Hex Generator

Finding bad character when developing an exploit is important to make the exploit works properly as we want. In my post about searching bad character I used a perl script to generate a series of hex character start from 00 to FF. Here's other script used to generate it. I found the script at this site. It is written in python language.

Download here.

Script:

#HEX Generator

#http://www.digital-echidna.org

#0x04112011

def gene():

        c=0

        x=0

        hslgen='"'

        while x <= 255:

          hslhex=hex(x)

          if c == 16:

            hslgen=hslgen+'"\n"'

            c=0

          if x <= 16:

            hslgen=hslgen.replace('0x','\\x0')

          hslgen=hslgen+hslhex

          x+=1

          c+=1

        print "\n#Generated with dE HEX Generator"

        print "#http://www.digital-echidna.org\n"

        print hslgen.replace('0x','\\x')+'"\n'

if __name__ == "__main__":

        gene()

"the quieter you become, the more you are able to hear.."

SEH Based Buffer Overflow : Elecard MPEG Player

In this post I'll try to exploit a software called Elecard MPEG Player that have a SEH Protection (Again??)  :D

Exploit a software is fun if we know the technique and can be very frustrating if we can't exploit it even after hours of struggle.

Okay, Lets get started.

- Install the software on the machine.

- Lets open a file to see what file extention is supported by this software.

SEH Based Buffer Overflow - BigAnt Server

This time, I'll try to explain how to exploit a software that have a SEH protection on its system called BigAnt Server. SEH is an exception handler to protect the EIP to be overflowed by the abnormal flow on the software. This will force us to use different attack vector and technique because if we use the same technique as in the Direct Return Exploit the attack won't work because of SEH.

BigAnt server is an Internet Messenger server. The version of the software that used in this post is 2.52 Service Pack 5.

Lets get started..  >:D

Buffer Overflow - VUPlayer

Again, in this post I will try to exploit a software using the Buffer Overflow technique. The software is called VUPlayer.

Lets do some testing first to make the software crashed. That will be my attack vector. 

Alhamdulillah, this morning I'm succeeded to make the software crashed in the first try. Here's what I did.

- Of course installing VUPlayer in my Windows XP machine.

- Okay, I want to try adding url. (of course the url is not the valid one..  :P  )

- Making 1000 'A' character in notepad.

Reverse Engineering Mini-Stream RM-MP3 Converter

Reverse engineering is an interesting advanced hacking technique to be learned. Once we knew the technique I'm sure that when there is a bug in a program, although the bug is only a little, we can exploit that vulnerable point to hack our target machine. 

So, at the other post we've already do a reverse engineering technique against WarFTP. In this post we will try to do it with a software called Mini-Stream RM-MP3 Converter.

Lets get started.

- First, Install the software on your XP machine.

- I'll search for some information in www.exploit-db.com/search.

Reverse Engineering WarFTP

Finally, after preparing OllyDbg and WarFTP on our machine, its time to put reverse engineering in action.

What I do in this post is based on my sensei's book titled "Harmless Hacking". Lets get started. 

- Start your Windows XP machine.

- Open WarFTP and start its service by clicking Properties > Start Service

Installing WarFTP for Reverse Engineering

The target for my first reverse engineering is a software called WarFTP given by my sensei. In the other post we've setup the debugger program, now lets install the software on the machine. (If you want to use WarFTP like this post you can download here)

1. Again, I'll transfer the WarFTP master to my machine using web server.

2. Download the master

Introduction to OllyDbg

In this post, we've learned about reverse engineering. What we will talk now is one of the tool used for that called OllyDbg.

Before discussing OllyDbg, we must know what is debugging. Debugging is a structured process to find and reduce the number of bugs or defects in a computer program and repair it. When there are a bug in a system, especially when there are lots of subsystem in it will make the debugging process become harder because a changes in one may cause bugs appear in the other.

Installing Nessus

Nessus is a powerfull Vulnerability Scanner. Unfortunatelly, since version 3, Nessus is no longer an Open Source software. Now the stable version available is 4.4.1

Ok, Lets get started. 

Download the installation packet from the official page at www.nessus.org

Download the package for the Ubuntu 10.04 (32 bit)

After that, just install the package like usual .deb file.

Install Flash Player in Backtrack

Greetings..

I'm sure that the reason why you arrive here is because you want to watch some video in Backtrack's Firefox, But unfortunatelly your flash player didn't work properly because it need to be updated.  :P

Here's a way to make your Firefox can play flash :

1. First, we need to remove the current installed version. Perform these commands in Terminal.

# apt-get purge flashplugin-nonfree flashplugin-installer gnash gnash-common mozilla-plugin-gnash swfdec-mozilla
# rm -f /usr/lib/firefox/plugins/*flash*
# rm -f /usr/lib/firefox-addons/plugins/*flash*
# rm -f /usr/lib/mozilla/plugins/*flash*
# rm -f ~/.mozilla/plugins/*flash*so
# rm -rfd /usr/lib/nspluginwrapper

Multimedia in Backtrack

As you noticed that Backtrack didn't come with standard music and video player like general Linux. 
But if you want to install it, just follow these steps 


First, we need to install restricted extras

# apt-get install ubuntu-restricted-extras kubuntu-restricted-extras

Then, install mplayer and some codecs

# apt-get install gstreamer0.10-ffmpeg gstreamer0.10-fluendo-mp3 gstreamer0.10-plugins-bad gstreamer0.10-plugins-ugly mplayer

After that you choose yourself what software that would handle your music and video. There are a lot of good music and video player for linux out there.
Here are some of them :

Installing Synaptic and Software Center on Backtrack

For those who new in Backtrack or even in Linux. Installing a software must be confusing cause we have to do it in the terminal with it's black and white interface.

But, since Backtrack is based on Ubuntu, lets install Synaptic and Ubuntu Software Center to make us easier to install software.

First, lets install the Synaptic Package Manager

# apt-get install synaptic