Re: Self Studies - Pentesting

[Leandro Quibem Magnabosco <leandro.magnabosco () fcdl-sc org br>]

Bill Wildprett escreveu:
> The link works fine!  In the first copy, part of it was broken by the email
> line wrapping.
> http://www.corelan.be:8800/index.php/category/security/exploit-writing-tutor
> ials/
>
>
> Bill Wildprett
>   

Broken, once again! ha! :D

I'm going to try to be helpfull here:

http://www.corelan.be:8800/index.php/category/security/exploit-writing-tutorials/

Exploit writing tutorial part 1 : Stack Based Overflows
http://www.corelan.be:8800/index.php/2009/07/19/exploit-writing-tutorial-part-1-stack-based-overflows/

Exploit writing tutorial part 2 : Stack Based Overflows – jumping to shellcode 
http://www.corelan.be:8800/index.php/2009/07/23/writing-buffer-overflow-exploits-a-quick-and-basic-tutorial-part-2/

Exploit writing tutorial part 3 : SEH Based Exploits
http://www.corelan.be:8800/index.php/2009/07/25/writing-buffer-overflow-exploits-a-quick-and-basic-tutorial-part-3-seh/

Exploit writing tutorial part 3b : SEH Based Exploits – just another example
http://www.corelan.be:8800/index.php/2009/07/28/seh-based-exploit-writing-tutorial-continued-just-another-example-part-3b/

Exploit writing tutorial part 4 : From Exploit to Metasploit – The basics
http://www.corelan.be:8800/index.php/2009/08/12/exploit-writing-tutorials-part-4-from-exploit-to-metasploit-the-basics/

Exploit writing tutorial part 5 : How debugger modules & plugins can speed up basic exploit development
http://www.corelan.be:8800/index.php/2009/09/05/exploit-writing-tutorial-part-5-how-debugger-modules-plugins-can-speed-up-basic-exploit-development/

Exploit writing tutorial part 6 : Bypassing Stack Cookies, SafeSeh, HW DEP and ASLR
http://www.corelan.be:8800/index.php/2009/09/21/exploit-writing-tutorial-part-6-bypassing-stack-cookies-safeseh-hw-dep-and-aslr/

Exploit writing tutorial part 7 : Unicode – from 0×00410041 to calc
http://www.corelan.be:8800/index.php/2009/11/06/exploit-writing-tutorial-part-7-unicode-from-0x00410041-to-calc/


Cheers,
--
Leandro Quibem Magnabosco.



------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT 
and CEPT certs require a full practical examination in order to become certified.

http://www.iacertification.org
------------------------------------------------------------------------