Blog Entry of Interest
Ben <[email protected]> Mon, 31 Dec 2007 02:07:23 -0700 (GMT-07:00)
| Newsgroups | gmane.comp.security.full-disclosure,gmane.comp.security.vulnerabilities |
|---|---|
| Message-ID | <31445124.1199092043150.JavaMail.root@elwamui-sweet.atl.sa.earthlink.net> |
I just updated my blog with an analysis of a level on a wargame I was playing (pulltheplug). It gives a technical overview (hopefully without ruining the level) of a successfull attack on a PAX secured system (non-exec stack) exploiting a stack buffer overflow on a statically linked multi threaded binary... thought some of you may find it of interest, plus I'm sure some of you how a much cleaner way of exploitation. I'd like to hear your ideas/feedback. Its a quick dirty write up so parden grammer/spelling. http://www.socialnetworkwhore.com/index.php?blog=5&title=exploring_vortex_level_12&more=1&c=1&tb=1&pb=1 _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/