The DMZ

« first day (3795 days earlier) ← previous day next day → last day (1383 days later) »

Anonymous

16:04

I'm buying another 27" 1440p panel.

Anonymous

This is glorious and I want more pixels!

Anonymous

19:26

Doing all my writeups for bypassing NX. So. Much. Writing.

Anonymous

Who wants a free lesson on bypassing NX on Windows? :D

nobody

19:42

@J-- Me!

Anonymous

19:52

@nobody Heh, I am not sure I could write it all here but I can try O.o I actually wonder if there are any good questions on the main site for doing this (by hand, i.e, not ones which answer: "use a rop compiler!"). Since, that's precisely what I had to do in these challenges and it is actually quite tricky. Well, not so much tricky as it is time-consuming.

Anonymous

If there isn't one, perhaps I can actually write a question & answer it.

Anonymous

But I'm not sure how useful that's going to be.

Anonymous

Here you are @nobody here's the steps for bypassing NX using VirtualAlloc. Two seconds.

Anonymous

Anonymous

That's all the steps.

Anonymous

20:07

Cool, right? :D

nobody

@J-- Yup looks easy

;)

Anonymous

Hah, honestly. It is!

Anonymous

Well, let me rephrase.

Anonymous

The concept is easy, the actual task itself of physically doing it, is easy.

Anonymous

The tricky part is: knowing which gadgets to select, knowing how they fit together.

Anonymous

20:13

In a non-exam environment, you can just bust out your ROP compiler. But since I don't have the luxury, the real test is being confident at gadget selection - and if you're not, lots of trial and error! Hence the time consuming part.

nobody

I hope you'll do well in the exam!

For my part, I'm stuck at step 0

Anonymous

I am actually going to take another 30 days. I checked the exam policy, if you fail you need to wait another 4 weeks before you can take the exam. The exam is 48 hours long, I have no intention of doing it twice.

So, I'm going to do it in July instead of June so I have more time to prepare.

nobody

@J-- Just write it. Someone might find it useful. In any case, you'll get some free rep for doing your writeups (which you have to do anyway)

Anonymous

Well, I am not sure I could include binary specific examples.

Anonymous

But I certainly could do a skeleton version of how you bypass DEP.

djsmiley2kStaysInside

20:22

48 HOURS?

what exam is this o_O

Anonymous

Offensive Security Exploit Developer.

Anonymous

Follows the same time format to their other exams, OSCP for example is 24 hours. OSWE is 48 hours too. OSEE (the level above the course I am doing now, which I am also doing next) is 72 hours.

Anonymous

I'm a masochist, what can I say.