{"id":478988,"date":"2023-08-09T09:41:22","date_gmt":"2023-08-09T09:41:22","guid":{"rendered":""},"modified":"2023-09-05T11:17:56","modified_gmt":"2023-09-05T11:17:56","slug":"shellcode","status":"publish","type":"wiki","link":"https:\/\/oneproxy.pro\/vn\/wiki\/shellcode\/","title":{"rendered":"m\u00e3 v\u1ecf"},"content":{"rendered":"<p>Shellcode l\u00e0 m\u1ed9t lo\u1ea1i m\u00e3 trong b\u1ea3o m\u1eadt m\u00e1y t\u00ednh \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng \u0111\u1ec3 ki\u1ec3m so\u00e1t h\u00e0nh vi c\u1ee7a ch\u01b0\u01a1ng tr\u00ecnh ph\u1ea7n m\u1ec1m \u0111\u01b0\u1ee3c nh\u1eafm m\u1ee5c ti\u00eau th\u00f4ng qua vi\u1ec7c khai th\u00e1c l\u1ed7 h\u1ed5ng ph\u1ea7n m\u1ec1m. N\u00f3 \u0111\u01b0\u1ee3c \u0111\u1eb7t t\u00ean l\u00e0 \u201cshellcode\u201d v\u00ec n\u00f3 th\u01b0\u1eddng kh\u1edfi \u0111\u1ed9ng m\u1ed9t shell l\u1ec7nh m\u00e0 t\u1eeb \u0111\u00f3 k\u1ebb t\u1ea5n c\u00f4ng c\u00f3 th\u1ec3 \u0111i\u1ec1u khi\u1ec3n h\u1ec7 th\u1ed1ng. D\u01b0\u1edbi \u0111\u00e2y l\u00e0 c\u00e1i nh\u00ecn to\u00e0n di\u1ec7n v\u1ec1 y\u1ebfu t\u1ed1 quan tr\u1ecdng n\u00e0y trong an ninh m\u1ea1ng.<\/p>\n<h2>L\u1ecbch s\u1eed ngu\u1ed3n g\u1ed1c c\u1ee7a Shellcode v\u00e0 s\u1ef1 \u0111\u1ec1 c\u1eadp \u0111\u1ea7u ti\u00ean v\u1ec1 n\u00f3<\/h2>\n<p>Shellcode c\u00f3 ngu\u1ed3n g\u1ed1c t\u1eeb nh\u1eefng ng\u00e0y \u0111\u1ea7u ti\u00ean c\u1ee7a m\u00e1y t\u00ednh n\u1ed1i m\u1ea1ng, n\u01a1i b\u1ea3o m\u1eadt kh\u00f4ng \u0111\u01b0\u1ee3c hi\u1ec3u r\u00f5 ho\u1eb7c tri\u1ec3n khai m\u1ea1nh m\u1ebd nh\u01b0 ng\u00e0y nay.<\/p>\n<ul>\n<li><strong>\u0110\u1ea7u nh\u1eefng n\u0103m 1980<\/strong>: Thu\u1eadt ng\u1eef \u201cshellcode\u201d c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c \u0111\u1eb7t ra l\u1ea7n \u0111\u1ea7u ti\u00ean trong th\u1eddi k\u1ef3 n\u00e0y, trong l\u00e0n s\u00f3ng hack UNIX \u0111\u1ea7u ti\u00ean.<\/li>\n<li><strong>Cu\u1ed1i th\u1eadp ni\u00ean 1990<\/strong>: V\u1edbi s\u1ef1 m\u1edf r\u1ed9ng c\u1ee7a Internet, shellcode b\u1eaft \u0111\u1ea7u \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng v\u00e0 nghi\u00ean c\u1ee9u r\u1ed9ng r\u00e3i h\u01a1n, \u0111\u1eb7c bi\u1ec7t khi c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng tr\u00e0n b\u1ed9 \u0111\u1ec7m tr\u1edf n\u00ean ph\u1ed5 bi\u1ebfn h\u01a1n.<\/li>\n<\/ul>\n<h2>Th\u00f4ng tin chi ti\u1ebft v\u1ec1 Shellcode: M\u1edf r\u1ed9ng ch\u1ee7 \u0111\u1ec1<\/h2>\n<p>Shellcode v\u1ec1 c\u01a1 b\u1ea3n l\u00e0 m\u1ed9t danh s\u00e1ch c\u00e1c h\u01b0\u1edbng d\u1eabn \u0111\u01b0\u1ee3c so\u1ea1n th\u1ea3o c\u1ea9n th\u1eadn m\u00e0 ch\u01b0\u01a1ng tr\u00ecnh b\u1ecb khai th\u00e1c ch\u1ea1y. Nh\u1eefng h\u01b0\u1edbng d\u1eabn n\u00e0y th\u01b0\u1eddng \u0111\u01b0\u1ee3c vi\u1ebft b\u1eb1ng m\u00e3 m\u00e1y. N\u00f3 \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng \u0111\u1ec3 thao t\u00e1c tr\u1ef1c ti\u1ebfp c\u00e1c thanh ghi v\u00e0 ch\u1ee9c n\u0103ng c\u1ee7a h\u1ec7 \u0111i\u1ec1u h\u00e0nh.