OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Tim Hollebeek (thollebeekcigital.com)
Date: Wed Oct 24 2001 - 18:55:52 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    > stop buffer overflows payloads. Note payloads ! If you can't
    > push bianry data to a function then its damn hard to contruct
    > a decent payload.

    It's easier than you'd think at first. Remember, all you have to
    write in the restricted set is *any* ASCII->binary decoding loop,
    not the full exploit. That "loader" then decodes and runs the rest
    of the exploit.

    That still isn't easy, but ...