Re: [VulnDiscuss] Main thread's exception handler

Hey all,

> This method would require you to have a pointer to your shellcode on
> the main thread's stack, and be able to force an exception in the main
> thread, if you can only do one reliable write, correct?

I mentioned that it is next to useless in single-write scenarios. It
was originally used mostly in format string exploits, and is still only
really useful in multi-write scenarios where you hijack the SEH top,
patch the stack top/bottom var in the TEB, and then patch stub instructions
onto the same page. Do not use this for single-write scenarios.

Cheers,
Halvar

-- 
NEU : GMX Internet.FreeDSL
Ab sofort DSL-Tarif ohne Grundgebühr: http://www.gmx.net/dsl