Tiger Mosquito

[Dave Aitel <dave () immunityinc com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Another day, another MSRPC bug down. I think Sinan kicked out a couple
other bugs from MS Tuesday today while I was messing with alignments
and shellcode. The tiger mosquito that's been stalking me for weeks
got killed today too, but I mourn that less. How can they disappear so
well into thin air? It's like they evolved specifically to target the
human eye's perception of motion in florescent light.

I think there's a way to make MS06-040 perfectly reliable on
everything except XP SP2 and 2K3 SP1 because you can force it to copy
to a place of  your choosing (like say, a function pointer table, or
whatever you feel like), but I'll leave that for the worm authors of
tomorrow. With a bit more work I bet you can own XP SP2 - the exploit
primitive here is pretty powerful.

When I met Ben Fathi at the MS party in Vegas he didn't seem stressed
at all for someone with this kind of Tuesday coming up. He seemed
calm. Collected. I think he bears a slight resemblance to Obi-Wan in
the original Star Wars.

- -dave

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.4 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iD8DBQFE2UG4B8JNm+PA+iURAjHSAJ9gmwOKvrhThyKZ8GMQ69xydqLubACgyJF1
RDrU55RzqLHLbhYVxDLYsFY=
=lIEO
-----END PGP SIGNATURE-----

_______________________________________________
Dailydave mailing list
Dailydave () lists immunitysec com
http://lists.immunitysec.com/mailman/listinfo/dailydave