full-disclosure - speaking of code crunching... (challenge)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <Pine.LNX.4.21.0610160513000.1101-100000@linuxbox.org>
Date: Mon, 16 Oct 2006 05:13:53 -0500 (CDT)
From: Gadi Evron <ge@...uxbox.org>
To: funsec@...uxbox.org, full-disclosure@...ts.grok.org.uk
Subject: speaking of code crunching... (challenge)

Gil Dabah (who did the cool code crunching on the unsupported systems
ZERT VML patch) just wrote some incredible code crunching. I don't
understand most of it.

The challange was to create a PE that downloads a file from the Internet
and executes it, which will be smaller than what his friends did. He got
to 411 bytes.

He intends to keep working on it to get to below 400 bytes, and posts a
sort of challenge to see if someone else can get there first (without, 
say, making the URL shorter). :)

You can find the binary here:
http://ragestorm.net/tiny/tiny.exe

You can find his blog entry on what he did to achieve this, and the
challenge, here:
http://blogs.securiteam.com/index.php/archives/675

	Gadi.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/