Hello All,

Assembly language is a must know before one can get into the world of code exploitation techniques, reverse engineering, virus writing etc. Unfortunately, as Assembly is also a bit tough to grasp for newbies as it is very low level. Thus, I decided to create a video tutorial series on "how to get started with Assembly for hackers".

The series is far from complete yet. I will be posting follow up videos in this post as I make more. Here is the first couple I made today:

1. System Organization concepts:

http://securitytube.net/Assembly-Primer-for-Hackers-(Part-1)-System-Organization-video.aspx

In this first part, I explain the basics of computer organization, CPU registers - general purpose, segment and instruction pointer. Also covered is virtual memory organization, program memory organization, program stack and stack operations.


2. Virtual Memory Organization:

http://securitytube.net/Assembly-Primer-for-Hackers-(Part-2)-Virtual-Memory-Organization-video.aspx

In this video we take an in-depth look at virtual memory organization concepts. We look at how one can use the /proc/PID/maps to peek into the layout of a program's virtual memory and interpret useful things. Also, we show how the Address Space Layout Randomization (ASLR) works in the latest 2.6 kernels and why this is significant from a security point of view. We also show how this can be disabled at runtime if the need be. This video is very important from an code exploitation perspective as it teaches us how to check for the presence of ASLR on a given system.

3. GDB Usage Primer:

http://securitytube.net/Assembly-Primer-for-Hackers-(Part-3)-GDB-Usage-Primer-video.aspx

In this video we go through a quick primer on how to use GDB to disassemble code, set breakpoints, trace through code, examine CPU registers and memory locations, examine the program stack and many other important use cases which will help us in later videos when we actually start coding in Assembly and want to debug our code.

Comments and Feedback welcome!

More videos to be added over the weekend.



Edited 1 time(s). Last edit at 03/28/2009 12:28PM by ramaz.

These are excellent; You do a great job making the content understandable.
I'm looking forward to more :)

Really enjoying them thanks. I like the 15 mins slots and all examples are very clear and provide good information. More please

------------------------------------------------------------------------------------------------------------
"People who say it cannot be done should not interrupt those who are doing it.";
labs : [www.businessinfo.co.uk]
blog : [www.thespanner.co.uk]
Hackvertor : [hackvertor.co.uk]

Same here. Definitely good stuff!

Guys!

Thanks so much for the encouragement! I am glad you found my videos useful.

I will be making the rest of the series over this weekend and will be posting a link in this thread!

Recommendations and criticism both welcome!

Hello All,

Just finished creating the next set of videos in the "Assembly Language Primer for Hackers" video series:

4. Writing your First Hello World Program in Assembly

http://securitytube.net/Assembly-Primer-for-Hackers-(Part-4)-Hello-World-video.aspx

5. Understanding Data types in Assembly Language

http://securitytube.net/Assembly-Primer-for-Hackers-(Part-5)-Data-Types-video.aspx

6. Moving Data between registers and memory

http://securitytube.net/Assembly-Primer-for-Hackers-(Part-6)-Moving-Data-video.aspx


Comments and Feedback welcome!

I will be creating the next set of videos over the weekend.



Edited 1 time(s). Last edit at 04/04/2009 01:17PM by ramaz.

These videos are great! I've learned quite a bit from them
so far and they have sparked an interest to learn more about
BoF's and ASM.

Thanks ramaz, looking forward to next weeks ;)

Great series. Do you plan to do any more in the programming worms series?

-----------------------------------------------------------------------
(ú=(θ='',[µ=!(Φ=!θ+{})+θ,Θ=Φ[ø=+!θ]+Φ[+θ],ĩ=µ[ø],Ø=µ[º=ø+++ø],Ç=Φ[º+ø],à=ú[Φ[º+º]+Φ[+θ]+Ç+ĩ]][Ø+Ç+Θ])())[ĩ+à('•êí')](Ç+à('Á«)'))

Thanks for this ;)

http://www.security-net.biz/

Thanks All for your encouragement :)

I am really happy many of you found these videos useful.

Matt,

Yes, I will be making video tuts on exploitation techniques such as buffer overflows, heap overflows etc, reverse engineering, virus and worm programming after this.

As ASM is required for all the above, i decided to make the primer videos first :D

Hello All,

The next 2 videos in the series are as follows:

7. Working with Strings:

In this video we will look at how to work with strings in assembly using the MOVS, STOS, REP etc. instruction sets.

http://securitytube.net/Assembly-Primer-for-Hackers-(Part-7)-Working-with-Strings-video.aspx

8. Unconditional branching:

In this video we will look at how to perform unconditional branching in assembly using the JMP and CALL instruction sets.

http://securitytube.net/Assembly-Primer-for-Hackers-(Part-8)-Unconditional-Branching-video.aspx

Comments and Feedback welcome !

I will try to complete the entire Assembly language videos in the next 2 weeks :)

great work so far man, thanx a lot. i never really wanted to learn asm but now i might as well, you made it so easy.

@ramaz

Any windows specific videos planned?

------------------------------------------------------------------------------------------------------------
"People who say it cannot be done should not interrupt those who are doing it.";
labs : [www.businessinfo.co.uk]
blog : [www.thespanner.co.uk]
Hackvertor : [hackvertor.co.uk]

@Gareth

yes, windows asm is planned and I will post them here when done.

Hello All,

Here are the next videos in the series:

9. Conditional Branching using the Jump family of instructions

http://securitytube.net/Assembly-Primer-for-Hackers-(Part-9)-Conditional-Branching-video.aspx

10. Writing Functions in Assembly

http://securitytube.net/Assembly-Primer-for-Hackers-(Part-10)-Functions-video.aspx

11. Passing arguments to functions using the Stack

http://securitytube.net/Assembly-Primer-for-Hackers-(Part-11)-Functions-Stack-video.aspx

Enjoy!

Btw, SecurityTube now offers professional certifications for Wireless, Metasploit etc. and also gives our free course material to universities for use: http://securitytube-training.com