<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Peter Van Eeckhoutte&#039;s Blog &#187; immunity</title>
	<atom:link href="http://www.corelan.be/index.php/tag/immunity/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.corelan.be:8800</link>
	<description>:: [Knowledge is not an object, it´s a flow] ::</description>
	<lastBuildDate>Thu, 09 Sep 2010 08:47:45 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=abc</generator>
		<item>
		<title>Starting to write Immunity Debugger PyCommands : my cheatsheet</title>
		<link>http://www.corelan.be:8800/index.php/2010/01/26/starting-to-write-immunity-debugger-pycommands-my-cheatsheet/</link>
		<comments>http://www.corelan.be:8800/index.php/2010/01/26/starting-to-write-immunity-debugger-pycommands-my-cheatsheet/#comments</comments>
		<pubDate>Tue, 26 Jan 2010 22:03:00 +0000</pubDate>
		<dc:creator>Peter Van Eeckhoutte</dc:creator>
				<category><![CDATA[001_Security]]></category>
		<category><![CDATA[Development]]></category>
		<category><![CDATA[Exploit Writing Tutorials]]></category>
		<category><![CDATA[Scripts]]></category>
		<category><![CDATA[api]]></category>
		<category><![CDATA[assemble]]></category>
		<category><![CDATA[cheatsheet]]></category>
		<category><![CDATA[debugger]]></category>
		<category><![CDATA[disassemble]]></category>
		<category><![CDATA[immlib]]></category>
		<category><![CDATA[immunity]]></category>
		<category><![CDATA[immunity debugger]]></category>
		<category><![CDATA[module]]></category>
		<category><![CDATA[plugin]]></category>
		<category><![CDATA[pycommand]]></category>
		<category><![CDATA[python]]></category>
		<category><![CDATA[readmemory]]></category>
		<category><![CDATA[script]]></category>

		<guid isPermaLink="false">http://www.corelan.be:8800/?p=2802</guid>
		<description><![CDATA[When I started Win32 exploit development many years ago, my preferred debugger at the time was WinDbg (and some Olly). While Windbg is a great and fast debugger, I quickly figured out that some additional/external tools were required to improve my exploit development experience. Despite the fact that the command line oriented approach in windbg [...]]]></description>
		<wfw:commentRss>http://www.corelan.be:8800/index.php/2010/01/26/starting-to-write-immunity-debugger-pycommands-my-cheatsheet/feed/</wfw:commentRss>
		<slash:comments>5</slash:comments>
		</item>
		<item>
		<title>Exploit writing tutorial part 8 : Win32 Egg Hunting</title>
		<link>http://www.corelan.be:8800/index.php/2010/01/09/exploit-writing-tutorial-part-8-win32-egg-hunting/</link>
		<comments>http://www.corelan.be:8800/index.php/2010/01/09/exploit-writing-tutorial-part-8-win32-egg-hunting/#comments</comments>
		<pubDate>Sat, 09 Jan 2010 18:57:00 +0000</pubDate>
		<dc:creator>Peter Van Eeckhoutte</dc:creator>
				<category><![CDATA[001_Security]]></category>
		<category><![CDATA[Exploit Writing Tutorials]]></category>
		<category><![CDATA[Exploits]]></category>
		<category><![CDATA[alpha2]]></category>
		<category><![CDATA[alpha3]]></category>
		<category><![CDATA[alphanumeric]]></category>
		<category><![CDATA[asm]]></category>
		<category><![CDATA[bad char]]></category>
		<category><![CDATA[custom encoder]]></category>
		<category><![CDATA[direct ret]]></category>
		<category><![CDATA[egg]]></category>
		<category><![CDATA[eip]]></category>
		<category><![CDATA[encode]]></category>
		<category><![CDATA[exploit]]></category>
		<category><![CDATA[exploit writing]]></category>
		<category><![CDATA[find shellcode]]></category>
		<category><![CDATA[hunter]]></category>
		<category><![CDATA[hunting]]></category>
		<category><![CDATA[immunity]]></category>
		<category><![CDATA[inject]]></category>
		<category><![CDATA[isbadreadptr]]></category>
		<category><![CDATA[marker]]></category>
		<category><![CDATA[memory]]></category>
		<category><![CDATA[metasploit]]></category>
		<category><![CDATA[nasm]]></category>
		<category><![CDATA[nop]]></category>
		<category><![CDATA[ntdisplaystring]]></category>
		<category><![CDATA[omelet]]></category>
		<category><![CDATA[pvefindaddr]]></category>
		<category><![CDATA[search]]></category>
		<category><![CDATA[seh]]></category>
		<category><![CDATA[shellcode]]></category>
		<category><![CDATA[skape]]></category>
		<category><![CDATA[skylined]]></category>
