Author: Greg MacManus
Size: 12k
MD5: D52AF543C05C4DBEC7A98A2DB0D8CD4D

JPExPoC demonstrates embedding shellcode in JPEG image files, exploiting degenerate cases of DCT encoding to prevent information loss in the process. It consists of a few small C programs and a shellscript to bind them together. This package was tested and developed under the Cygwin environment.

Download  |  License 

Author: Greg MacManus, Mike Sutton
Size: 900k
MD5: 7C44967D47F3EA66DFCC2C4092E83AB6

PUNKui is a simple utility designed to automate the theory behind Punk Ode. Specifically, it is a Windows GUI which will take common image formats (JPG, PNG & BMP) and convert them into PNG files comprised entirely of a NOP sled and embedded shellcode.

Download  |  License 

Author: Peter Silberman
Author: Richard Johnson
Size: ~15k
MD5:fc8808cf5d7dbd1a2472f8322fa4c59f

The Attack Vector Test Platform was written over the course of research for the paper and presentation titled "A Comparison Buffer Overflow Prevention Implementations & Weaknesses" which was presented at the 2004 Black Hat and Defcon computer security conferences. The test platform allows for assessing the effectiveness of combinations of attack buffer placement and execution control vectors against various buffer overflow prevention software technologies.

Download  |  License