mailing list archives
"Fire and forget" exploits?
From: "Brendan Dolan-Gavitt" <mooyix () gmail com>
Date: Fri, 20 Oct 2006 10:34:19 -0400
I'm looking for examples of (remote) security vulnerabilities whose
exploitation involves no guesswork--eg, no bruteforcing the return
address, or altering your exploit based on the server's response, etc.
It seems like this kind of exploit is dying out, particularly as
different flavors of Linux proliferate, each with their own slightly
different libc and userland; in the Windows world, however, we still
find "universal" exploits that work on NT4/2k/XP over a variety of
Anyways, if anyone has come across things like this, I'd greatly
appreciate hearing about it. I'm working on some new methods to
deliver exploits at once while minimizing recon.
Full-Disclosure - We believe in it.
Hosted and sponsored by Secunia - http://secunia.com/
- "Fire and forget" exploits? Brendan Dolan-Gavitt (Oct 20)