The tasks for the 7th assignment are: Create a custom crypter like the one shown in the “crypters” video Free to use any existing encryption schema Can use any programming language The programing language I am most comfortable with is python, so i wanted to make sure that it is possible to execute shellcode from…
All posts in Assembly
SLAE Assigment #5 – Metasploit Payload Analysis
The goals for assignment #5 were Take up at least 3 shellcode samples created using Msfpayload for linux/x86 Use GDB/Ndisasm/Libemu to dissect the functionality of the shellcode Present your analysis For this assignment, I decided to look at the shellcodes for the following metasploit payloads: linux/x86/adduser – adds a user to the system linux/x86/exec –…
SLAE Assignment #4 – Customer Encoder
The goals for Assignment #4 are: Create a custom encoding scheme like the “InsertionEncoder” we showed you PoC with using execve-stack as the shellcode to encode with your schema and execute For my custom encoder, I decided to make what would be a “ROT13” or rotate 13 encoder. A python script would take the hex…
SLAE Assignment #3 – Egghunter
Assignment #3 for the SLAE certification asks the student to do the following: Study about the Egg Hunter shellcode Create a working demo of the Egghunter Should be configurable for different payloads Based on what I found during my research, the basic idea behind an egg hunter is that you will have the first stage…
SLAE Assignment #2 – Reverse TCP Shell
Assignment #2 for the SLAE certification asks the student to do the following: Create a Shell_Reverse_TCP shellcode Reverse connects to configured IP and port Execs Shell on successful connection IP and Port should be easily configurable Analysis of Metasploit Shellcode Similar to the Bind shell post, I began this assignment by using msfvenom to generate…
SLAE Assignment #1 – TCP Bind Shell
Assignment #1 for the SLAE certification asks the student to do the following: Create a Shell_Bind_TCP shellcode Binds to a port Execs Shell on incoming connection Port number should be easily configurable Analysis of Metasploit Shellcode To begin, I first wanted to analyze how a TCP bind shell works. I used msfvenom to generate the…