Penetration Testing mailing list archives

Good advice: Learn Assembly


From: Jim Kelly <macubergeek () comcast net>
Date: Sat, 16 Aug 2008 14:18:42 -0400

I have a personal goal of learning how to find vulnerabilities with fuzzers and code POCs (preferably in Python).

Now I've gotten the traditional advice of "learn assembly" from a couple of folks. I wonder if that is necessary these days. I always thought one needed to learn assembly to code shell code. With the capabilities of Metasploit, I wonder if this is still true? Do you need to know assembly coding to decipher the output of disassemblers like IDA Pro or debuggers like Olly?

Setting aside the logistical problems of finding a local college that still teaches assembly....am I overlooking something here?

All comments welcome.

Jim

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Top 5 Common Mistakes in Securing Web Applications
Get 45 Min Video and PPT Slides

www.cenzic.com/landing/securityfocus/hackinar
------------------------------------------------------------------------


Current thread: