Exploit Development: Hands Up! Give Us the Stack! This Is a ROPpery!
An introduction to utilizing Return Oriented Programming to defeat Data Execution Prevention.
Recent posts
Riding the NOP sled into OSCE: Retrospect on the Cracking The Perimeter course and OSCE exam
My thoughts on the Cracking The Perimeter course/OSCE Exam and how I came to learn that one must learn to walk before learning to run.
Exploit Development: Second Stage Payload - WS_32.recv() Socket Reuse
Reusing an existing socket connection to add a buffer of a user defined length.
Exploit Development: 0day! Admin Express v1.2.5.485 Folder Path Local SEH Alphanumeric Encoded Buffer Overflow
A 0day I found in an application called Admin Express, how to, by hand, alphanumerically encode shellcode, align the stack properly, and explaining the integ...
From Zero to Hero: My Path to OSCP
How I went from a naive college kid, who did not know there was more than one distribution of Linux, to an OSCP in less than a year - and debunking the stigm...