Re: creating a "cc" opcode from ASCII shell code

[email protected] Fri, 22 Jun 2007 14:20:00 -0400
Newsgroups gmane.comp.security.vulnerabilities
Message-ID <[email protected]>
On Fri, 22 Jun 2007 03:58:24 MDT, Aaron Adams said:

> Maybe I am just tired....  My guess is that I must
> seed a register with an ASCII value and then
> and/xor/not it with approriate value.  I have tried
> using add/sub with no luck.

Yes, that's your best option at that point - you can't get a 0xcc
in there because of the 0z10-0z79, but you *can* start with a 0x40,
shift that left 1 to get a 0x80, and then OR that into a 0x4c.

(Getting a shift-left may be a problem - if so, try "multiply by 2"
or "add to itself" or similar alternatives.  Maybe loading a 16-bit
0x4020 and shifting it *right* 7 bits will work.  Play around. ;)
signature.asc (application/pgp-signature, 226 B)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)
Comment: Exmh version 2.5 07/13/2001

iD8DBQFGfBLQcC3lWbTT17ARAmW0AJ4rLWpF1NaQXUQdiMDrgjizL9lDPgCgqdqG
JoF1XtW8j6lR64dkGCp0qlU=
=xvNv
-----END PGP SIGNATURE-----