Re: Format String Bugs/Remote Shellcode

[Robert van der Meulen <rvdm () LIN-GEN COM>]

Hi,

Quoting Barry Russell (bjz11600 () PRODIGY NET):
> I was wondering if anyone knows any good texts on Format String Bugs and
> texts on constructing shellcode for remote exploits? Please help anyway
> you can, thanks.
http://www.cse.nau.edu/~mc8/whitepapers/locale_sol.txt
http://www.net-security.org/text/articles/string.shtml

The first one is an in-detail locale formatstring format string exploit,
with lots of comments and how-did-i-do-this stuff.
The second is a paper by Tim Newsham (originally pdf, i think), and
practically a tutorial.

Greets,
        Robert

p.s. Both of these _will_ show up in a google search.

--
                                Linux Generation