MetaByte

Life is just a game. With bugs.

Search This Blog

Frontpage
Toolz
About me

Posts

PE File Reader

January 28, 2020

Pe File Reader [Opening .exe files to analyze the PE-header] Hello_Friend, and welcome to the 20's, Cybermonkeys! Let's start this decade by learning some stuff. Last year, we already took an in-depth look at Linux-binaries (aka ELF files) , now let's start messing around with it's infamous Windows-Counterpart (that also happens to be the xBox file format). Introduction The PE-file format is around for quite some time now, and while heavy optimizations took place, it hasn't really changed all that much since then. In fact, it is one of the most widely encountered file formats out in the wilds. Although there is technically a difference between PE32 files (32bit) and PE32+ files (64bit), we will ignore this fact for the sake of this blogpost. Some file extensions deriving from this format are: .acm [ a Windows audio-codec] .ax [MPEG-4 DVD format] .cpl [dynamic link libraries for control panels] .dll [dynamic link lib...

2

Get link
Facebook
X
Pinterest
Email
Other Apps

Beacon Flooding Attack

January 11, 2020

0

Get link
Facebook
X
Pinterest
Email
Other Apps

Preparing wirelass attack environment

October 24, 2019

0

Get link
Facebook
X
Pinterest
Email
Other Apps

Elf file structure

October 22, 2019

0

Get link
Facebook
X
Pinterest
Email
Other Apps

Image Galery

A list of all images used on this blog.

Writing a disassembler

Writing a disassembler [c++ with libbfd from binutils-dev package] Hello_Friend, today is a nice day, so let us build something. I assume many of you should have heard names like ollydb or IDA before, so let's try building something like this today. Don't get ahead of yourself, the functionality will be nothing compared to this tools, and we will work only on console level, but that's fine as long as we learn something from it, right? Introduction To build out own custom debugging tools, we will need to power up our include folder first. We are going to install the binutils-dev package per apt-get. You should also refresh your C++ skills, and read into the general structure of a binary program. Well, that last part is not all too important since I am going to write some basic tutorials about that soon... So, folks, fire up your favorite programming tools and let's get down to work... Addendum: To compile the program, use gcc like this: g++ -...

Beacon Flooding Attack

Beacon Flooding Attack [wireless mayhem with mdk3] Yo! A beacon flooding attack is a funny way to mess up networks and also looks kinda freaky if you are not knowing what's going on. In fact, it can really mess up with stuff, like devices not responding or not finding their default network anymore. But one step at a time. Introduction A beacon flooding attack is like an overkill of beacons (obviously). As you will know, an access points (aka router) will broadcast their basic information around the air from time to time. This way, devices and other routers will know that it's available, will see it's name etc., and are able to coordinate their mutual use of the frequency band. Note: there are invisible wlan networks that don't send anything around sometimes. We can use these beacons to overload devices with fake access points, basically by spamming thesm. A general side effect of this attack is that general traffic over wlan bands increases significan...

Writing a kernel driver

Writing a linux Kernel driver module [ a /dev/ character device ] Nĭménhăo, today let's dive into the world of kernel development. Don't worry, it might seem hard at first, but everything's hard at first. What will the kernel module (Linux drivers are actually modules) do? Well, let's start with something simple: a character device, camouflaged as a device that, at first glance, would hold nudes . Yep, you read correctly, we are basically setting up a honey pot device that will notify us if somebody tries to read from it (ghihi). Introduction We will build a character device here, but with some effort you can basically code any type of kernel module. If you ever worked with arduino, for example, it will show up as ttyACM0 under /dev/, because somebody took the time and created a driver module that connects the USB port to the physical hardware. Our module would (if you followed up) show up as Nudes , and talking to it by will raise a kernel lo...

Powered by Blogger

Theme images by enot-poloskun

Metabyte