Luckily, the same bugs can be exploited largely the
same way on both Linux and Windows, because they are both driven by the same assembly
language underneath the hood. So in this chapter, we??™ll talk about where to get the
tools to build Windows exploits, showyou howto use those tools, and recycle one of the
Linux examples from Chapter 6 by creating the same exploit on Windows.
Compiling and Debugging Windows Programs
Development tools are not included with Windows, but that doesn??™t mean you need to
spend $1,000 for Visual Studio to experiment with exploit writing. (If you have it
already, great??”feel free to use it for this chapter.) You can download for free the same
compiler and debugger Microsoft bundles with Visual Studio .NET 2003 Professional.
In this section,we??™ll showyou howto initially set up your Windows exploitworkstation.
Compiling on Windows
The Microsoft C/C Optimizing Compiler and Linker are available for free from http://
msdn.microsoft.com/vstudio/express/visualc/default.aspx. After a 32MB download and a
straightforward install, you??™ll have a Start menu link to the Visual C++ 2005 Express Edition.
Click the shortcut to launch a command prompt with its environment configured for
Gray Hat Hacking: The Ethical Hacker??™s Handbook
244
compiling code.
Pages:
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453