Full Disclosure mailing list archives
Re: [Code-Crunchers] windows vulnerability? [was: Re: 137 bytes]
From: Gadi Evron <ge () linuxbox org>
Date: Wed, 8 Nov 2006 09:14:48 -0600 (CST)
On Wed, 8 Nov 2006, Gil Dabah wrote:
With all due respect to Alex. It's still not the Mother. You have to install DAV support for some Windows. And Windows can read other DLL's from the network, if you set the path to point there... of course, it's not the same case, but it's also possible.
Unrelated, as to my post, I am explaining my meaning in a follow-up to FD and here. Further, thinking about it, this code execution stuff was mentioned by YOU of all people a while back. I guess I had the same epiphany. Gadi.
On 11/8/06, Gadi Evron <ge () linuxbox org> wrote:On Wed, 8 Nov 2006, onisan wrote:One thing is in this makes it even more interesting, most of thefirewallsdo not block this download, so it's smallest and most dangerousdownloaderat the same time :oWhat Alex did is very impressive! Matthew Murphy came up with the idea originally, I think, but it doesn't take from this amazing work in any way. *awe struck* I'd say more though, it's a vulnerability. If you can load a library remotely, and do so with no problems, it's a vulnerability in Windows. I am not sure of what kind quite yet. The mother of all downloaders. "The Zone has a new King!" <we're not worthy x3> -- Jeff, Coupling (BBC, UK). Gadi.-- G 2006/11/8, Solar Eclipse <solareclipse () phreedom org>:On Tue, Nov 07, 2006 at 10:56:42AM -0800, Peter Ferrie wrote:Why is the idata size present? AFAIK, no Windows version checks it. Four bytes shorter, then (stop at the idata rva non-zero byte)?You're right, you can remove the last field and bring the file sizedownto 133 bytes. That's what I get for claiming that the size can't be improved :-) Solar _______________________________________________ Code-Crunchers mailing list Code-Crunchers () whitestar linuxbox org http://whitestar.linuxbox.org/mailman/listinfo/code-crunchers_______________________________________________ Code-Crunchers mailing list Code-Crunchers () whitestar linuxbox org http://whitestar.linuxbox.org/mailman/listinfo/code-crunchers
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- windows vulnerability? [was: Re: [Code-Crunchers] 137 bytes] Gadi Evron (Nov 08)
- Message not available
- Re: windows vulnerability? [was: Re: [Code-Crunchers] 137 bytes] Thomas Pollet (Nov 08)
- Message not available
- Re: [Code-Crunchers] windows vulnerability? [was: Re: 137 bytes] Gil Dabah (Nov 08)
- Re: [Code-Crunchers] windows vulnerability? [was: Re: 137 bytes] Gadi Evron (Nov 08)