I'm buying another 27" 1440p panel.

This is glorious and I want more pixels!

Doing all my writeups for bypassing NX. So. Much. Writing.

Who wants a free lesson on bypassing NX on Windows? :D

@nobody Heh, I am not sure I could write it all here but I can try O.o I actually wonder if there are any good questions on the main site for doing this (by hand, i.e, not ones which answer: "use a rop compiler!"). Since, that's precisely what I had to do in these challenges and it is actually quite tricky. Well, not so much tricky as it is time-consuming.

If there isn't one, perhaps I can actually write a question & answer it.

But I'm not sure how useful that's going to be.

Here you are @nobody here's the steps for bypassing NX using VirtualAlloc. Two seconds.

That's all the steps.

Cool, right? :D

Hah, honestly. It is!

Well, let me rephrase.

The concept is easy, the actual task itself of physically doing it, is easy.

The tricky part is: knowing which gadgets to select, knowing how they fit together.

In a non-exam environment, you can just bust out your ROP compiler. But since I don't have the luxury, the real test is being confident at gadget selection - and if you're not, lots of trial and error! Hence the time consuming part.

Well, I am not sure I could include binary specific examples.

But I certainly could do a skeleton version of how you bypass DEP.

Offensive Security Exploit Developer.

Follows the same time format to their other exams, OSCP for example is 24 hours. OSWE is 48 hours too. OSEE (the level above the course I am doing now, which I am also doing next) is 72 hours.

I'm a masochist, what can I say.