Full Disclosure mailing list archives
Blog Entry of Interest
From: Ben <comsatcat () earthlink net>
Date: Mon, 31 Dec 2007 02:07:23 -0700 (GMT-07:00)
I just updated my blog with an analysis of a level on a wargame I was playing (pulltheplug). It gives a technical overview (hopefully without ruining the level) of a successfull attack on a PAX secured system (non-exec stack) exploiting a stack buffer overflow on a statically linked multi threaded binary... thought some of you may find it of interest, plus I'm sure some of you how a much cleaner way of exploitation. I'd like to hear your ideas/feedback. Its a quick dirty write up so parden grammer/spelling. http://www.socialnetworkwhore.com/index.php?blog=5&title=exploring_vortex_level_12&more=1&c=1&tb=1&pb=1 _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Blog Entry of Interest Ben (Dec 31)
- Re: Blog Entry of Interest James Matthews (Dec 31)