Re: rootkit.com article

["wirepair" <wirepair () roguemail net>]

That is definitly a slick technique, too bad it doesn't have anything about the format
of the string being oddly changed to unicode, but not containing the 00's.
Problem I'm running into right now, kinda hard to overwrite anything useful (seeing as how
handlers/exception filters are > 7f). 
-wire

On Tue, 27 Jan 2004 18:29:41 -0500
 Dave Aitel <dave () immunitysec com> wrote:
> I think its cool how greg hoglund documented some part of canvas that I never did. :>
>
> http://www.rootkit.com/newsread.php?newsid=45
>
> -dave
> _______________________________________________
> Dailydave mailing list
> Dailydave () lists immunitysec com
> http://www.immunitysec.com/mailman/listinfo/dailydave

--
Visit Things From Another World for the best
comics, movies, toys, collectibles and more.
http://www.tfaw.com/?qt=wmf
_______________________________________________
Dailydave mailing list
Dailydave () lists immunitysec com
http://www.immunitysec.com/mailman/listinfo/dailydave