<\/p>\n<h3>\u00dd ch\u00ednh:<\/h3>\n<ol>\n<li><strong>Tr\u00e0n b\u1ed9 nh\u1edb<\/strong>: \u0110i\u1ec1u n\u00e0y t\u1ea1o c\u01a1 s\u1edf cho nhi\u1ec1u c\u00e1ch khai th\u00e1c s\u1eed d\u1ee5ng shellcode, trong \u0111\u00f3 m\u1ed9t ch\u01b0\u01a1ng tr\u00ecnh ghi nhi\u1ec1u d\u1eef li\u1ec7u v\u00e0o b\u1ed9 \u0111\u1ec7m h\u01a1n m\u1ee9c n\u00f3 c\u00f3 th\u1ec3 ch\u1ee9a.<\/li>\n<li><strong>Khai th\u00e1c<\/strong>: Shellcode c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng \u0111\u1ec3 thao t\u00fang m\u1ed9t ch\u01b0\u01a1ng tr\u00ecnh ho\u1eb7c th\u1eadm ch\u00ed to\u00e0n b\u1ed9 h\u1ec7 th\u1ed1ng theo nh\u1eefng c\u00e1ch tr\u00e1i ph\u00e9p.<\/li>\n<li><strong>Kh\u1ed1i h\u00e0ng<\/strong>: \u0110\u00e2y l\u00e0 ph\u1ea7n m\u00e3 th\u1ef1c hi\u1ec7n nhi\u1ec7m v\u1ee5 \u0111\u1ed9c h\u1ea1i d\u1ef1 \u0111\u1ecbnh, ch\u1eb3ng h\u1ea1n nh\u01b0 t\u1ea1o shell.<\/li>\n<\/ol>\n<h2>C\u1ea5u tr\u00fac b\u00ean trong c\u1ee7a Shellcode: Shellcode ho\u1ea1t \u0111\u1ed9ng nh\u01b0 th\u1ebf n\u00e0o<\/h2>\n<p>Shellcode bao g\u1ed3m hai th\u00e0nh ph\u1ea7n ch\u00ednh:<\/p>\n<ol>\n<li><strong>Tr\u00ecnh t\u1ea3i<\/strong>: \u0110i\u1ec1u n\u00e0y s\u1ebd ch\u1ea1y ph\u1ea7n c\u00f2n l\u1ea1i c\u1ee7a m\u00e3 (t\u1ea3i tr\u1ecdng). N\u00f3 th\u01b0\u1eddng thi\u1ebft l\u1eadp m\u00f4i tr\u01b0\u1eddng c\u1ea7n thi\u1ebft cho t\u1ea3i tr\u1ecdng.<\/li>\n<li><strong>T\u1ea3i tr\u1ecdng<\/strong>: \u0110\u00e2y ch\u00ednh l\u00e0 m\u00e3 \u0111\u1ed9c th\u1ef1c s\u1ef1 th\u1ef1c hi\u1ec7n h\u00e0nh \u0111\u1ed9ng m\u00e0 k\u1ebb t\u1ea5n c\u00f4ng mong mu\u1ed1n.<\/li>\n<\/ol>\n<h2>Ph\u00e2n t\u00edch c\u00e1c t\u00ednh n\u0103ng ch\u00ednh c\u1ee7a Shellcode<\/h2>\n<p>M\u1ed9t s\u1ed1 t\u00ednh n\u0103ng ch\u00ednh bao g\u1ed3m:<\/p>\n<ul>\n<li><strong>K\u00edch th\u01b0\u1edbc nh\u1ecf<\/strong>: Th\u01b0\u1eddng ph\u1ea3i \u0111\u1eb7t v\u1eeba trong m\u1ed9t kh\u00f4ng gian h\u1ea1n ch\u1ebf.<\/li>\n<li><strong>V\u1ecb tr\u00ed \u0111\u1ed9c l\u1eadp<\/strong>: Kh\u00f4ng d\u1ef1a v\u00e0o \u0111\u1ecba ch\u1ec9 c\u1ee5 th\u1ec3 n\u00ean c\u00f3 th\u1ec3 ch\u1ea1y trong c\u00e1c ng\u1eef c\u1ea3nh kh\u00e1c nhau.<\/li>\n<li><strong>Kh\u00f4ng c\u00f3 byte NULL<\/strong>: Nhi\u1ec1u khi n\u00f3 kh\u00f4ng \u0111\u01b0\u1ee3c ch\u1ee9a byte NULL, v\u00ec \u0111i\u1ec1u n\u00e0y c\u00f3 th\u1ec3 ch\u1ea5m d\u1ee9t c\u00e1c chu\u1ed7i trong ch\u01b0\u01a1ng tr\u00ecnh C.<\/li>\n<\/ul>\n<h2>C\u00e1c lo\u1ea1i Shellcode: T\u1ed5ng quan<\/h2>\n<p>D\u01b0\u1edbi \u0111\u00e2y l\u00e0 danh s\u00e1ch v\u00e0 m\u00f4 t\u1ea3 ng\u1eafn g\u1ecdn v\u1ec1 c\u00e1c lo\u1ea1i kh\u00e1c nhau:<\/p>\n<ol>\n<li><strong>M\u00e3 Shell \u0111\u1ecba ph\u01b0\u01a1ng<\/strong>: \u0110\u01b0\u1ee3c s\u1eed d\u1ee5ng trong c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng v\u00e0o h\u1ec7 th\u1ed1ng c\u1ee5c b\u1ed9.