RELRO
Gaetano Zappulla <[email protected]> Tue, 17 Apr 2007 15:19:18 +0200
| Newsgroups | gmane.comp.security.italian.devel |
|---|---|
| Message-ID | <[email protected]> |
--===============1107284796== Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed Content-Transfer-Encoding: 7bit --- RELRO is used on newer Linux distributions to place commonly exploited structures in ELF binaries to a quasi-readonly location. Especially the GOT, often used within heap based exploits is made read-only after relocation by the dynamic linker. Today I analyzed how exploits could be done in future nevertheless of NX, ASLR, RELRO etc. An ASCII-file describing exploitation via fini() can be found here: http://www.suse.de/~krahmer/relro.txt --- -- Gaetano Zappulla http:// blog.bacarospo.net/ mail : echo "d^bq^kl=pfhrobww^+lod" | perl -pe 's/(.)/chr(ord($1)+3)/ge' --===============1107284796== Content-Type: text/plain; charset="iso-8859-1" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Content-Disposition: inline ________________________________________________________ http://www.sikurezza.org - Italian Security Mailing List --===============1107284796==--