How to "TS3 Stuff"-Coding

[GlumiChan]

Hi Guys

At first, im not new into Coding... (Maybe not so long as someone of you, but at least 6 Years)

Can someone give me some Hints (Which Docs, which .dll of TS3 etc.) i have to look at. (I dont want a "Step by Step [How To] Coding Exploit"), im just interessted in which Files are needed. (It would save time for me in the first place thanks)

Sry for English, im German ^^

 

[Asphyxia]

Client Customization Plugin SDK 3.0.18.1 --- This is how we made the avatar crash tool. @ehthe made the first one for Linux, then I made one for Windows.

Start working on plugins, then once you understand how to make some different plugins just start checking the overall security of TeamSpeak. You may eventually want to move on to being able to hook the server/client, that is classified information though. We are not handing out information so that everyone may start exploiting TeamSpeak 3 on their own --- we make demonstration/example projects to showcase insecurities. We don't want everyone using TeamSpeak 3 to become infected.

Eventually you may want to get involved in reverse engineering: http://www.foo.be/cours/dess-201220...ecrets_of_Reverse_Engineering-Wiley(2005).pdf

This will go in-depth into how you may reverse programs:

Reversing Tools 109
Different Reversing Approaches 110
Offline Code Analysis (Dead-Listing) 110
Live Code Analysis 110
Disassemblers 110
IDA Pro 112
ILDasm 115
Debuggers 116
User-Mode Debuggers 118
OllyDbg 118
User Debugging in WinDbg 119
IDA Pro 121
PEBrowse Professional Interactive 122
Kernel-Mode Debuggers 122
Kernel Debugging in WinDbg 123
Numega SoftICE 124
Kernel Debugging on Virtual Machines 127
Decompilers 129
System-Monitoring Tools 129
Patching Tools 131
Hex Workshop 131
Miscellaneous Reversing Tools 133
Executable-Dumping Tools 133
DUMPBIN 133
PEView 137
PEBrowse Professional 137
Conclusion 138

 

[kingston]

IDA Pro, my friend, is your friend. The only friend. Well. The best friend that is

 

[Asphyxia]

IDA Pro, my friend, is your friend. The only friend. Well. The best friend that is

There are other tools that work too:
http://reverseengineering.stackexch...17/is-there-any-disassembler-to-rival-ida-pro

https://news.ycombinator.com/item?id=5066017

This guy did hammer it fairly well though on the previous ycomb link.

Ollydbg has more or less given way to Immunity Debugger, which is what you should be checking out if that's the flavor of reversing tool you're after.
I don't know a lot of people who use IDA as a debugger and like it.
On the other hand, IDA's a better disassembler (and not just because it handles multiple architectures) than Olly. It's the industry standard for a good reason.
Hopper.app is giving it a run for its money on x86 and ARM. Hopper is all I use now.
I think it's ironic that people think IDA is too expensive; it's not expensive enough, given its total addressable market. IDA's prices are so low that they artificially depress the market for all reverse engineering tools, which anchor or orbit around IDA's price point. Hex-Rays is trying to break out of that with the decompiler, but then Hopper did a good-enough decompiler and bundled it into a $100 tool.
Professionals that use IDA (a) rely on it heavily (b) can use the same version of IDA for years and years (c) routinely bill out over 250-300/hr and (d) number in the tens of thousands. It's an interesting business case study.

On Windows, I would use: http://www.immunityinc.com/products/debugger/
On Linux/Mac I would use: http://hopperapp.com/
If you're doing professional work I would use: https://www.hex-rays.com/products/ida/

I see a lot of people use IDA Pro for personal use. While this is fine, I think a lot of times it is overkill for most people and the pricing is unjust for personal use ($3,000). If you are a professional reverse engineer, I can see why you would be inclined to buy $3,000 software although for most people's usage, you can do equivalent things with Immunity/IDA and Hopper among other useful reversing tools.

Don't believe me? Try to find where it says exclusively they're only hiring an IDA Pro user: https://www.reddit.com/r/ReverseEng...s/rreverseengineerings_q2_2013_hiring_thread/

Knowledge of the following tools: IDA, OllyDbg, WINDbg, softice, SYSER Remote work with about 50% travel, need candidates to be in the continental US.

 

[kingston]

That's a pretty interesting and juicy thread i must say.

 

[GlumiChan]

Thank you Guys

2nd Question, is there any Documentation of an OLD Bug/Exploit/whatever?

 

[Bluscream]

You mean https://r4p3.net/threads/exploit-overview.469/ ?