<\/li>\n<li><strong>M\u00e3 shell t\u1eeb xa<\/strong>: \u0110\u01b0\u1ee3c s\u1eed d\u1ee5ng trong c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng v\u00e0o c\u00e1c h\u1ec7 th\u1ed1ng t\u1eeb xa.<\/li>\n<li><strong>T\u1ea3i xu\u1ed1ng v\u00e0 th\u1ef1c thi Shellcode<\/strong>: T\u1ea3i xu\u1ed1ng v\u00e0 th\u1ef1c thi m\u1ed9t t\u1eadp tin.<\/li>\n<li><strong>Shellcode theo giai \u0111o\u1ea1n<\/strong>: \u0110\u01b0\u1ee3c ph\u00e2n ph\u1ed1i theo t\u1eebng giai \u0111o\u1ea1n, th\u01b0\u1eddng \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng trong c\u00e1c ho\u1ea1t \u0111\u1ed9ng khai th\u00e1c ph\u1ee9c t\u1ea1p.<\/li>\n<\/ol>\n<h2>C\u00e1ch s\u1eed d\u1ee5ng Shellcode, v\u1ea5n \u0111\u1ec1 v\u00e0 gi\u1ea3i ph\u00e1p<\/h2>\n<p>Shellcode th\u01b0\u1eddng \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng trong c\u00e1c cu\u1ed9c hack phi \u0111\u1ea1o \u0111\u1ee9c nh\u01b0ng c\u0169ng c\u00f3 th\u1ec3 l\u00e0 m\u1ed9t c\u00f4ng c\u1ee5 m\u1ea1nh m\u1ebd cho c\u00e1c nh\u00e0 nghi\u00ean c\u1ee9u b\u1ea3o m\u1eadt.<\/p>\n<h3>C\u00e1c v\u1ea5n \u0111\u1ec1:<\/h3>\n<ul>\n<li>Ph\u00e1t hi\u1ec7n b\u1eb1ng c\u00e1c c\u00f4ng c\u1ee5 b\u1ea3o m\u1eadt hi\u1ec7n \u0111\u1ea1i.<\/li>\n<li>S\u1ef1 thay \u0111\u1ed5i trong c\u00e1c h\u1ec7 th\u1ed1ng v\u00e0 m\u00f4i tr\u01b0\u1eddng kh\u00e1c nhau.<\/li>\n<\/ul>\n<h3>C\u00e1c gi\u1ea3i ph\u00e1p:<\/h3>\n<ul>\n<li>Vi\u1ebft m\u00e3 \u0111a h\u00ecnh ho\u1eb7c t\u1ef1 s\u1eeda \u0111\u1ed5i.<\/li>\n<li>Th\u1eed nghi\u1ec7m trong c\u00e1c m\u00f4i tr\u01b0\u1eddng kh\u00e1c nhau.<\/li>\n<\/ul>\n<h2>C\u00e1c \u0111\u1eb7c \u0111i\u1ec3m ch\u00ednh v\u00e0 so s\u00e1nh v\u1edbi c\u00e1c thu\u1eadt ng\u1eef t\u01b0\u01a1ng t\u1ef1<\/h2>\n<table>\n<thead>\n<tr>\n<th>Thu\u1eadt ng\u1eef<\/th>\n<th>S\u1ef1 mi\u00eau t\u1ea3<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>m\u00e3 v\u1ecf<\/td>\n<td>M\u00e3 d\u00f9ng \u0111\u1ec3 khai th\u00e1c l\u1ed7 h\u1ed5ng nh\u1eb1m ki\u1ec3m so\u00e1t h\u1ec7 th\u1ed1ng<\/td>\n<\/tr>\n<tr>\n<td>Khai th\u00e1c<\/td>\n<td>M\u1ed9t c\u00e1ch \u0111\u1ec3 t\u1eadn d\u1ee5ng l\u1ed7 h\u1ed5ng<\/td>\n<\/tr>\n<tr>\n<td>Kh\u1ed1i h\u00e0ng<\/td>\n<td>M\u1ed9t ph\u1ea7n khai th\u00e1c th\u1ef1c hi\u1ec7n h\u00e0nh \u0111\u1ed9ng mong mu\u1ed1n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>Quan \u0111i\u1ec3m v\u00e0 c\u00f4ng ngh\u1ec7 c\u1ee7a t\u01b0\u01a1ng lai li\u00ean quan \u0111\u1ebfn Shellcode<\/h2>\n<p>Khi c\u00e1c h\u1ec7 th\u1ed1ng tr\u1edf n\u00ean an to\u00e0n h\u01a1n, c\u00e1c k\u1ef9 thu\u1eadt shellcode ph\u1ea3i ph\u00e1t tri\u1ec3n. C\u00e1c h\u01b0\u1edbng \u0111i trong t\u01b0\u01a1ng lai bao g\u1ed3m:<\/p>\n<ul>\n<li><strong>K\u1ef9 thu\u1eadt n\u00e9 tr\u00e1nh n\u00e2ng cao<\/strong>: \u0110\u1ec3 tr\u00e1nh b\u1ecb ph\u00e1t hi\u1ec7n.