4Mona.py and Exploit Development on the Edge - Workshop eBook

Mona.py and Exploit Development on the Edge Workshop by Raheel Ahmad. You will learn how to discover vulnerabilities in the windows based applications by use of Metasploit and Mona.py and how to build exploits modules and explore more features of Mona.py with Immunity Debugger.

INSIDE

Module 1– Setup your own lab

• • Pre-requisites
  • What will be covered
  • What will not be covered
  • What you will learn
  • Basic Knowledge
  • Setup Exploit Development Environment
  • Installing Windows XP on Virtual Box
  • Vulnerable App
  • Immunity Debugger
  • Mona.py Plugin
  • Exploit Coding

 Module 2 – Understanding Metasploit and Mona.py

• • Introduction
  • What we will cover
  • Metasploit Exploit Development
  • Fuzzing
  • Controlling
  • Mona.py & Exploit Development
  • Mona.py Usage
  • Comparison of Metasploit & Mona.py Exploit Development

Module 3 – Reverse Engineering Remote Exploits and writing our own code

• • Introduction

  • Pre-requisite
  • Downloading the vulnerable Application
  • Vulnerable App 1

• • • Exploit for App 1
  • Vulnerable App 2

• • • Exploit for App 2
  • Understanding Exploit 1 for Vulnerable App 1
  • Logging into exploit development lab

  • Your Task

Module 4 – Exploring Mona.py Features

• • Introduction
  • Pre-requisite
  • What we will cover
  • Mona.py Features

• • • Offset Detection
    • Dumping Memory content
    • Egg Hunting
    • Finding Cyclic Pattern (findmsp)
    • Suggest

Module 5 – Using Mona.py with Debuggers to write quick exploits

• • Introduction
  • Pre-requisite
  • Lab Requirements
  • Exploit Development on the Edge for PCMan’s FTP Server

• • • Quick Fuzzing
    • Exploit Module for PCMan’s FTP Server.
• Exploit Development on the Edge for Sami FTP Server

• • Quick Fuzzing
  • Sami FTP Server Exploit Module