WCU / Cybersecurity
~/CSC 472/Class 04
CSC 472 · Class 04

Shellcode

18 knowledge points. Work through them in order, or jump to any topic.

//

Knowledge Points

01What Is Shellcode? 02Why We Study It (Defender's Lens) 03Constraint 1: Position Independence 04Constraint 2: Bad Bytes (Null-Free) 05Avoiding Null Bytes: A Small Example 06The Goal: execve("/bin/sh", NULL, NULL) 07Conceptual execve Shellcode (x86-64) 08Reading the Example 09Option A: pwntools shellcraft + asm 10Option B: msfvenom; Option C: Write Your Own 11Where Shellcode Lives and How It Runs 12The Hard Requirement: An Executable Region 13NX / DEP and checksec 14W^{ 15Bad-Character Analysis and Encoding (Concept) 16Detection and Defense Perspective 17Tie-In: Lab 2 (Return-to-Shellcode Bonus) 18Summary