<\/li>\n<li><strong>T\u1ef1 \u0111\u1ed9ng h\u00f3a v\u00e0 AI<\/strong>: Shellcode th\u00f4ng minh h\u01a1n, th\u00edch \u1ee9ng h\u01a1n.<\/li>\n<\/ul>\n<h2>C\u00e1ch s\u1eed d\u1ee5ng ho\u1eb7c li\u00ean k\u1ebft m\u00e1y ch\u1ee7 proxy v\u1edbi Shellcode<\/h2>\n<p>C\u00e1c m\u00e1y ch\u1ee7 proxy nh\u01b0 OneProxy c\u00f3 th\u1ec3 tham gia v\u00e0o c\u00e1c ho\u1ea1t \u0111\u1ed9ng shellcode theo m\u1ed9t s\u1ed1 c\u00e1ch:<\/p>\n<ol>\n<li><strong>\u1ea9n danh<\/strong>: Nh\u1eefng k\u1ebb t\u1ea5n c\u00f4ng c\u00f3 th\u1ec3 s\u1eed d\u1ee5ng proxy \u0111\u1ec3 che gi\u1ea5u danh t\u00ednh c\u1ee7a h\u1ecd.<\/li>\n<li><strong>Nghi\u00ean c\u1ee9u b\u1ea3o m\u1eadt<\/strong>: Proxy c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng \u0111\u1ec3 nghi\u00ean c\u1ee9u c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng, honeypot ho\u1eb7c ph\u00e1t tri\u1ec3n kh\u1ea3 n\u0103ng ph\u00f2ng th\u1ee7.<\/li>\n<\/ol>\n<h2>Li\u00ean k\u1ebft li\u00ean quan<\/h2>\n<ul>\n<li><a href=\"https:\/\/www.owasp.org\/index.php\/Shellcode\" target=\"_new\" rel=\"noopener nofollow\">OWASP: M\u00e3 shell<\/a><\/li>\n<li><a href=\"https:\/\/cve.mitre.org\/\" target=\"_new\" rel=\"noopener nofollow\">MITER: K\u1ef9 thu\u1eadt Shellcode<\/a><\/li>\n<li><a href=\"https:\/\/oneproxy.pro\/vn\/\" target=\"_new\" rel=\"noopener\">OneProxy: Gi\u1ea3i ph\u00e1p b\u1ea3o m\u1eadt v\u00e0 \u1ea9n danh<\/a><\/li>\n<\/ul>\n<p>Xin l\u01b0u \u00fd r\u1eb1ng vi\u1ec7c s\u1eed d\u1ee5ng shellcode c\u00f3 \u0111\u1ea1o \u0111\u1ee9c l\u00e0 \u0111i\u1ec1u b\u1eaft bu\u1ed9c. Tham gia v\u00e0o c\u00e1c ho\u1ea1t \u0111\u1ed9ng hack tr\u00e1i ph\u00e9p l\u00e0 b\u1ea5t h\u1ee3p ph\u00e1p v\u00e0 phi \u0111\u1ea1o \u0111\u1ee9c. Lu\u00f4n t\u00ecm ki\u1ebfm s\u1ef1 cho ph\u00e9p th\u00edch h\u1ee3p v\u00e0 tu\u00e2n th\u1ee7 t\u1ea5t c\u1ea3 c\u00e1c lu\u1eadt hi\u1ec7n h\u00e0nh.<\/p>","protected":false},"featured_media":478989,"menu_order":0,"template":"","meta":{"_acf_changed":false,"content-type":"","inline_featured_image":false,"footnotes":""},"class_list":["post-478988","wiki","type-wiki","status-publish","has-post-thumbnail","hentry"],"acf":{"faq_title":"Frequently Asked Questions about <mark>Shellcode<\/mark>","faq_items":[{"question":"What is Shellcode and why is it called that?","answer":"<p>Shellcode is a type of code used in computer security to control the behavior of a targeted software program through exploitation of a software vulnerability. It is named \"shellcode\" because it often starts a command shell from which the attacker can control the system.