|
Full Disclosure
mailing list archives
Blog Entry of Interest
From: Ben <comsatcat () earthlink net>
Date: Mon, 31 Dec 2007 02:07:23 -0700 (GMT-07:00)
I just updated my blog with an analysis of a level on a wargame I was playing (pulltheplug). It gives a technical
overview (hopefully without ruining the level) of a successfull attack on a PAX secured system (non-exec stack)
exploiting a stack buffer overflow on a statically linked multi threaded binary... thought some of you may find it of
interest, plus I'm sure some of you how a much cleaner way of exploitation. I'd like to hear your ideas/feedback. Its
a quick dirty write up so parden grammer/spelling.
http://www.socialnetworkwhore.com/index.php?blog=5&title=exploring_vortex_level_12&more=1&c=1&tb=1&pb=1
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
By Date
By Thread
Current thread:
- Blog Entry of Interest Ben (Dec 31)
|