OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: [Full-Disclosure] On Polymorphic Evasion

From: Ali Campbell (fdisclosurealicampbell.org.uk)
Date: Sat Oct 02 2004 - 13:49:19 CDT

Does the fixed-length nature of RISC instructions make detecting a
shellcode on a platform such as PPC via IDS easier ? Or does the larger
availability of pseudo-NOP instructions on these platforms (owing
chiefly to more combinations of registers being available) in fact make
it harder ?

I wrote some shellcode for OS X once, basically as an exercise, and I
caught myself wondering about this.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html