Re: A 3 a.m. Riddle

[Piotr Bania <bania.piotr () gmail com>]

>    inc [edi]   // you control edi
> What would be the best option for edi?

If i were you, I would look for any "suitable" pointer (specially 
function pointers) that lay in the writeable area. And this seems to be 
the most effective scenerio, not only in w2k. Of course there exist a 
lot of more different ones, so it mostly depends on your imagination.


best regards,
pb

-- 
--------------------------------------------------------------------
Piotr Bania - <bania.piotr () gmail com> - 0xCD, 0x19
Fingerprint: 413E 51C7 912E 3D4E A62A  BFA4 1FF6 689F BE43 AC33
http://www.piotrbania.com  - Key ID: 0xBE43AC33
--------------------------------------------------------------------

               - "The more I learn about men, the more I love dogs."
_______________________________________________
Dailydave mailing list
Dailydave () lists immunitysec com
http://lists.immunitysec.com/mailman/listinfo/dailydave