All right.
So right before we start with our first exercise, I want to explain to you what has changed in the
summer 2022 remastering.
So I want you to skip to this section right here, remastered section number one, because the previous
live and binaries were running on outdated Linux virtual machines.
And because of recent Linux updates, they no longer work.
So now we use doctor containers locked to a specific Linux kernel version.
So you can go ahead and check out the previous sections as viewed, but I suggest you view the old videos
too.
It's going to teach you a lot between the differences of Python two and three and how Shell Code is
inserted as part of the script.
So throughout the course you're going to notice that I use multiple penetration testing distributions.
Linux Perrette 32, is 64 bit, but thanks to these doctor containers you're going to you don't even
need to even have Linux.
You just have to have a 64 bit Linux virtual machine.
However, I recommend a penetration testing distribution because you can do things like generate a dynamic
shell code with Metasploit, for example.
So the doctor containers say all of the necessary debugging and exploit development tools to complete
the exercise you have.
The debugger included the debugger petta extensions or the newest Geoff Extensions, which is now supported.
Also, we are going to use platform emulation to allow 32 bit containers to run on 64 bit Linux virtual
machines.
So Docker nowadays should be available on your standard app repo for a penetration testing distro.
It's available on a button, too.
It's available on Linux and Perret, but for whatever reason, they couldn't like install Docker from
your repositories for your Linux virtual machine.
Just take the link right here.
So the syntax github provided is wrong.
You do pseudo docker pull this line to download the lib HDP DB and docker container.
But like I said before, I contain all of the tools within the container for you to create the exploit
and run it.
So at the release of my course back in 2019 to 2020, Python two is still being used in my exploit examples.
Since then, Python two has been entirely deprecated and using py py to install additional modules often
end in failure.
However, a lot of older exploits are still written in Python two and furthermore, most debugging and
reverse engineering tools still use their scripting interest in Python two.
Ghidorah.
I may cover this later on.
I don't have a module for it yet, but ghidorah actually still uses Python two because of Python.
Jonathan wants not updated, so it uses Python two, although you normally write these little java applets
or source code files and ghidorah ingests the java file and runs it.
Kind of like a script immunity debugger.
I'm not really sure if they support Python three.
I know that Moana was still written in Python two, so for that reason I will leave the older Python
two videos up for reference and to explain the differences between Python two and three syntax for shell
coding as we proceed through the course.
So in my older videos, I reversed the bites to demonstrate Indian ness.
You'll find that if you'll find out about that in the original lib http 1.2 videos.
But for the most part, once you understand that you have to reverse the bytes of a memory address before
a instruction pointer.
Overwrite is no longer necessary to continue doing this.
So using from struct import pack in python, you can actually just write the memory address right here.
And for 32 bit exploits you use a capital L, make sure you use lowercase in front of it to show that
it's little Indian if you use a greater than sign will be big Indian, which is something like a MIPS
assembly like architecture, which is something for Iot devices.
So for 64 bit exploits, you use a capital Q, make sure you always use the lower sign for little Indian
and that is AMD 64 processors.
So lowercase L memory address is 386 processors.
So starting with the start coronary bypass module, we will introduce pone tools.
Pone tools actually makes the building of rob chains even easier by abbreviating our previous struct
packed line as simply p 64 rest.
Poe tools itself has its own special interactive mode, which uses standard out and error pipes to make
interactive use of the shell to spawn.