Comments for stacksmash.org http://stacksmash.org Only a few decades behind on smashing the stack Wed, 25 Aug 2010 02:42:45 +0000 hourly 1 http://wordpress.org/?v=3.0.1 Comment on Gray Hat Python by Justin Seitz – Errata by diwakar wagle http://feedproxy.google.com/~r/CommentsForStacksmashorg/~3/JTZhKOIdFjc/ diwakar wagle Wed, 25 Aug 2010 02:42:45 +0000 http://stacksmash.org/?p=44#comment-2673 The attach proces was successful.During the thread enumeration while running my_test.py gave following error: Traceback (most recent call last): File "C:\Python31\my_test.py", line 11, in for thread in list: TypeError: 'bool' object is not iterable Does anyone know what's wrong with that? The attach proces was successful.During the thread enumeration while running my_test.py gave following error:
Traceback (most recent call last):
File “C:\Python31\my_test.py”, line 11, in
for thread in list:
TypeError: ‘bool’ object is not iterable

Does anyone know what’s wrong with that?

]]> http://stacksmash.org/?p=44&cpage=1#comment-2673 Comment on Gray Hat Python by Justin Seitz – Errata by Thanh Lam http://feedproxy.google.com/~r/CommentsForStacksmashorg/~3/9suvyDZlMKQ/ Thanh Lam Sat, 17 Jul 2010 02:05:07 +0000 http://stacksmash.org/?p=44#comment-1960 <a href="#comment-84" rel="nofollow">@SANDEEP MEHANDRU </a> Some how the capital class name BARLEY_AMOUNT was the problem, I think. I have the name all lower case and it works fine. I don't see why BARLEY_AMOUNT doesn't work and barley_amount works either. However, I'm just a python beginner myself. @SANDEEP MEHANDRU
Some how the capital class name BARLEY_AMOUNT was the problem, I think. I have the name all lower case and it works fine. I don’t see why BARLEY_AMOUNT doesn’t work and barley_amount works either. However, I’m just a python beginner myself.

]]> http://stacksmash.org/?p=44&cpage=1#comment-1960 Comment on Gray Hat Python by Justin Seitz – Errata by Thanh Lam http://feedproxy.google.com/~r/CommentsForStacksmashorg/~3/ySS-Dj84Umw/ Thanh Lam Sat, 17 Jul 2010 01:47:58 +0000 http://stacksmash.org/?p=44#comment-1957 Thanks for sharing the errors. That's very helpful. The No Starch Press Website now has the updates on the errors. I just want to point out from my own experience when I removed the line self.run(). The debugger attached to the process then went directly to exit -- it displayed the message: "[*] Finished debugging. Exiting..." I put the line back in and it works as described in the book. Just thought others may want to know. I don't see how to send this feedback to No Starch Press. If you still have Mr. Seitz, could you send it to my email address? Thanks again! Thanks for sharing the errors. That’s very helpful. The No Starch Press Website now has the updates on the errors.

I just want to point out from my own experience when I removed the line self.run(). The debugger attached to the process then went directly to exit — it displayed the message:
“[*] Finished debugging. Exiting…”

I put the line back in and it works as described in the book. Just thought others may want to know. I don’t see how to send this feedback to No Starch Press. If you still have Mr. Seitz, could you send it to my email address? Thanks again!

]]> http://stacksmash.org/?p=44&cpage=1#comment-1957 Comment on Richard Clarke sucks [updated] by Minda http://feedproxy.google.com/~r/CommentsForStacksmashorg/~3/6BJqbtIpce8/ Minda Sat, 24 Apr 2010 04:56:48 +0000 http://stacksmash.org/?p=192#comment-1049 If I had written the title for that video, it would be called "The Edge of the Internet: A Series of Facepalms." If I had written the title for that video, it would be called “The Edge of the Internet: A Series of Facepalms.”

]]> http://stacksmash.org/?p=192&cpage=1#comment-1049 Comment on Gray Hat Python by Justin Seitz – Errata by JP http://feedproxy.google.com/~r/CommentsForStacksmashorg/~3/ezzmLR2hm1I/ JP Sun, 18 Apr 2010 15:59:25 +0000 http://stacksmash.org/?p=44#comment-1033 Did anyone get the soft breakpoints to work based on the code from p. 43,44,45? Did anyone get the soft breakpoints to work based on the code from p. 43,44,45?

