Dailydave mailing list archives

add %ebx, (%esi)


From: Dave Aitel <dave () immunityinc com>
Date: Tue, 17 Jul 2007 16:20:22 -0400

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


There are a lot of different ways to assemble things on x86. For
example, add %ebx, (%esi) can be done in either two bytes, or three.
This is mostly important to you if you're writing shellcode and need
to avoid bad bytes or optimize for space or just avoid IDS sigs. But
without controlling the guts of your assembler, it's hard to do this
automatically.

MOSDEF has always had an x86 assembler, but it was slow (based on
spark.py as a parser, which was the best available at the time MOSDEF
was created originally). I've rewritten the x86 assembler's parser and
you can now access a small web sample here:
http://www.immunityinc.com/cgi-bin/assemble.py . You may or may not
find this useful. Let me know if you find any bugs!

I'm not sure where the old MOSDEF mailing list archives are, but we'll
take a look at the backups and see if we can find them.

Also new on the website today is this:
http://www.immunityinc.com/resources-dkm.shtml

- -dave

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFGnSSDB8JNm+PA+iURAg94AKDgV8q6oKjPz5ZN2SsQCVpOwmPqoQCfcZZA
ny9EthRXynG136V2f1wF0pI=
=J910
-----END PGP SIGNATURE-----

_______________________________________________
Dailydave mailing list
Dailydave () lists immunitysec com
http://lists.immunitysec.com/mailman/listinfo/dailydave


Current thread: