![..[ Phrack Magazine ]..](../../images/phrack-logo.jpg){kind=logo}
.:: Introduction ::.
Issues:
[ 1 ] [ 2 ] [ 3 ] [ 4 ] [ 5 ] [ 6 ] [ 7 ] [ 8 ] [ 9 ] [ 10 ] [ 11 ] [ 12 ] [ 13 ] [ 14 ] [ 15 ] [ 16 ] [ 17 ] [ 18 ] [ 19 ] [ 20 ] [ 21 ] [ 22 ] [ 23 ] [ 24 ] [ 25 ] [ 26 ] [ 27 ] [ 28 ] [ 29 ] [ 30 ] [ 31 ] [ 32 ] [ 33 ] [ 34 ] [ 35 ] [ 36 ] [ 37 ] [ 38 ] [ 39 ] [ 40 ] [ 41 ] [ 42 ] [ 43 ] [ 44 ] [ 45 ] [ 46 ] [ 47 ] [ 48 ] [ 49 ] [ 50 ] [ 51 ] [ 52 ] [ 53 ] [ 54 ] [ 55 ] [ 56 ] [ 57 ] [ 58 ] [ 59 ] [ 60 ] [ 61 ] [ 62 ] [ 63 ] [ 64 ] [ 65 ] [ 66 ] [ 67 ] [ 68 ] [ 69 ] [ 70 ] [ 71 ]
Current issue : #59 | Release date : 2002-07-28 | Editor : Phrack Staff
| Introduction | Phrack Staff |
| Loopback | Phrack Staff |
| Linenoise | Phrack Staff |
| Handling the Interrupt Descriptor Table | kad |
| Advances in kernel hacking II | palmers |
| Defeating Forensic Analysis on Unix | the grugq |
| Advances in format string exploitation | riq & gera |
| Runtime process infection | anonymous author |
| Bypassing PaX ASLR protection | Tyler Durden |
| Execution path analysis: finding kernel based rootkits | Jan K. Rutkowski |
| Cuts like a knife, SSHarp | stealth |
| Building ptrace injecting shellcodes | anonymous author |
| Linux/390 shellcode development | johnny cyberpunk |
| Writing Linux Kernel Keylogger | rd |
| CRYPTOGRAPHIC RANDOM NUMBER GENERATORS | DrMungkee |
| Playing with Windows /dev/(k)mem | crazylord |
| Phrack World News | Phrack Staff |
| Phrack magazine extraction utility | Phrack Staff |
Title : Introduction
Author : Phrack Staff
C:\>type FILE_ID.DIZ
==Phrack Inc.==
Volume 0x0b, Issue 0x3b, Phile #0x01 of 0x12
[-]==========================================================================[-]
, ,,,
:#' `, ,, ,,
## : ,#' ,#'
__ $#,,#' ,#' '#,:#$#. ,, ,,, ,#' ,'
/_/l ,#' #$'`#, :# '# .# #; .#' ` #$#;`
: : : ,#' #: '# $# #' '# ##. #: '#
; ; ; '' ,#' ', ,:' "#,,$#,.'#:.,' ,#' ', _/_/_/_/ _/_/_/_/
: : : _/ _/ _/
L ; ; __.-._.-+. _/_/_/_/ _/_/_/_/
/."^.:.L.' .^-. \`. _/_/ _/
:`.`. \"/\ /.-. `. \ \ _/_/ _/
;\ \ ` ;-.y(_.-\ \ `.`. _/_/_/_/ _/_/_/
: _. ;; ` \ \. `-\
\ T :: :=, ,=^\ \"-._; __..------.._
/;:-'; ;<o\ <o> `._L.--^. .-""-.`. \ ""--..
: :_.': : ;/ \ / \ \ ; ""--._
; T \ \ s /:.---. ;_/ `-._; ; : ______ \"-. ___
: :\ \ `.-=^" .:-" _\ \_. : : _:.--".-" .T"---:-.""--""\ ""-.
; \\ "-.\__.:' /-'. ; ; _. ; ; / -' ' .- \ ; "-
: ;\ `..' .' \: ; / / .' ) ; __ /
; `, \ .-" ;/"---" /.' / `- /""" ""---""""--
: .-" `. .'.-\ / ""----""""^-.._ .-" bug
\_.' "._.-"-..-'`-..-' ""--..__..--""
[-]==========================================================================[-]
What happend since p58?
Summercon took place (kudos to louis)! We put some pics online at
http://www.phrack.org/summercon2002 for those who missed it.
DMCA knocked down some websites, forced google to censor parts of their
contents and continues to deny, forbid and restrict access to certain
information. Free and unmodified information becomes rare and one day we
might wake up and dont even know what kind of information we missed. Shame
and pity on everyone living in chains in the "free" countries where the
DMCA law applies. (-> PWN).
We have changed our release policy (http://www.phrack.org/release). For the
last 15 years PHRACK has been released to anyone simultaneously. These days
PHRACK is also read by individuals, companies and agencies who do not value
the magazine and the authors (under DMCA, PHRACK might even be forbidden).
Research is free, the magazine is free, but now the phrack approval and
review process provides it free to the contributing authors 2 weeks
earlier.
PHRACK 59 will be released in 3 steps:
2002-07-13: Limited release to contributing authors and volunteer reviewers.
2002-07-19: PHRACK 59 Release Candidate 1 is privately release to a larger
audience for initial feed-back and review. (Not expected to
stay private for long...).
http://www.phrack.org/gogetit/phrack59.tar.gz.
2002-07-28: Public release on http://www.phrack.org main page for everyone
who missed the release on the 19th.
There might be some confusion about where to get PHRACK and how to get in
contact with the Phrack Staff: We do _not_ chill on #phrack/efnet. That
channel has been left alone for nearly 3 years. Those who know us, know
where to find us. All others should contact us by email (PGP key is
attached). None of us would every confirm or show off his involvement in
PHRACK - only snobs do - watch out and dont trust strangers. There is only
one official distribution side:
[#][#][#] http://www.phrack.org [#][#][#]
We got contacted by the very old ones: readers, authors and Editors in
Chief's from 10 and more years ago. Thanks so far to everyone for the
valueable discussions on knights@lists.phrack.org. This is a call to
anyone who wants to meet some friends 'from the old days', or who wants to
organize future events and meetings together: Send an email to
phrackstaff@phrack.org and we will put you on.
This issue comes with a goodie - check out phrack_tshirt_logo.png. We got
in contact with a printer and are happy to announce that the PHRACK TSHIRTS
will be ready for the public PHRACK 59 release.
for you, your computer, your family and your dog at DEFCON X and later on
at http://www.jinxhackwares.com/phrack.
|=[ Table of Contents ]=-------------------------------------------------=|
| 0x01 Introduction Phrack Staff 0x0b kb |
| 0x02 Loopback Phrack Staff 0x0f kb |
| 0x03 Linenoise Phrack Staff 0x6b kb |
| 0x04 Handling the Interrupt Descriptor Table kad 0x55 kb |
| 0x05 Advances in kernel hacking II palmers 0x15 kb |
| 0x06 Defeating Forensic Analysis on Unix the grugq 0x65 kb |
| 0x07 Advances in format string exploiting gera & riq 0x1f kb |
| 0x08 Runtime process infection anonymous author 0x2f kb |
| 0x09 Bypassing PaX ASLR protection anonymous author 0x26 kb |
| 0x0a Execution path analysis: finding kernel rk's J.K.Rutkowski 0x2a kb |
| 0x0b Cuts like a knife, SSHarp stealth 0x0c kb |
| 0x0c Building ptrace injecting shellcodes anonymous author 0x17 kb |
| 0x0d Linux/390 shellcode development johnny cyberpunk 0x14 kb |
| 0x0e Writing linux kernel keylogger rd 0x29 kb |
| 0x0f Cryptographic random number generators DrMungkee 0x2d kb |
| 0x10 Playing with windows /dev/(k)mem crazylord 0x42 kb |
| 0x11 Phrack World News Phrack Staff 0x18 kb |
| 0x12 Phrack magazine extraction utility Phrack Staff 0x15 kb |
|=------------------------------------------------------------=[ 0x2EE kb |
Shoutz:
solar designer : respect, strength & honor!
FozZy, brotha : 1OO% kewl logo (see phrack_tshirt.png)
sh1ft33 & j0hn : phrack ghostwriterz
The latest, and all previous, phrack issues are available online at
http://www.phrack.org. Readers without web access can subscribe to the
phrack-distrib mailinglist. Every new phrack is sent as email attachment
to this list. Every new phrack issue (without the attachment) is announced
on the announcement mailinglist.
To subscribe to the announcement mailinglist:
$ mail announcement-subscribe@lists.phrack.org < /dev/null
To subscribe to the distribution mailinglist:
$ mail distrib-subscribe@lists.phrack.org < /dev/null
To retrieve older issues (must subscribe first):
$ mail distrib-index@lists.phrack.org < /dev/null
$ mail distrib-get.<n>@lists.phrack.org < /dev/null
where n indicated the phrack issue [1..58].
Enjoy the magazine!
Phrack Magazine Vol 10 Number 59, Build 2, July 28, 2002. ISSN 1068-1035
Contents Copyright (c) 2001 Phrack Magazine. All Rights Reserved.
Nothing may be reproduced in whole or in part without the prior written
permission from the editors.
Phrack Magazine is made available to the public, as often as possible, free
of charge.
|=-----------=[ C O N T A C T P H R A C K M A G A Z I N E ]=---------=|
Editors : phrackstaff@phrack.org
Submissions : phrackstaff@phrack.org
Commentary : loopback@phrack.org
Phrack World News : pwn@phrack.org
We have some agressive /dev/null-style mail filter running. We do reply
to every serious email. If you did not get a reply, then your mail was
probably not worth an answer or was caught by our mailfilter. Make sure
your mail has a non-implicit destination, one recipient, a non-empty
subject field, and does not contain any html code and is 100% 7bit clean
pure ascii.
|=-----------------------------------------------------------------------=|
Submissions may be encrypted with the following PGP key:
-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org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=9kWD
-----END PGP PUBLIC KEY BLOCK-----
phrack:~# head -22 /usr/include/std-disclaimer.h
/*
* All information in Phrack Magazine is, to the best of the ability of
* the editors and contributors, truthful and accurate. When possible,
* all facts are checked, all code is compiled. However, we are not
* omniscient (hell, we don't even get paid). It is entirely possible
* something contained within this publication is incorrect in some way.
* If this is the case, please drop us some email so that we can correct
* it in a future issue.
*
*
* Also, keep in mind that Phrack Magazine accepts no responsibility for
* the entirely stupid (or illegal) things people may do with the
* information contained herein. Phrack is a compendium of knowledge,
* wisdom, wit, and sass. We neither advocate, condone nor participate
* in any sort of illicit behavior. But we will sit back and watch.
*
*
* Lastly, it bears mentioning that the opinions that may be expressed in
* the articles of Phrack Magazine are intellectual property of their
* authors.
* These opinions do not necessarily represent those of the Phrack Staff.
*/
|=[ EOF ]=---------------------------------------------------------------=|
© Copyleft 1985-2024, Phrack Magazine.