基于堆栈的Windows Shellcode编写方法研究  

Method research of writing Windows Shellcode based on stack

作　　者：迟强[1] 罗红[1] 乔向东[1] 

机构地区：[1]空军工程大学电讯工程学院,陕西西安710077

出　　处：《计算机工程与设计》2010年第6期1198-1201,共4页Computer Engineering and Design

摘　　要：为更好地理解与防范缓冲区溢出攻击,对Windows平台下Shellcode的编写、提取技术及验证方法进行了研究。从概念出发,理清了Shellcode与Exploit的区别,分析了Shellcode的工作原理,介绍了利用Shellcode所需的3个步骤。在实验的基础上,总结了Shellcode的编写方法及提取技术,最后给出了验证Shellcode有效性的方法。To understand and prevent buffer overflow exploit better, the method of writing and validating Shellcode is researched.Firstly, the difference between Shellcode and Exploit is analyzed after introducing the concept.Secondly, the principle of Shellcode and the three steps of exploiting Shellcode are illustrated.Thirdly, based on many experiments, several methods of writing and extracting Shellcode are summarized.Finally, a few measures of validating Shellcode are presented.

关 键 词：缓冲区溢出 SHELLCODE WINDOWS 堆栈 反汇编 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]