Shell Code

jokar.mohsen · 01-25-2012, 10:09 AM

Hello All.
for write shell code which book is good ?

1-Buffer Overflow Attacks - Detect, Exploit, Prevent
2-The Shellcoder's Handbook

Thanks.
Regards.

TobiSGD · 01-25-2012, 10:41 AM

Deleted because giving an inacurate answer, since I totally misunderstood the OP. Thanks to ntubski pointing that out in the following post.

ntubski · 01-25-2012, 12:27 PM

Quote:

Originally Posted by TobiSGD

Why do you think that a book about hacking using buffer overflows could be better for understanding shell scripting than a book about shell scripting?

"shell code" probably doesn't refer to shell scripting here:

Quote:

In computer security, a shellcode is a small piece of code used as the payload in the exploitation of a software vulnerability. It is called "shellcode" because it typically starts a command shell from which the attacker can control the compromised machine.

http://en.wikipedia.org/wiki/Shell_code

rcert · 01-30-2012, 02:12 AM

Quote:

Originally Posted by jokar.mohsen

Hello All.
for write shell code which book is good ?

1-Buffer Overflow Attacks - Detect, Exploit, Prevent
2-The Shellcoder's Handbook

Thanks.
Regards.

There are alot of resources on Shell Code programming and exploitation, it's good to read as much as you can & I highly recommend you do what you read in practical manner, experience preferred to just reading and be a bookworm on exploitation and shellcoding .
I just recommend you to start from some simple articles (I mean the ones located at www.corelan.be), getting the concepts and start practicing for vulnerability discovery and exploitation .
After that, you can learn more, Shellcoder's handbook is a good resource, but for reading books, I recommend some simple chapters on exploitation in "Gray Hat hacking 3rd edition", next step is "Art of exploitation" and in third step it's time to Open up shellcoder's handbook and read it carefully .
To become a professional in exploitation and vulnerability discovering and such stuff, I highly recommend you practicing more than reading, in simple "Read more, Do most" .

Regards.
RCERT