How to compile this kinde of exploits - Web Application Security

Hardcore-Gabber

I have searched for a tut about how to compile this exploits .. i have founde out only that need cygwin for this .. but cannot finde a tut that explains how to compile this exploits ..

Please someone cane help me ...

[align=center]Thanks[/align]

chroniccommand

said:

I have searched for a tut about how to compile this exploits .. i have founde out only that need cygwin for this .. but cannot finde a tut that explains how to compile this exploits ..

Please someone cane help me ...

[align=center]Thanks[/align]

What kind of exploit. You need to specify. You can't just say "Help me please" and get results.

Sh3llc0d3

I need to brush up on mind-reading... :)

Hardcore-Gabber

Sorry i forget to mention the exploit ...

this is the exploit

http://www.securiteam.com/exploits/5ZP031F8VA.html

D0WNGRADE

Find out which language it is (looks like C or C++), then get a compiler for that language and compile it.

chroniccommand

said:

Sorry i forget to mention the exploit ...

this is the exploit

http://www.securiteam.com/exploits/5ZP031F8VA.html

You need to read the exploit. Look at the comments at the beginning.

gcc -o sigcups sigcups&#46;c

m0rph

it's C.


int main(int argc, char *argv&#91;&#93;) {
  struct sockaddr_in dest;   /*&lt;-------------------see below
  int i, off, sock;
  fd_set rset;
  char buf&#91;BUF_SIZE&#93;, buf2&#91;BUF_SIZE&#93;;
  char c;
{more codez}
  return 0;
}

this is a valid statement in C, but in C++ it won't compile. In C++ when you use structs you have to declare what that struct represents before you can use it, for example:


struct sock_inaddr {
codez
};

struct sock_inaddr;

Also, in C++ you don't have to put return 0; in main, because it will automatically be added when you compile, where as in C, you have to end your main function with return 0; by hand.

Xin

You can usually tell by looking at the source code, when it has usr/bin/python at the top then its python,

In this case its C

peann

There's something quite scary about people compiling code to exploit a system, and not even knowing what language it is. It seems in the last few years, with more automated attack vectors - more and more casual computer users are trying to become 'hackers'. I'm not trying to judge the OP or anything, but he should be pointed towards a programming book before he tries to root systems. I hope this doesn't come across as preachy.

nu11byte

Don't spoon feed him. That's why there's so many skids.

Zatarra

It is usually presented in the exploit the compilation mode.

For yours there is a line where it tells you how to compile it and also run it:

gcc -o sigcups sigcups.c && ./sigcups -t 127.0.0.1

gizmodo

said:

Don't spoon feed him. That's why there's so many skids.

Some people are not good in reading or identifying codes. but that doesn't mean automatically he/she a skiddy. One good example ME
I'm here to learn anything what other members can offer and i thank them for that. It's up to the individual what they wan't to do with their life. but lets not forget we all strive for "Knowledge is Power"
even in a real world you can't control those people who choose the darkside. This is why we have forums to learn and help others.

Howdy, Stranger!

Top Posters

Who's Online (1)