tag:blogger.com,1999:blog-14788166.post6495079821893274399..comments2008-04-28T19:46:48.366+02:00Comments on nzight: Digging up system call ordinalsEro Carrerahttp://www.blogger.com/profile/12212132879580765574noreply@blogger.comBlogger4125tag:blogger.com,1999:blog-14788166.post-28298001722586359102008-03-07T10:36:00.000+01:002008-03-07T10:36:00.000+01:00Thanks for the link to metasploit's syscall list. ...Thanks for the link to metasploit's syscall list. I knew something like that had to exist somewhere.Ero Carrerahttp://www.blogger.com/profile/12212132879580765574noreply@blogger.comtag:blogger.com,1999:blog-14788166.post-39518577573454491942008-03-07T09:54:00.000+01:002008-03-07T09:54:00.000+01:00I've written something similar some time ago, only...I've written something similar some time ago, only that my tool runs on live system and uses MS online symbol store to recognize syscall functions. I'ts a bit old and not that pretty, but you can check it out here:<BR/>http://omeg.pl/code/syscall.zip<BR/>It's not also fully Vista compatible yet (lists syscalls, but doesn't properly recognize end of table - quick fix I suppose but I'm lazy :).omeghttps://www.openrce.org/blog/browse/omegnoreply@blogger.comtag:blogger.com,1999:blog-14788166.post-14454774790438754992008-03-07T08:28:00.000+01:002008-03-07T08:28:00.000+01:00Here's a pre-computed table of syscall numbers:met...Here's a pre-computed table of syscall numbers:<BR/><BR/><A HREF="http://www.metasploit.com/users/opcode/syscalls.html" REL="nofollow">metasploit syscall list</A>Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-14788166.post-55798191077047006162008-03-07T03:14:00.000+01:002008-03-07T03:14:00.000+01:00http://www.metasploit.com/users/opcode/syscalls.ht...http://www.metasploit.com/users/opcode/syscalls.htmlAnonymousnoreply@blogger.com