Dailydave mailing list archives
add %ebx, (%esi)
From: Dave Aitel <dave () immunityinc com>
Date: Tue, 17 Jul 2007 16:20:22 -0400
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 There are a lot of different ways to assemble things on x86. For example, add %ebx, (%esi) can be done in either two bytes, or three. This is mostly important to you if you're writing shellcode and need to avoid bad bytes or optimize for space or just avoid IDS sigs. But without controlling the guts of your assembler, it's hard to do this automatically. MOSDEF has always had an x86 assembler, but it was slow (based on spark.py as a parser, which was the best available at the time MOSDEF was created originally). I've rewritten the x86 assembler's parser and you can now access a small web sample here: http://www.immunityinc.com/cgi-bin/assemble.py . You may or may not find this useful. Let me know if you find any bugs! I'm not sure where the old MOSDEF mailing list archives are, but we'll take a look at the backups and see if we can find them. Also new on the website today is this: http://www.immunityinc.com/resources-dkm.shtml - -dave -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iD8DBQFGnSSDB8JNm+PA+iURAg94AKDgV8q6oKjPz5ZN2SsQCVpOwmPqoQCfcZZA ny9EthRXynG136V2f1wF0pI= =J910 -----END PGP SIGNATURE----- _______________________________________________ Dailydave mailing list Dailydave () lists immunitysec com http://lists.immunitysec.com/mailman/listinfo/dailydave
Current thread:
- add %ebx, (%esi) Dave Aitel (Jul 17)
- Re: add %ebx, (%esi) Bee Binger (Jul 17)
- Re: add %ebx, (%esi) Dave Aitel (Jul 19)
- Re: add %ebx, (%esi) Berend-Jan Wever (SKYLINED) (Jul 20)
- Re: add %ebx, (%esi) Bee Binger (Jul 20)
- Re: add %ebx, (%esi) Mateusz Berezecki (Jul 20)
- Re: add %ebx, (%esi) Dave Aitel (Jul 19)
- Re: add %ebx, (%esi) Bee Binger (Jul 17)
- <Possible follow-ups>
- Re: add %ebx, (%esi) Bee Binger (Jul 20)