Creative Commons and Security Training

Posted on May 11, 2012 by 1lx

I’ve found a very nice website called Open Security Training where you can get free training material on a wide variety of topics, starting from basic x86 assembler and reaching up to exploitation/reverse engineering, network forensics and other yummy topics The course materials are mostly under a Creative Commons license, which means that you can even create your own course materials based on them, as long as you contribute your stuff back to the public community. Sounds like a fair deal, right? I’ll start with the x86 basics course as a warmup exercise. Maybe I’ll blog about it too. Have a nice weekend!

Big Endian vs Little Endian

Posted on May 9, 2012 by 1lx

In computer science, you’ll learn a lot about how computers and their parts work internally. One topic that tends to drive people crazy like hell is “big endian” vs. “little endian”. What is this about? Read on

Continue reading →

Exploit Exercises – Protostar Format 0

Posted on April 15, 2012 by 1lx

The levels called “Format n” are about format string exploits. The first one is almost easy, but only almost. Read on if you want the solution to Format 0.

Continue reading →

Exploit Exercises – Protostar Net 1

Posted on April 15, 2012 by 1lx

Protostar Net 1 is once again about little-endian interpretation of data. Read on if you want the solution to Net 1.

Continue reading →

Exploit Exercises – Protostar Stack 4 – the nice way

Posted on April 12, 2012 by 1lx

I’ve already described the simple solution to Stack 4 here. Read on if you want the alternative solution to Stack 4, which does not cause a segfault.

Continue reading →

Exploit Exercises – Protostar Stack 4

Posted on April 12, 2012 by 1lx

The Protostar Stack 4 exercise is about changing a return address in such a way that an existing function is called. Read on if you want the solution to Stack 4.

Continue reading →

Exploit Exercises – Protostar Net 0

Posted on April 12, 2012 by 1lx

This challenge is easy: you get a number from the service and have to send it back as a little-endian hex value. Read on if you want the solution to Protostar Network 0.

Continue reading →

Exploit Exercises – Protostar Stack 3

Posted on April 11, 2012 by 1lx

The Stack 3 exercise is similar to Stack 2, but in this case we need to perform a quick analysis of the targeted binary. Also, this level offers the chance to see how function pointers in C get translated to machine instructions. A look at the assembler code of the main function provides some insight into that. Read on if you want the solution to Protostar Stack 3.

Continue reading →

Exploit Exercises – Protostar Stack 2

Posted on April 11, 2012 by 1lx

The Stack 2 challenge in Protostar is a bit different from Stack 1: this time, the input is taken from an environment variable. Read on if you want the solution to Stack 2.

Continue reading →

Exploit Exercises – Protostar Stack 1

Posted on April 11, 2012 by 1lx

The Stack 1 challenge in Protostar is a bit different from Stack 0: this time, the targeted variable needs to be changed to exactly one specific value. Also, input is not taken from an input stream but from argv[1] instead. Read on if you want the solution to Stack 1.

Continue reading →

1lx security

random rants about IT security

Creative Commons and Security Training

Big Endian vs Little Endian

Exploit Exercises – Protostar Format 0

Exploit Exercises – Protostar Net 1

Exploit Exercises – Protostar Stack 4 – the nice way

Exploit Exercises – Protostar Stack 4

Exploit Exercises – Protostar Net 0

Exploit Exercises – Protostar Stack 3

Exploit Exercises – Protostar Stack 2

Exploit Exercises – Protostar Stack 1