Understanding Attackers and Shellcode for Cybersecurity

Part - A
1. We can construct a whole scientific categorization of attackers on arrange
security by understanding abuse programs, which exploit bugs in
programming running on helpless frameworks, these projects' specialized
abilities and their association with the individuals who create and utilize
them.
 Attack Vector - It is a method which uses trick to expose several
malware. An attack vector with programming flaws, the arrangement
of activities which is required to intiate the nutty bit of the program.
Attackers exploit bugs in programming running on powerless
frameworks. Though, skills and intentions of an attacker can be
analyzed by using some tools and techniques.
 Encoding Marshelling - Another type that is executed is small steps
due to limitation of amount of data that can be injected in target’s
machine. Network assets can be made unavailable to
the intended customers to apply with the aid of using the Denial
of provider technique that consists of inquiring for a
selected resource from the server machine that generally that it's far
unable to reaction making it unavailable for the meant customers to
apply it.
 Stagers- Hackers accessible can use numerous websites where they
are able to conceal their malicious Shellcode(s)/infected files in a
few faux links or downloadable files so that after user clicks
or download that record that attached Shellcode receives injected into
their machine making them prone to unauthorized access and manage
of machine resources, packages and information.
2. Insertion attack - In insertion attack, the attacker attempts to befuddle the
IDS by sending invalid bundles. The assailant creates a deformed parcel
such that the end framework deciphers the assault payload accurately yet the
IDS can't perceive the attack.
Denial of Service - Numerous IDS frameworks utilize a brought together
logging server to log all occasions and events. On the off chance that the
attacker know the IP address of this unified logging server, they can dispatch

a foreswearing of-benefit assault on that server with the goal that the IDS
won't have the capacity to log any more occasions.
Obfuscating and coding - This is frequently utilized for security and
protection reasons. Encoding is a comparable method for changing over
plain content into an extraordinary arrangement and is for the most part
utilized for web transmissions.
Session Fragmentation - Session grafting and discontinuity include breaking,
cutting, and part parcels into various pieces with the end goal that no single
bundle makes the IDS trigger a caution. Numerous IDS frameworks have a
tendency to disregard parcel recreation before a bundle is coordinated
against the mark database.
3. It is a noteworthy reason machine enroll that identifies the running with
manage held for execution. With the ability to control the program counter,
assailant frequently have an incident's machine to execute (sensibly present)
application or structure code in a path beneficial to an attacker's motivation.
For instance, return to-libc strikes give an inside and out detailed event of
this kind of control. In a code-mix catch, notwithstanding, attackers include
the program counter to execute code passed on by the assailant themselves.
 An attack vector is the component with programming blemishes, it's the
course of action of exercises required to reach and trigger the nutty piece of
the program.
 It can be achieved by entering an incorrect authentication details in order to
block the account of the specific user. Payment systems and the account
systems can also be hacked over a network domain to gather customer
account details and passwords.
4. There are two advantages to utilize an alphanumeric Shellcode encoder –
 To encode bytes not permitted by the powerless application.
 To dodge recognition by an Intrusion Detection framework.
Despite the fact that the primary case is ostensibly the more typical event,
and despite the fact that there may be more space for change there, I have
concentrated my work on the second.

Part – B
1. #include <stdio.h>
#define MAX_LEN 80
main (int argc, char *argv[])
{
char a_word[MAX_LEN];
char a_pass[MAX_LEN];
printf ("Enter a username: ");
scanf ("%s", a_word);
printf ("Enter a Password: ");
scanf ("%s", a_pass);
return 0;
}
2. #include <stdio.h>
#define MAX_LEN 80
main (int argc, char *argv[])
{
char a_word[MAX_LEN];
char a_pass[MAX_LEN];
char a_passagain[MAX_LEN];
printf ("Enter a username: ");
scanf ("%s", a_word);