full-disclosure - Re: "Fire and forget" exploits?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-id: <4539EEA9.6648.2FCEF1C0@nick.virus-l.demon.co.uk>
Date: Sat, 21 Oct 2006 09:55:53 +1300
From: Nick FitzGerald <nick@...us-l.demon.co.uk>
To: full-disclosure <full-disclosure@...ts.grok.org.uk>
Subject: Re: "Fire and forget" exploits?

Brendan Dolan-Gavitt wrote:

>   I'm looking for examples of (remote) security vulnerabilities whose
> exploitation involves no guesswork--eg, no bruteforcing the return
> address, or altering your exploit based on the server's response, etc.
>   It seems like this kind of exploit is dying out, particularly as
> different flavors of Linux proliferate, each with their own slightly
> different libc and userland; in the Windows world, however, we still
> find "universal" exploits that work on NT4/2k/XP over a variety of
> service packs.

I don't think this is the main reason such exploits are less commonly 
seen these days.

A great deal of "hackish activity" is now directly or indirectly 
focussed on spamming, identity theft and related scams, and the money 
laundering that necesarily trails along behind such activity.  In 
general, all these folk need to achieve their ends are stupid bugs in 
web applications.  The web is replete with crappily written, widely 
deployed PHP schlock that more than fulfills these folks needs.  As 
they make money from working this plentiful low-hanging fruit, there is 
little motivation for many of them to spend the time and effort on the 
much more elusive grand exploits of days gone by...

In fact, they generaly want to stay _under_ the radar for as long as 
possible -- their business model depends on it -- rather than making 
the big splash on CNN, doing a Markoff interview/book/movie deal, etc, 
etc...

Regards,

Nick FitzGerald

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/