OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: [Dailydave] rootkit.com article

From: wirepair (wirepairroguemail.net)
Date: Tue Jan 27 2004 - 19:00:58 CST


That is definitly a slick technique, too bad it doesn't have anything about the format
of the string being oddly changed to unicode, but not containing the 00's.
Problem I'm running into right now, kinda hard to overwrite anything useful (seeing as how
handlers/exception filters are > 7f).
-wire

On Tue, 27 Jan 2004 18:29:41 -0500
  Dave Aitel <daveimmunitysec.com> wrote:
>I think its cool how greg hoglund documented some part of canvas that I never did. :>
>
>http://www.rootkit.com/newsread.php?newsid=45
>
>-dave
>_______________________________________________
>Dailydave mailing list
>Dailydavelists.immunitysec.com
>http://www.immunitysec.com/mailman/listinfo/dailydave

--
Visit Things From Another World for the best
comics, movies, toys, collectibles and more.
http://www.tfaw.com/?qt=wmf