]]> http://stacksmash.org/?p=44&cpage=1#comment-1033 Comment on Gray Hat Python by Justin Seitz – Errata by JP http://feedproxy.google.com/~r/CommentsForStacksmashorg/~3/CeHkcroOIaM/ JP Thu, 08 Apr 2010 20:55:59 +0000 http://stacksmash.org/?p=44#comment-1019 I've been working on finishing up the code on page 36-37(chapter 3), I've already made the changes regarding kernel32.CloseHandle, etc. I'm having an issue with some of the thread_entry fields (important ones like th32OwnerProcessID, and th32ThreadID) containing 0. Has anyone encounter similar problems? I’ve been working on finishing up the code on page 36-37(chapter 3), I’ve already made the changes regarding kernel32.CloseHandle, etc. I’m having an issue with some of the thread_entry fields (important ones like th32OwnerProcessID, and th32ThreadID) containing 0. Has anyone encounter similar problems?

]]> http://stacksmash.org/?p=44&cpage=1#comment-1019 Comment on Gray Hat Python by Justin Seitz – Errata by Sean http://feedproxy.google.com/~r/CommentsForStacksmashorg/~3/lZSOEIwFeFg/ Sean Sun, 04 Apr 2010 19:24:46 +0000 http://stacksmash.org/?p=44#comment-1015 <a href="#comment-910" rel="nofollow">@Greg </a> Indeed, the problem is in the printf_loop.py. It took me a bit, but once I thought about it enough I realized I should take a better look at the loop and not the debugger. You can grab the source for the book--which is far more accurate--from its website: http://www.nostarch.com/ghpython.htm This should save a lot of trouble. :) @Greg
Indeed, the problem is in the printf_loop.py. It took me a bit, but once I thought about it enough I realized I should take a better look at the loop and not the debugger.

You can grab the source for the book–which is far more accurate–from its website:
http://www.nostarch.com/ghpython.htm

This should save a lot of trouble. :)

]]> http://stacksmash.org/?p=44&cpage=1#comment-1015 Comment on Gray Hat Python by Justin Seitz – Errata by Greg http://feedproxy.google.com/~r/CommentsForStacksmashorg/~3/qSsLF4PiGX0/ Greg Fri, 26 Feb 2010 20:15:33 +0000 http://stacksmash.org/?p=44#comment-910 the issue with Chapter 4.1, besides any issues in printf_random.py, is actually in printf_loop.py. printf is called with 1 argument and not 2, so trying to read / modify the second argument while debugging doesn't do any good. changing the % to a , in the call to printf causes the printf statement to get the format string and the number, instead of Python doing the formatting and then passing the resulting string. the issue with Chapter 4.1, besides any issues in printf_random.py, is actually in printf_loop.py. printf is called with 1 argument and not 2, so trying to read / modify the second argument while debugging doesn’t do any good. changing the % to a , in the call to printf causes the printf statement to get the format string and the number, instead of Python doing the formatting and then passing the resulting string.

]]> http://stacksmash.org/?p=44&cpage=1#comment-910 Comment on Gray Hat Python by Justin Seitz – Errata by LaVey http://feedproxy.google.com/~r/CommentsForStacksmashorg/~3/UXHeUYIuMwo/ LaVey Tue, 09 Feb 2010 14:51:15 +0000 http://stacksmash.org/?p=44#comment-845 I still had problems getting the kernel32.OpenProcess() to return a handle, stepping retunred a 0 and extended error 57, googling found some more info here: http://nsylvain.blogspot.com/2008/01/winverwin32winnt-mayhem.html The solution that worked for me was to change the constant PROCESS_ALL_ACCESS to the following: PROCESS_ALL_ACCESS = (0x000F0000 | 0x00100000 | 0xFFF) (found here: http://acme-labs.org.uk/galleries/44/0000/2237/lecture.pdf) Hth someone :D I still had problems getting the kernel32.OpenProcess() to return a handle, stepping retunred a 0 and extended error 57, googling found some more info here: http://nsylvain.blogspot.com/2008/01/winverwin32winnt-mayhem.html
The solution that worked for me was to change the constant PROCESS_ALL_ACCESS to the following:

PROCESS_ALL_ACCESS = (0x000F0000 | 0×00100000 | 0xFFF)

(found here: http://acme-labs.org.uk/galleries/44/0000/2237/lecture.pdf)

Hth someone :D

]]> http://stacksmash.org/?p=44&cpage=1#comment-845 Comment on Fuck Securom (Error 5003) by Rafael http://feedproxy.google.com/~r/CommentsForStacksmashorg/~3/2j3octyaaP0/ Rafael Sun, 17 Jan 2010 23:11:29 +0000 http://stacksmash.org/?p=181#comment-762 Funny you mention this -- I just ran into this a few days ago myself, but it involved Process Explorer (as it leaves behind its driver). Using Winobj to lock down ACLs bypassed the issue, but at the expense of my time. How SecuROM isn't classified as malware is beyond me. Funny you mention this — I just ran into this a few days ago myself, but it involved Process Explorer (as it leaves behind its driver). Using Winobj to lock down ACLs bypassed the issue, but at the expense of my time. How SecuROM isn’t classified as malware is beyond me.

]]> http://stacksmash.org/?p=181&cpage=1#comment-762