		<category><![CDATA[small buffer]]></category>
		<category><![CDATA[staged]]></category>
		<category><![CDATA[tag]]></category>
		<category><![CDATA[trampoline]]></category>
		<category><![CDATA[tutorial]]></category>
		<category><![CDATA[unicode]]></category>
		<category><![CDATA[venetian]]></category>
		<category><![CDATA[win32]]></category>
		<category><![CDATA[win32_seh_omelet]]></category>

		<guid isPermaLink="false">http://www.corelan.be:8800/?p=2677</guid>
		<description><![CDATA[Introduction Easter is still far away, so this is probably the right time to talk about ways to hunting for eggs (so you would be prepared when the easter bunny brings you another 0day vulnerability) In the first parts of this exploit writing tutorial series, we have talked about stack based overflows and how they [...]]]></description>
		<wfw:commentRss>http://www.corelan.be:8800/index.php/2010/01/09/exploit-writing-tutorial-part-8-win32-egg-hunting/feed/</wfw:commentRss>
		<slash:comments>7</slash:comments>
		</item>
		<item>
		<title>Exploit writing tutorial part 6 : Bypassing Stack Cookies, SafeSeh, SEHOP, HW DEP and ASLR</title>
		<link>http://www.corelan.be:8800/index.php/2009/09/21/exploit-writing-tutorial-part-6-bypassing-stack-cookies-safeseh-hw-dep-and-aslr/</link>
		<comments>http://www.corelan.be:8800/index.php/2009/09/21/exploit-writing-tutorial-part-6-bypassing-stack-cookies-safeseh-hw-dep-and-aslr/#comments</comments>
		<pubDate>Mon, 21 Sep 2009 21:45:42 +0000</pubDate>
		<dc:creator>Peter Van Eeckhoutte</dc:creator>
				<category><![CDATA[001_Security]]></category>
		<category><![CDATA[Exploit Writing Tutorials]]></category>
		<category><![CDATA[Exploits]]></category>
		<category><![CDATA[!aslrdynamicbase]]></category>
		<category><![CDATA[2003]]></category>
		<category><![CDATA[4141414]]></category>
		<category><![CDATA[8]]></category>
		<category><![CDATA[access violation]]></category>
		<category><![CDATA[add esp]]></category>
		<category><![CDATA[address space layout randomization]]></category>
		<category><![CDATA[adjust ebp]]></category>
		<category><![CDATA[adjust esi]]></category>
		<category><![CDATA[alwaysoff]]></category>
		<category><![CDATA[alwayson]]></category>
		<category><![CDATA[aslr]]></category>
		<category><![CDATA[before function returns]]></category>
		<category><![CDATA[buffer]]></category>
		<category><![CDATA[buffer overflow]]></category>
		<category><![CDATA[bypass]]></category>
		<category><![CDATA[call]]></category>
		<category><![CDATA[compiler]]></category>
		<category><![CDATA[cookie]]></category>
		<category><![CDATA[data execution prevention]]></category>
		<category><![CDATA[dep]]></category>
		<category><![CDATA[dword ptr]]></category>
		<category><![CDATA[exception handler]]></category>
		<category><![CDATA[exploit]]></category>
		<category><![CDATA[gs]]></category>
		<category><![CDATA[hack]]></category>
		<category><![CDATA[handler]]></category>
		<category><![CDATA[immdbg]]></category>
		<category><![CDATA[immunity]]></category>
		<category><![CDATA[jmp]]></category>
		<category><![CDATA[jump]]></category>
		<category><![CDATA[Kifastsystemcallret]]></category>
		<category><![CDATA[ldrpchecknxcompatibility]]></category>
		<category><![CDATA[linker]]></category>
		<category><![CDATA[loaded module]]></category>
		<category><![CDATA[mov al]]></category>
		<category><![CDATA[moveimages]]></category>
		<category><![CDATA[next seh]]></category>
		<category><![CDATA[non exec]]></category>
		<category><![CDATA[nseh]]></category>
		<category><![CDATA[ntsetinformationprocess]]></category>
		<category><![CDATA[nx]]></category>
		<category><![CDATA[ollydbg]]></category>
		<category><![CDATA[optin]]></category>
		<category><![CDATA[optout]]></category>
		<category><![CDATA[partial overwrite]]></category>
		<category><![CDATA[plugin]]></category>
		<category><![CDATA[prevention]]></category>
		<category><![CDATA[processexecute]]></category>
		<category><![CDATA[protection]]></category>
		<category><![CDATA[protectvirtualmemory]]></category>
		<category><![CDATA[pvefindaddr]]></category>
		<category><![CDATA[pycommand]]></category>
		<category><![CDATA[python]]></category>
		<category><![CDATA[ret2libc]]></category>
		<category><![CDATA[safeseh]]></category>
