Helloworld Shellcode JMP Call Pop
Helloworld Shellcode JMP Call Pop
Training:
hNp://www.SecurityTube-‐Training.com
Pentester
Academy:
hNp://www.PentesterAcademy.com
Vivek
Ramachandran
SWSE,
SMFE,
SPSE,
SGDE,
SISE,
SLAE32,64
Course
Instructor
©SecurityTube.net
Module
2:
IntroducSon
to
Shellcoding
hNp://SecurityTube-‐Training.com
©SecurityTube.net
Modifying
Hello
World
• No
hardcoded
addresses
– dynamically
figure
out
address
of
“Hello
World”
string
©SecurityTube.net
JMP-‐CALL-‐POP
JMP
Call_shellcode:
shellcode:
pop
rsi
….
…
…
Call_shellcode:
call
shellcode:
HelloWorld
db
“Hello
World!”
©SecurityTube.net
Pentester
Academy
©SecurityTube.net