote about how the SHL and the SHR instructions can be used to multiply and divide by powers of 2. What if that’s not the case? What if a multiplication by a different number is required? Well, here we go… The MUL/IMUL instructions The MUL and IMUL (Integer MULtiplication) instructions […]
According the statistics I’m using as a referral, the next most common instruction is the comparison one CMP, but, actually, before explaining this one it’s necessary/useful to introduce other instuctions, just like ADD and SUB. The ADD and SUB instructions The ADD was vaguely introduced the last time and it just adds the source to […]
Just a few days ago I decided to give a look again at the disasm of the good old Cascade virus (somebody still recalls it? when they were just called “viruses” or “virii” pour les elitaires). Man, oh man, what a piece of malware was that (it fit in 1704 bytes)… Letters falling in the […]
“Are we there yet?” Nope, I’d say no. The journey to have a basic botnet running is still pretty long, but the enthusiasm is big enough to cover it all. So, here we are. The next major step is to understand how the lookup process works (pretty important one): the concept behind this process is […]
In the previous post the routing table has been analyzed; in this one the first type of messages exchanged to get into the Kad network will be discussed. I found out that there are some PDFs here and there describing the old Kad flow, so I will discuss here just the new one. I already […]
This idea came up in my mind something like one year ago: implement a new P2P protocol that could serve a potential botnet by myself. After a while I realized that this is definitely not a simple task, not only because developing a new protocol from scratch is hard, but even because the testing would […]
Hello folks, this post is a proof that this blog isn’t dead at all. Actually I run (and I’m running) into some personal issues which made my mind floating a little bit away from these projects, but I’m trying to recover myself little by little these times. So, now I want to post something different […]
This is the article about the custom FreeLibrary implementation, which has probably been the easiest one. In fact, once stored all the information about all the loaded modules. In fact, the first thing to do, is checking how many instances have been loaded of the specified modules; I wouldn’t unload from memory a module loaded […]
It took me quite a lot to get all the code working and running and, even if there are some bugs to be solved yet, the code seems pretty usable. So, here I go explaining the LoadLibrary part of this library: I won’t go too much in details about how this thing work (even if […]
gb_master's /dev/null 