full-disclosure - tiny PE now at... 304 bytes. Is this the end?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <Pine.LNX.4.21.0610200633040.10850-100000@linuxbox.org>
Date: Fri, 20 Oct 2006 06:33:32 -0500 (CDT)
From: Gadi Evron <ge@...uxbox.org>
To: full-disclosure@...ts.grok.org.uk
Cc: funsec@...uxbox.org
Subject: tiny PE now at... 304 bytes. Is this the end?

Gil kept working on tiny PE, and many others started pitching in ideas.

Apparently, one of the latest idea Gil was playin with (as mentioned in
his first post) Optional Header Size. Apparently, as two reversers in anti
virus companies let him know, a virus played with this too, which got tiny
PE down to 330 bytes.

After more games, as he described below, it's now at 304 bytes and I
wonder who will shave those 4 bytes off?

Tiny PE v.3 can be found here:
http://ragestorm.net/tiny/tiny3.exe

Blog on details here:
http://blogs.securiteam.com/index.php/archives/690

	Gadi.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/