Vulnerability Development mailing list archives

Re: Blind Remote Buffer Overflow


From: 11a () GMX NET (Bluefish)
Date: Tue, 2 May 2000 12:15:39 +0200


I was thinking of a forking deamon, where a none-working overflow only
coredumps one session (like e.g apache httpd). Assuming that the overflow
was found by trying different overflow sizes, it seems safe to say that
it's such a deamon.

Then there's no need to make a single overflow do everything. The cons
with it that it would be huge, very hard to code, and wouldn't fit to most
small bufferts. Except that, sounds fun to write code which executes upon
more than one architecture ;)

Ahh.. now this could be really cool, if only as an exercise.  Is anyone
aware of a set of bytes that will execute on two or more processor
architectures, and branch accordingly without bombing?  We'd also need
something that could operate as a NOP for multiple architectures, too.
Who knows their x86 and Sparc opcodes really well?

..:::::::::::::::::::::::::::::::::::::::::::::::::..
     http://www.11a.nu || http://bluefish.11a.nu
    eleventh alliance development & security team


Current thread: