full-disclosure - Blog Entry of Interest

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <31445124.1199092043150.JavaMail.root@elwamui-sweet.atl.sa.earthlink.net>
Date: Mon, 31 Dec 2007 02:07:23 -0700 (GMT-07:00)
From: Ben <comsatcat@...thlink.net>
To: full-disclosure@...ts.grok.org.uk, vuln-dev@...urityfocus.com
Subject: Blog Entry of Interest

I just updated my blog with an analysis of a level on a wargame I was playing (pulltheplug).  It gives a technical overview (hopefully without ruining the level) of a successfull attack on a PAX secured system (non-exec stack) exploiting a stack buffer overflow on a statically linked multi threaded binary... thought some of you may find it of interest, plus I'm sure some of you how a much cleaner way of exploitation.  I'd like to hear your ideas/feedback.  Its a quick dirty write up so parden grammer/spelling.

http://www.socialnetworkwhore.com/index.php?blog=5&title=exploring_vortex_level_12&more=1&c=1&tb=1&pb=1

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/