		<category><![CDATA[saved ebp]]></category>
		<category><![CDATA[saved eip]]></category>
		<category><![CDATA[se handler]]></category>
		<category><![CDATA[se structure]]></category>
		<category><![CDATA[sehop]]></category>
		<category><![CDATA[stack]]></category>
		<category><![CDATA[stack overflow]]></category>
		<category><![CDATA[switch]]></category>
		<category><![CDATA[virtual function call]]></category>
		<category><![CDATA[vista]]></category>
		<category><![CDATA[windbg]]></category>
		<category><![CDATA[windows 7]]></category>
		<category><![CDATA[xd]]></category>
		<category><![CDATA[xp]]></category>

		<guid isPermaLink="false">http://www.corelan.be:8800/?p=2266</guid>
		<description><![CDATA[Introduction In all previous tutorials in this Exploit writing tutorial series, we have looked at building exploits that would work on Windows XP / 2003 server. The success of all of these exploits (whether they are based on direct ret overwrite or exception handler structure overwrites) are based on the fact that a reliable return [...]]]></description>
		<wfw:commentRss>http://www.corelan.be:8800/index.php/2009/09/21/exploit-writing-tutorial-part-6-bypassing-stack-cookies-safeseh-hw-dep-and-aslr/feed/</wfw:commentRss>
		<slash:comments>6</slash:comments>
		</item>
		<item>
		<title>Exploit writing tutorial part 5 : How debugger modules &amp; plugins can speed up basic exploit development</title>
		<link>http://www.corelan.be:8800/index.php/2009/09/05/exploit-writing-tutorial-part-5-how-debugger-modules-plugins-can-speed-up-basic-exploit-development/</link>
		<comments>http://www.corelan.be:8800/index.php/2009/09/05/exploit-writing-tutorial-part-5-how-debugger-modules-plugins-can-speed-up-basic-exploit-development/#comments</comments>
		<pubDate>Sat, 05 Sep 2009 09:35:42 +0000</pubDate>
		<dc:creator>Peter Van Eeckhoutte</dc:creator>
				<category><![CDATA[001_Security]]></category>
		<category><![CDATA[Exploit Writing Tutorials]]></category>
		<category><![CDATA[Exploits]]></category>
		<category><![CDATA[!aslrdynamicbase]]></category>
		<category><![CDATA[!findtrampoline]]></category>
		<category><![CDATA[address call]]></category>
		<category><![CDATA[address jmp]]></category>
		<category><![CDATA[aslr]]></category>
		<category><![CDATA[buffer]]></category>
		<category><![CDATA[byakugan]]></category>
		<category><![CDATA[call esp]]></category>
		<category><![CDATA[eip]]></category>
		<category><![CDATA[esp]]></category>
		<category><![CDATA[esp found]]></category>
		<category><![CDATA[findreturn]]></category>
		<category><![CDATA[found valid]]></category>
		<category><![CDATA[hunt]]></category>
		<category><![CDATA[identbuf]]></category>
		<category><![CDATA[immdbg]]></category>
		<category><![CDATA[immunity]]></category>
		<category><![CDATA[jmp]]></category>
		<category><![CDATA[jmp esp]]></category>
		<category><![CDATA[jutsu]]></category>
		<category><![CDATA[listbuf]]></category>
		<category><![CDATA[memdiff]]></category>
		<category><![CDATA[metasploit]]></category>
		<category><![CDATA[msec]]></category>
		<category><![CDATA[pattern_create]]></category>
		<category><![CDATA[pattern_offset]]></category>
		<category><![CDATA[pop]]></category>
		<category><![CDATA[pycommand]]></category>
		<category><![CDATA[ret]]></category>
		<category><![CDATA[return address]]></category>
		<category><![CDATA[rmbuf]]></category>
		<category><![CDATA[safeseh]]></category>
		<category><![CDATA[searchopcode]]></category>
		<category><![CDATA[shellcode]]></category>
		<category><![CDATA[valid return]]></category>
		<category><![CDATA[vista]]></category>

		<guid isPermaLink="false">http://www.corelan.be:8800/?p=2229</guid>
		<description><![CDATA[In the first parts of this exploit writing tutorial, I have mainly used Windbg as a tool to watch registers and stack contents while evaluating crashes and building exploits. Today, I will discuss some other debuggers and debugger plugins that will help you speed up this process. A typical exploit writing toolkit arsenal should at [...]]]></description>
		<wfw:commentRss>http://www.corelan.be:8800/index.php/2009/09/05/exploit-writing-tutorial-part-5-how-debugger-modules-plugins-can-speed-up-basic-exploit-development/feed/</wfw:commentRss>
		<slash:comments>13</slash:comments>
		</item>
	</channel>
</rss>
