Metasploit mailing list archives

mcafee Entercept

From: DAVID.G.WESTON at saic.com (Weston, David G.)
Date: Tue, 30 Oct 2007 08:22:01 -0700

Hi All,
  Has anyone had luck with various payloads and mcafee entercept?
Theres a paper out of the Naval War college
http://www.nps.navy.mil/Content/CS/ncrowe/oldstudents/labbe_thesis.htm
where the author test various exploits from metasploit/core vs mcafee
entercept and cisco security agent.  Does anyone have any experience in
this area?  There's a paper in Phrack 62 about evading third party
buffer overflow protection and I have had some success with the
technique of using a return address in the process space marked
read-only for the final stack frame but does anyone having tricks to add
to this?

Thanks,
Dave

Current thread:

Problem with Apache Win32 Chunked Encoding bluefoxy (Oct 30)
- Problem with Apache Win32 Chunked Encoding Rhys Kidd (Oct 30)
  - Problem with Apache Win32 Chunked Encoding bluefoxy (Oct 30)
    - Problem with Apache Win32 Chunked Encoding Rhys Kidd (Oct 30)
    - Problem with Apache Win32 Chunked Encoding bluefoxy (Oct 30)
    - mcafee Entercept Weston, David G. (Oct 30)
    - mcafee Entercept H D Moore (Oct 30)
    - Problem with Apache Win32 Chunked Encoding Patrick Webster (Oct 30)
    - Problem with Apache Win32 Chunked Encoding Mr Gabriel (Oct 31)
    - Problem with Apache Win32 Chunked Encoding bluefoxy (Nov 01)
    - Problem with Apache Win32 Chunked Encoding Kurt Grutzmacher (Nov 01)
    - Problem with Apache Win32 Chunked Encoding Patrick Webster (Nov 01)