RELRO

Gaetano Zappulla <[email protected]> Tue, 17 Apr 2007 15:19:18 +0200
Newsgroups gmane.comp.security.italian.devel
Message-ID <[email protected]>
--===============1107284796==
Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed
Content-Transfer-Encoding: 7bit

---
RELRO is used on newer Linux distributions to place commonly  
exploited structures in ELF
binaries to a quasi-readonly location. Especially the GOT, often used  
within heap
based exploits is made read-only after relocation by the dynamic  
linker. Today I analyzed
how exploits could be done in future nevertheless of NX, ASLR, RELRO  
etc.
An ASCII-file describing exploitation via fini() can be found here:

http://www.suse.de/~krahmer/relro.txt
---

--
Gaetano Zappulla		                                 http:// 
blog.bacarospo.net/
mail : echo "d^bq^kl=pfhrobww^+lod" | perl -pe 's/(.)/chr(ord($1)+3)/ge'




--===============1107284796==
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline

________________________________________________________
http://www.sikurezza.org - Italian Security Mailing List
--===============1107284796==--