Full Disclosure mailing list archives

ALPHA3 released


From: Berend-Jan Wever <berendjanwever () gmail com>
Date: Sun, 10 Jan 2010 23:19:33 +0100

ALPHA3<http://skypher.com/wiki/index.php/Hacking/Shellcode/Alphanumeric/ALPHA3>,
an alphanumeric shellcode encoder, has been released:

Improvements from
ALPHA2<http://skypher.com/wiki/index.php/Hacking/Shellcode/Alphanumeric/ALPHA2>to
ALPHA3:
- Smaller decoder
stubs<http://skypher.com/wiki/index.php/Hacking/Shellcode/Alphanumeric/IMUL_0x30_encoding>
.
- x64<http://skypher.com/wiki/index.php/Hacking/Shellcode/Alphanumeric/x64_printable_opcodes>support
(mixedcase ascii only).
- x86<http://skypher.com/wiki/index.php/Hacking/Shellcode/Alphanumeric/x86_printable_opcodes>lowercase
ascii support.
- latin-1 CALL GetPC<http://skypher.com/wiki/index.php/Hacking/Shellcode/GetPC>
- x86 mixedcase ascii Countslide
GetPC<http://skypher.com/index.php/2010/01/02/countslide-alphanumeric-getpc/>implementation
- x86 mixedcase ascii SEH
GetPC<http://skypher.com/wiki/index.php/Hacking/Shellcode/GetPC>for
XPSP3 (bypass all SafeSEH mitigations).
- More decoders for more types of base address sources.

Blog post:
http://skypher.com/index.php/2010/01/10/alpha3-released/

Project homepage:
http://code.google.com/p/alpha3/

Download:
http://alpha3.googlecode.com/files/ALPHA3.zip

Cheers,
SkyLined
<http://skypher.com/index.php/2010/01/10/alpha3-released/>
Berend-Jan Wever <berendjanwever () gmail com>
http://skypher.com/SkyLined
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Current thread: