linux 2.6 stack randomization

[sebastiaan.veenstra at gmail.com (Sebastiaan Veenstra)]

Hi,

I've read a bit about some patches today introducing stack randomization
into the 2.6 kernel. With these patches, a stack overflowable buffer is
located on a different memory address for each invocation of the vulnarable
program. Thus, storing shellcode in a stack overflowable buffer and
overwriting the return address with the address of the buffer is no longer
possible since the buffer is stored on a completely different stack address
among subsequent invocations of the program. Even by utilizing a nop sled
it's not possible. How does the metasploit framework anticipate to this kind
of behavior? Are there any facilities in the new framework to automate the
exploitation process in such a situation?

With kind regards,

Sebastiaan
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.metasploit.com/pipermail/framework/attachments/20051217/37e3c4fc/attachment.htm>