Offensive Shellcode from Scratch: Get to grips with shellcode countermeasures and discover how to bypass them

Book Description

Gain practical knowledge of shellcode and leverage it to develop shellcode for Windows and Linux operating systems, while understanding the countermeasures in place and how these can be bypassed

Key Features

• Get up and running with shellcode fundamentals
• Develop Shellcode for Windows and Linux
• Understand the building blocks of shellcode

Book Description

Shellcoding is a technique that is executed by many red teams and used in penetration testing and real-world attacks. Books on shellcode can be complex, and writing shellcode is perceived as a kind of “dark art.” Offensive Shellcode from Scratch will help you to build a strong foundation of shellcode knowledge and enable you to use it with Linux and Windows.

This book helps you to explore simple to more complex examples of shellcode that are used by real advanced persistent threat (APT) groups. You’ll get to grips with the components of shellcode and understand which tools are used when building shellcode, along with the automated tools that exist to create shellcode payloads. As you advance through the chapters, you’ll become well versed in assembly language and its various components, such as registers, flags, and data types. This shellcode book also teaches you about the compilers and decoders that are used when creating shellcode. Finally, the book takes you through various attacks that entail the use of shellcode in both Windows and Linux environments.

By the end of this shellcode book, you’ll have gained the knowledge needed to understand the workings of shellcode and build your own exploits by using the concepts explored.

What you will learn

• Gain a thorough understanding of shellcode
• Get to grips with assembly language and its key purpose in shellcode development
• Identify key elements of memory registers
• Explore debuggers and their use cases
• Get up and running with hands-on shellcode creation for both Windows and Linux
• Exploit Windows and Linux operating systems using shellcode
• Assess countermeasures of Windows and Linux

Who this book is for

This book is for red teamers, penetration testers, and anyone looking to learn about shellcode and find out how it is used to break into systems by making use of simple to complex instructions of code in memory. Basic shellcode knowledge is helpful but not mandatory to understand the topics covered in this book.

中文：

书名：攻击性炮弹代码从头开始：掌握炮弹代码对策，并发现如何绕过它们

获得外壳代码的实用知识，并利用它为Windows和Linux操作系统开发外壳代码，同时了解适当的对策以及如何绕过这些对策

主要特点

• 开始使用shellcode基础知识
• 为Windows和Linux开发外壳代码
• 了解外壳代码的构建块

Book Description

外壳编码是许多RED团队执行的一种技术，用于渗透测试和真实世界的攻击。关于外壳代码的书籍可能很复杂，编写外壳代码被认为是一种黑暗艺术。从头开始攻击性的外壳代码将帮助你建立坚实的外壳代码知识基础，并使你能够在Linux和Windows中使用它。

本书帮助您探索由真正的高级持久威胁(APT)组使用的简单到复杂的外壳代码示例。您将掌握外壳代码的组件，并了解在构建外壳代码时使用哪些工具，以及用于创建外壳代码有效负载的自动化工具。随着本章的推进，您将精通汇编语言及其各种组件，如寄存器、标志和数据类型。这本外壳代码书还向您介绍了在创建外壳代码时使用的编译器和解码器。最后，本书将向您介绍在Windows和Linux环境中使用外壳代码的各种攻击。

读完这本shellcode一书，您将获得理解shellcode的工作原理所需的知识，并使用所探索的概念构建您自己的漏洞。

What you will learn

• 深入了解外壳代码
• 掌握汇编语言及其在外壳代码开发中的主要用途
• 确定内存寄存器的关键元素
• Explore debuggers and their use cases
• 为Windows和Linux创建实用的外壳代码并开始运行
• 使用外壳代码攻击Windows和Linux操作系统
• 评估Windows和Linux的对策

Who this book is for

本书面向红色团队成员、渗透测试人员，以及希望了解外壳代码并了解如何通过使用内存中简单到复杂的代码指令来侵入系统的任何人。基本的外壳代码知识对理解本书中涵盖的主题很有帮助，但不是强制性的。