ar bg de en es fr id it nl pl pt sv tr zh

osce

Mar 26 2019

How an excercise eventually becomes my first public exploit

thesp0nge

A couple of days ago, I was working on my exploit-writing routine as preparation for my upcoming OSCE examination. My standard routine those days is the following: go to exploit-db; look for PoC or old exploit; rewrite them from scratch on newer operating systems. Since the DEP bypass is...

exploit osce seh buffer overflow

Mar 19 2019

Backflip into the stack

thesp0nge

During my OSCE journey I came across an interesting technique to jump backwards into the very beginning of the buffer injected on the vulnerable process. The more reliable technique to jump back is to use an egghunter. You split your shellcode into stages: in the first stage you write an...

assembly x86 shellcode osce