I've been developing software for many years with different technologies like C#, C/C++, M68000, JavaScript, SQL and NoSQL. During this time I was always interested in the aspect of software security. In today's times security awareness become more and more of an important aspect in the digitally interconnected life. This blog will serve as a platform for whatever I'll encounter in cyberspace and think it might be worthwhile to write about it.
This time I’d like to share my experience during Offensive Security’s CTP (Cracking the Perimeter) course and ultimately the following 48 hours practical exam which leads to the Offensive Security Certified Expert (OSCE) certification upon passing. Offensive Security starts to challenge their prospective students from early on. Before you’re even allowed to sign up for … More OSCE Course & Exam Review
I would like to share my experience during Offensive Security’s course Penetration Testing with Kali (PWK) and the exam which leads to the Offensive Security Certified Professional (OSCP) certification. Being interested in the field of IT security for a long time (mostly software security), I decided to subscribe for 2 months lab access and later … More OSCP Course & Exam Review
Another tutorial I wrote about Amiga copy protection. In this tutorial the PDOS custom disk format is being analyzed and eventually circumvented by rebuilding and patching the game data onto AmigaDOS compatible disk images. The tutorial was originally published on Flashtro.com Download the PDF: Superfrog – Amiga MFM Protection
Some time ago I wrote a tutorial about the copy protection used in the Amiga version of Street Fighter 2. The tutorial explains the inner workings of the custom disk format used and how to rip the data from the copy protected disks and reconstruct working (and copyable) AmigaDOS disk images. The tutorial was originally … More Amiga Reverse Engineer Custom MFM Disk Format: Street Fighter 2
Introduction Reflective DLL injection is being used to inject a DLL into a process without reading it from the storage. A stager is executed from the exploited buffer, which in turn retrieves the DLL from a server. The DLL is directly loaded and mapped into the process address space and execution is being handed over … More Exploit Development 5: Reflective DLL Injection
Introduction The rather small shellcode that was used so far, always neatly fitted into the exploited buffer on the stack. Unfortunately this might not always be the case. For this situation there is the concept of egg hunting. All it does is to provide a small shellcode which scans the memory for the actual (larger) … More Exploit Development 4: Egg Hunting
In the previous two tutorials we looked at how to exploit the vulnerable application with EIP as well as SEH based buffer overflow attacks. This time we will have a look at how to exploit the application when DEP (Data Execution Protection) is enabled. Code execution will be forbidden on the stack and will result in an access … More Exploit Development 3: ROP buffer overflow