<\/p>"},{"question":"What is the history of the origin of Shellcode?","answer":"<p>Shellcode originated in the early 1980s, likely during the initial wave of UNIX hacking. It became more widely used and studied in the late 1990s with the expansion of the Internet and the rise of buffer overflow attacks.<\/p>"},{"question":"How does Shellcode work, and what are its main components?","answer":"<p>Shellcode consists of two main components: the loader and the payload. The loader gets the payload running, often setting up the necessary environment, while the payload is the actual malicious code that performs the action the attacker wants.<\/p>"},{"question":"What are the key features of Shellcode?","answer":"<p>Key features of Shellcode include its small size, position independence (not relying on specific addresses), and the absence of NULL bytes in many instances.<\/p>"},{"question":"What types of Shellcode exist?","answer":"<p>Types of Shellcode include local shellcode (used on local systems), remote shellcode (used on remote systems), download and execute shellcode (downloads and executes a file), and staged shellcode (delivered in stages for complex exploits).<\/p>"},{"question":"What are some common problems and solutions related to Shellcode?","answer":"<p>Problems with Shellcode include detection by security tools and variations in systems. Solutions may involve writing polymorphic code and testing in various environments.<\/p>"},{"question":"How are proxy servers like OneProxy related to Shellcode?","answer":"<p>Proxy servers like OneProxy can be involved with Shellcode in providing anonymity for attackers or being used in security research, such as studying attacks or developing defenses.<\/p>"},{"question":"What are the future perspectives and technologies related to Shellcode?","answer":"<p>Future directions for Shellcode include the development of advanced evasion techniques and the use of automation and AI to create more intelligent, adaptive shellcode.<\/p>"},{"question":"Where can I find more information about Shellcode?","answer":"<p>You can find more detailed information about Shellcode at resources like <a href=\"https:\/\/www.owasp.org\/index.php\/Shellcode\" target=\"_new\">OWASP<\/a>, <a href=\"https:\/\/cve.mitre.org\/\" target=\"_new\">MITRE<\/a>, and <a href=\"https:\/\/oneproxy.pro\" target=\"_new\">OneProxy<\/a>.<\/p>"}]},"_links":{"self":[{"href":"https:\/\/oneproxy.pro\/vn\/wp-json\/wp\/v2\/wiki\/478988","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/oneproxy.pro\/vn\/wp-json\/wp\/v2\/wiki"}],"about":[{"href":"https:\/\/oneproxy.pro\/vn\/wp-json\/wp\/v2\/types\/wiki"}],"version-history":[{"count":0,"href":"https:\/\/oneproxy.pro\/vn\/wp-json\/wp\/v2\/wiki\/478988\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/oneproxy.pro\/vn\/wp-json\/wp\/v2\/media\/478989"}],"wp:attachment":[{"href":"https:\/\/oneproxy.pro\/vn\/wp-json\/wp\/v2\/media?parent=478988"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}