Garage4hackers Forum - Exploitation Techniques

Menu
G4H Tutorial and Papers

G4H Tools and Scripts

G4H Exploits

CTF & Meet Writeups

Google Hall of Fame

Teensy

Bug Bounty Listing

Web Application Security

Exploitation Techniques

RWS Webcast Recording

Blogs

Exploitation Techniques
DEP ASLR bypass without ROP JIT : CanSecWest2013 Slides and Analysis
by
fb1h2s

View Profile

View Forum Posts

Private Message

View Blog Entries

Visit Homepage

View Articles

Published on 03-08-2013 01:15 PM Number of Views: 12376
I have my own talk from CanSecwest to blog about but this one is more interesting and the most awaited one. So here are ...

Read More
Max OSX 64 bit ROP Payloads.

by
fb1h2s

View Profile

View Forum Posts

Private Message

View Blog Entries

Visit Homepage

View Articles

Published on 11-15-2012 09:13 PM Number of Views: 2989

6 Months back I did a presentation on Mac OSX 64 bit ROP shellcodes at Null Monthly meet, where I took two different session ...

Read More
Beginners Guide to "Use after free Exploits #IE 6 0-day #Exploit Development"

by
fb1h2s

View Profile

View Forum Posts

Private Message

View Blog Entries

Visit Homepage

View Articles

Published on 11-15-2012 03:49 PM Number of Views: 37177

Yea right!

Last week a friend asked few queries regarding use after free vulnerabilities, . It's been ...

Read More 1 Comment
Web-App Remote Code Execution Via Scripting Engines Part -1: Local Exploits PHP 0-day

by
fb1h2s

View Profile

View Forum Posts

Private Message

View Blog Entries

Visit Homepage

View Articles

Published on 08-20-2012 07:22 PM Number of Views: 8808

This would be part-1 one of my C0C0n talk , where I demonstrated few PHP 0-days, Local and Remote . The entire concept ...

Read More 1 Comment
MS11-046 exploit Code, Windows local Privilege Escalation .

by
fb1h2s

View Profile

View Forum Posts

Private Message

View Blog Entries

Visit Homepage

View Articles

Published on 04-08-2012 05:35 PM Number of Views: 4573

Windows not sure about Win 7 lets Mapping of 0x00000000 in user space, and this particular vulnerability windows fix [Ms011-46] ...

Read More
Binary Analysis of Oracle Java CVE: 2012-0500 and Alternate Exploitation on Win|Linux

by
fb1h2s

View Profile

View Forum Posts

Private Message

View Blog Entries

Visit Homepage

View Articles

Published on 03-13-2012 07:38 PM Number of Views: 2823

Main():

Java Webstart recently had critical security update in it's Webstart module Oracle Java Critical Patch ...

Read More
Binary Analysis of Oracle Java CVE: 2012-0500 and Alternate Exploitation on Win|Linux

by
fb1h2s

View Profile

View Forum Posts

Private Message

View Blog Entries

Visit Homepage

View Articles

Published on 03-09-2012 03:41 AM Number of Views: 5570

Main():

Java Webstart recently had critical security update in it's Webstart module Oracle Java Critical ...

Read More
Windows 8 DEP bypass

by
"vinnu"

View Profile

View Forum Posts

Private Message

View Blog Entries

View Articles

Published on 11-19-2011 07:58 AM Number of Views: 6705

This Time we'll colour our hands with the blood of windows 8 Developer's Preview edition. What we need , a target application, ...

Read More 1 Comment
[ Taken from Forum posts and edited ]

Namaste

This Time we'll colour our hands with the blood ...

Read More
ASLR DEP bypassing techniques

by
"vinnu"

View Profile

View Forum Posts

Private Message

View Blog Entries

View Articles

Published on 09-29-2011 10:24 AM Number of Views: 4787

In defeating DEP you atleast need some information that will evade the ASLR.
There are mainly two ways:
...

Read More
SEH Overflow exploit POC Part 2

by
m0nna

View Profile

View Forum Posts

Private Message

View Blog Entries

View Articles

Published on 09-21-2011 11:47 AM

Exploiting the SEH overflow in A-PDF all to mp3 converter

1) I wrote a perl script that creates a “wav” file ...

Read More
SEH Overflow exploit POC Part 2

by
m0nna

View Profile

View Forum Posts

Private Message

View Blog Entries

View Articles

Published on 09-20-2011 10:41 PM Number of Views: 3072

Exploiting the SEH overflow in A-PDF all to mp3 converter

1) I wrote a perl script that creates a “wav” file ...

Read More
SEH Overflow exploit POC Part 1

by
m0nna

View Profile

View Forum Posts

Private Message

View Blog Entries

View Articles

Published on 09-20-2011 07:10 AM Number of Views: 4340

On 18th Jan 2011, somebody named “h1ch4m” reported a stack based overflow vulnerability in “PDF All to mp3 converter” via ...

Read More
Drive by Cache Exploits Example & Stearing remote Exploitation locally

by
"vinnu"

View Profile

View Forum Posts

Private Message

View Blog Entries

View Articles

Published on 06-10-2011 01:08 AM Number of Views: 4050

Author : "vinnu"
Team : Legion Of Xtremers
Special Thanx : Secfence Team
Greets : Lord DeathStorm, ...

Read More
Writing Basic Buffer Overflow

by
D4rk357

View Profile

View Forum Posts

Private Message

View Blog Entries

View Articles

Published on 12-23-2010 04:09 PM Number of Views: 5149

Writing Simple Buffer Overflow Exploits
[+]By D4rk357 [lastman100@gmail.com]
[+]Special thanks to Peter Van ...

Read More 1 Comment
Alternative JVM Xploit - Exploiting JVM on Chrome - A story

by
"vinnu"

View Profile

View Forum Posts

Private Message

View Blog Entries

View Articles

Published on 10-13-2010 10:30 PM Number of Views: 4217

Alternative JVM Xploit - A story

Author : "vinnu"
Team : Legion Of Xtremers (LOXians) ...

Read More
Heap Spray --- Slipping CPU to our pocket--by "vinnu"

by
prashant_uniyal

View Profile

View Forum Posts

Private Message

View Blog Entries

Visit Homepage

View Articles

Published on 08-06-2010 10:49 PM Number of Views: 3853

Heap Spray --- Slipping CPU to our pocket

Author : "vinnu"
Team : "Legion Of Xtremers" ...

Read More
Windows Link exploit (shortcut file) race condition tackling--"vinnu"

by
prashant_uniyal

View Profile

View Forum Posts

Private Message

View Blog Entries

Visit Homepage

View Articles

Published on 08-03-2010 09:04 PM Number of Views: 4769

Team : Legion Of Xtremers / Garage4Hackers
author : "vinnu"
Greetz : Prashant Uniyal, b0nd, D4rk457, ...

Read More

All times are GMT +5.5. The time now is 03:50 PM.

The forum is frozen forever - but it won't die; it'll stay for long in search engine results and we hope it would keep helping newbies in some way or other - cheers!

Menu

Exploitation Techniques

DEP ASLR bypass without ROP JIT : CanSecWest2013 Slides and Analysis

Max OSX 64 bit ROP Payloads.

Beginners Guide to "Use after free Exploits #IE 6 0-day #Exploit Development"

Web-App Remote Code Execution Via Scripting Engines Part -1: Local Exploits PHP 0-day

MS11-046 exploit Code, Windows local Privilege Escalation .

Binary Analysis of Oracle Java CVE: 2012-0500 and Alternate Exploitation on Win|Linux

Binary Analysis of Oracle Java CVE: 2012-0500 and Alternate Exploitation on Win|Linux

Windows 8 DEP bypass

ASLR DEP bypassing techniques

SEH Overflow exploit POC Part 2

SEH Overflow exploit POC Part 2

SEH Overflow exploit POC Part 1

Drive by Cache Exploits Example & Stearing remote Exploitation locally

Writing Basic Buffer Overflow

Alternative JVM Xploit - Exploiting JVM on Chrome - A story

Heap Spray --- Slipping CPU to our pocket--by "vinnu"

Windows Link exploit (shortcut file) race condition tackling--"vinnu"

G4H Facebook

G4H Twitter